Microsoft Teams

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Microsoft Teams integration, but it requires trusting Maton-managed OAuth access to Teams data and confirming any write actions carefully.

This skill appears purpose-aligned for Microsoft Teams API use. Before installing, confirm you trust Maton, understand which Microsoft account or tenant is connected, keep the API key private, use the Maton-Connection header when multiple accounts exist, and approve write actions only after checking the target and impact.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using this skill is granting a third-party gateway delegated access to Microsoft Teams resources for the connected account.

Why it was flagged

The skill relies on a Maton API key and a delegated Microsoft OAuth token to act on the connected Teams account.

Skill content
Maton proxies requests to `graph.microsoft.com` and automatically injects your OAuth token. ... All requests require the Maton API key
Recommendation

Install only if you trust Maton and the connected Microsoft account permissions; keep the MATON_API_KEY and OAuth connection URLs private and revoke unused connections.

What this means

Mistakenly approved actions could create, update, delete, or post content in Teams.

Why it was flagged

The skill can perform write operations against Teams resources, but it documents an approval requirement and target confirmation.

Skill content
**All write operations require explicit user approval.** Before executing any create, update, or delete call, confirm the target resource and intended effect with the user.
Recommendation

Before approving any write action, verify the team, channel, message, meeting, or connection being changed and the exact intended effect.

What this means

Teams messages, meeting details, recordings, or transcripts may pass through the external Maton service when the skill is used.

Why it was flagged

Sensitive Teams content, including meeting recordings and transcripts, may be requested through the Maton API gateway.

Skill content
Use this skill when users want to ... access meeting recordings and transcripts. ... https://api.maton.ai/microsoft-teams/{native-api-path}
Recommendation

Use this only for Teams data you are allowed to process through Maton, and follow your organization’s rules for meeting transcripts and recordings.