Microsoft OneDrive

v1.0.3

OneDrive API integration with managed OAuth via Microsoft Graph. Manage files, folders, and sharing. Use this skill when users want to upload, download, orga...

9· 6k·18 current·20 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description match the instructions: all examples call a Maton gateway that proxies Microsoft Graph. The required env var (MATON_API_KEY) is consistent with a managed-OAuth gateway service.
Instruction Scope
SKILL.md only instructs network calls to gateway.maton.ai / ctrl.maton.ai / connect.maton.ai and using the MATON_API_KEY; it does not ask the agent to read unrelated files, system paths, or other credentials.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. This is the lowest install risk.
Credentials
The skill requests a single env var (MATON_API_KEY), which is proportionate to the described gateway usage. However, that key likely grants broad access to OneDrive via Maton, so the key is highly sensitive and requires trust in the Maton service.
Persistence & Privilege
Skill is not always-enabled and has no special persistence or system-wide config changes. It does not request elevated platform privileges.
Assessment
This skill appears to do what it says: it routes OneDrive/Graph calls through a third‑party gateway (Maton) and uses a MATON_API_KEY. Before installing, confirm you trust Maton (maton.ai) to hold and use OAuth tokens for your OneDrive accounts: check Maton’s website, privacy/security documentation, and whether the API key can be scoped or revoked. Treat the MATON_API_KEY like a full-access credential: do not reuse it elsewhere, create a dedicated key/account if possible, monitor activity and connections listed at ctrl.maton.ai, and revoke the key immediately if you see unexpected access. Note the skill listing has no homepage and the registry owner identity is unclear—if you need higher assurance, ask the publisher for provenance or prefer an official Microsoft Graph integration instead.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e9vsnyqy3vwfghjm7qr2hf981fg46

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments