Lemlist

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Lemlist integration, but it uses a Maton API key/OAuth connection that can read and change outreach data, so users should review account access and approve writes carefully.

Use this skill only if you trust Maton to broker Lemlist OAuth access. Keep MATON_API_KEY private, specify the intended connection when multiple accounts exist, and review every campaign, lead, unsubscribe, or connection change before approving it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Approved actions could create, update, pause, or delete business outreach resources in Lemlist.

Why it was flagged

The skill exposes mutating Lemlist operations that can affect campaigns and leads, but it also requires explicit user confirmation before writes.

Skill content
Manage campaigns, leads, activities, schedules, sequences, and unsubscribes... All write operations require explicit user approval.
Recommendation

Confirm the exact campaign, lead, or connection and the intended effect before allowing any write operation.

What this means

Anyone or any agent action using this key can access the connected Lemlist account through Maton within the granted OAuth scope.

Why it was flagged

The skill relies on a Maton API key and delegated Lemlist OAuth access, which is expected for the integration but grants account-level API authority.

Skill content
All requests require the Maton API key... Authorization: Bearer $MATON_API_KEY ... Maton proxies requests ... and automatically injects your OAuth token.
Recommendation

Keep MATON_API_KEY secret, use the intended Maton connection, and revoke unused OAuth connections when no longer needed.

What this means

Business outreach data may be visible to or processed by Maton's proxy service as part of normal operation.

Why it was flagged

Lemlist requests and responses pass through Maton's gateway, so campaign, team, and lead data are mediated by a third-party service.

Skill content
Base URL: https://api.maton.ai/lemlist/api/{resource}. Maton proxies requests to api.lemlist.com/api
Recommendation

Use this only if you trust Maton as the OAuth/API broker and are comfortable routing Lemlist data through that service.