SignNow

ReviewAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent SignNow integration, but it requires Maton/OAuth access and can handle sensitive e-signature documents, so users should approve write actions carefully.

Before installing, make sure you trust Maton to proxy SignNow requests and manage OAuth. Protect the MATON_API_KEY, verify the correct SignNow connection when using multiple accounts, and only approve uploads, sends, updates, or deletions after reviewing the exact document, recipients, and effect.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could help perform meaningful SignNow actions such as uploading documents or sending signing requests.

Why it was flagged

The skill documents write-capable SignNow operations that can affect documents and signature workflows, but these operations are central to the stated purpose.

Skill content
Upload documents, send signature invites, manage templates, and automate e-signature workflows.
Recommendation

Confirm the target document, recipients, and intended effect before approving any create, update, send, or delete operation.

What this means

Anyone or any agent with this key may be able to use the connected SignNow integration within the granted scope.

Why it was flagged

The skill requires a Maton API key that is used to access a connected SignNow account through delegated OAuth.

Skill content
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY
Recommendation

Keep MATON_API_KEY private, use the intended SignNow connection ID when multiple accounts exist, and revoke unused connections or keys.

What this means

Sensitive e-signature documents and account operations may be handled by the Maton proxy as part of normal use.

Why it was flagged

The artifact discloses that SignNow API traffic is routed through Maton, so document data and account requests may pass through that gateway.

Skill content
Maton proxies requests to `api.signnow.com` and automatically injects your OAuth token.
Recommendation

Use this skill only if you trust Maton for managed OAuth and document proxying, and avoid sending documents that should not transit that service.