MailerLite
v1.0.2MailerLite API integration with managed OAuth. Manage email subscribers, groups, campaigns, automations, and forms. Use this skill when users want to add subscribers, create email campaigns, manage groups, or work with MailerLite automations. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
⭐ 3· 3.4k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the actual behavior: SKILL.md documents MailerLite operations (subscribers, groups, campaigns, automations, webhooks) and shows requests routed through Maton endpoints (gateway.maton.ai, ctrl.maton.ai). The single required env var (MATON_API_KEY) aligns with the gateway-managed OAuth design.
Instruction Scope
Runtime instructions are limited to making HTTP requests to Maton-provided endpoints and reading the MATON_API_KEY from the environment. No instructions ask the agent to read arbitrary local files, other env vars, or to exfiltrate data to unexpected endpoints outside the Maton/MailerLite flow. The instructions do tell the user to open an OAuth URL in a browser to complete auth, which is expected for managed OAuth.
Install Mechanism
There is no install spec and no code files to write or run; this is an instruction-only skill (lowest install risk).
Credentials
Only one environment variable is required (MATON_API_KEY), which is appropriate for a gateway-based integration. Note: registry metadata lists no 'primary credential' field even though MATON_API_KEY is required — this is a minor metadata inconsistency but not a security issue by itself.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes or access to other skills' configs. The skill can be invoked autonomously (platform default), which increases blast radius only in general but is not a red flag here by itself.
Assessment
This skill appears coherent and only needs a Maton API key to proxy MailerLite API calls. Before installing, verify you trust maton.ai (and the gateway/ctrl endpoints listed) because using this skill hands Maton the ability to obtain/hold OAuth tokens on your behalf. Use a least-privilege API key if possible, store MATON_API_KEY securely, and avoid reusing high-privilege credentials. The skill has no install steps, but it will make network calls to Maton services — if you prefer, use MailerLite's official API directly instead of a third-party gateway. Finally, note the package has no homepage/source listed in the registry; if provenance matters, try to confirm the publisher (owner ID) or obtain an official source before wider deployment.Like a lobster shell, security has layers — review code before you run it.
latestvk97b6d62xz954bda6qv4v9hw5s80wrdd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY