ClawHub
Back to skill

Security audit

API Gateway

Security checks across malware telemetry and agentic risk

Overview

This skill is a broad API gateway for user-approved third-party service actions, and its risky automation examples are clearly disclosed with confirmation and credential-safety rules.

Install only if you trust Maton with the connected services you authorize. Use least-privilege OAuth scopes, confirm every write or automation step, avoid whole-inbox or broad trigger rules, and never approve a destination URL unless you know who controls it and what data will be sent there continuously.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

External Transmission

Medium
Category
Data Exfiltration
Content
"parameters": {"repo": "maton-ai/cli"},
  "destinations": [{"url": "https://your-endpoint.example.com/webhook", "method": "POST", "name": "prod"}]
}).encode()
req = urllib.request.Request('https://api.maton.ai/triggers', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
Confidence
83% confidence
Finding
https://api.maton.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
"headers": {"X-Signature-Key": "{{ your_receiver_key }}"},
  "body_template": '{"data": {{ payload.data }}}'
}).encode()
req = urllib.request.Request('https://api.maton.ai/triggers/{trigger_id}/destinations', data=data, method='POST')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
Confidence
88% confidence
Finding
https://api.maton.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
python <<'EOF'
import urllib.request, os, json
data = json.dumps({"url": "https://new.dev/hook"}).encode()
req = urllib.request.Request('https://api.maton.ai/triggers/{trigger_id}/destinations/{destination_id}', data=data, method='PATCH')
req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')
req.add_header('Content-Type', 'application/json')
print(json.dumps(json.load(urllib.request.urlopen(req)), indent=2))
Confidence
84% confidence
Finding
https://api.maton.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
import json, os, urllib.request
event = json.loads(os.environ["EVENT_JSON"])
data = json.dumps({"channel": "C0123456789", "text": f"New email: {event['snippet']}"}).encode()
req = urllib.request.Request("https://api.maton.ai/slack/api/chat.postMessage", data=data, method="POST")
req.add_header("Authorization", f"Bearer {os.environ['MATON_API_KEY']}")
req.add_header("Content-Type", "application/json")
urllib.request.urlopen(req)
Confidence
90% confidence
Finding
https://api.maton.ai/

External Transmission

Medium
Category
Data Exfiltration
Content
### Gmail Trigger → Slack Automation (Remote)

> **Credential safety:** The destination below points to `api.maton.ai`, so including the `MATON_API_KEY` in the destination headers is valid — the key is only sent to the Maton gateway itself. **Never** embed `MATON_API_KEY` (or any secret) in destination headers or body templates when the destination URL points to a third-party host. Only `https://api.maton.ai/` destinations should carry this credential.
>
> **Same privacy caveats as the local variant above apply, and more strongly:** this runs server-side and continuously, with no local step to review. `labels=INBOX` forwards previews of *all* incoming mail into the target Slack channel indefinitely. Narrow the trigger, confirm the channel and its audience with the user, and forward the fewest fields that satisfy the task.
Confidence
92% confidence
Finding
https://api.maton.ai/

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.