LinkedIn API integration with managed OAuth. Share posts, manage profile, run ads, and access LinkedIn features. Use this skill when users want to share cont...
⭐ 39· 9.4k·27 current·28 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description claim a LinkedIn integration using managed OAuth; SKILL.md documents calls to gateway.maton.ai and ctrl.maton.ai for API and connection management and requires only MATON_API_KEY. The requested artifact (a Maton API key) is coherent with the stated purpose.
Instruction Scope
Runtime instructions are explicit and limited to making HTTP requests to Maton endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) and instructing the user to complete OAuth in a browser. The instructions do not request unrelated files, system paths, or extra environment variables.
Install Mechanism
No install spec and no code files beyond SKILL.md and a license — this is instruction-only, so nothing is written to disk during installation. This is the lowest-risk install category and matches the skill's content.
Credentials
Only MATON_API_KEY is required, which is proportionate to a proxied OAuth integration. However, that single key is powerful: Maton will see and act on behalf of the user's LinkedIn connections/tokens. The skill does not request unrelated credentials, but users should treat MATON_API_KEY as sensitive.
Persistence & Privilege
always is false and the skill is user-invocable; it does not demand permanent inclusion or system-wide config changes. Autonomous invocation is allowed (platform default) but not combined with other privilege escalation indicators.
Scan Findings in Context
[no_regex_findings] expected: The scanner had no code to analyze (instruction-only SKILL.md); absence of findings is expected for an instruction-only skill. This does not imply the remote endpoints are safe.
Assessment
This skill is coherent: it proxies LinkedIn calls through Maton and only needs MATON_API_KEY. Before installing, verify you trust Maton (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) because the Maton service will handle your OAuth flows and can act on your LinkedIn account. Treat MATON_API_KEY as a high-privilege secret: use a least-privilege Maton key if possible, read Maton's privacy/security docs, consider testing with a non-critical LinkedIn account, and be prepared to rotate/revoke the key if you stop using the skill. If you need direct control without a third-party proxy, prefer a skill that requires only your own LinkedIn credentials or uses official LinkedIn endpoints directly.Like a lobster shell, security has layers — review code before you run it.
latestvk9765x87eqm0py2hs86mn0ja6d84gbtc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY