ClawHub

SignNow

v1.0.2

SignNow API integration with managed OAuth. E-signature platform for sending, signing, and managing documents. Use this skill when users want to upload documents, send signature invites, create templates, or manage e-signature workflows. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.

⭐ 3· 3.3k·0 current·0 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (SignNow e-signature integration) align with the SKILL.md examples: calls to gateway.maton.ai and ctrl.maton.ai implement SignNow operations (upload, invites, templates). Required env var (MATON_API_KEY) matches the described managed-OAuth gateway usage.
✓
Instruction Scope
Runtime instructions are concrete and limited to: calling Maton gateway endpoints, reading MATON_API_KEY from env, and optionally reading local files when uploading documents. There are no instructions to read unrelated system files, other credentials, or to exfiltrate data to third-party endpoints beyond Maton/SignNow proxies.
✓
Install Mechanism
No install spec and no code files beyond SKILL.md and LICENSE — instruction-only skill; nothing is written to disk or fetched during install.
✓
Credentials
Only one required environment variable (MATON_API_KEY) is declared and used in examples. That credential is appropriate for a gateway-based API integration; no unrelated secrets or config paths are requested.
✓
Persistence & Privilege
No special persistence requested (always=false). The skill is user-invocable and may be called autonomously by the agent (default), which is expected for skills and is not in itself a red flag.
Assessment
This skill is internally consistent: it proxies SignNow calls through Maton and only asks for a MATON_API_KEY. Before installing, verify you trust Maton (gateway.maton.ai / ctrl.maton.ai) because the gateway will see and act on your requests and tokens. Treat MATON_API_KEY as sensitive: limit its scope if possible, use a dedicated/rotatable key, and review Maton's documentation and privacy/security posture. If you expect calls to go directly to signnow.com (not via a proxy), confirm that behavior with the skill author; otherwise the Maton proxy is functioning as designed.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e4xyr3wv1b749qf898q8nc980xyef

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments