Manus
ReviewAudited by ClawScan on May 1, 2026.
Overview
This instruction-only Manus integration is purpose-aligned, but users should understand it uses Maton-managed credentials and can make approved changes in a Manus account.
Install only if you trust Maton to manage the Manus connection. Before use, set MATON_API_KEY securely, verify the intended Manus connection ID when multiple accounts exist, and approve write actions only after checking exactly what resource will be created, changed, or deleted.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If installed and used, the agent can act through the connected Manus account within the scopes allowed by that connection.
The skill requires a Maton API key and instructs the user to connect a Manus API key, giving the integration delegated access to the connected Manus account.
Authorization: Bearer $MATON_API_KEY ... Open the returned `url` in a browser to enter your Manus API key.
Use a trusted Maton account, verify the Manus connection being used, and rotate or revoke keys if you no longer need the integration.
Approved actions could create or change resources in the connected Manus account, including agent tasks or webhook configuration.
The skill documents account-mutating operations, including creating/managing tasks, projects, files, and webhooks, while also setting a clear approval requirement for writes.
Create and manage AI agent tasks, projects, files, and webhooks. ... **All write operations require explicit user approval.**
Confirm the target resource, connected account, and intended effect before approving any create, update, delete, file, or webhook operation.
Data sent to Manus through this skill may also be processed by Maton's gateway.
Requests are routed through Maton's API gateway before reaching Manus, so prompts, task data, and file-related API traffic may pass through that provider as part of the disclosed design.
Maton proxies requests to `api.manus.ai` and automatically injects your API key.
Avoid sending sensitive content unless you trust Maton and Manus for that data, and review the providers' privacy and retention policies.