ClawHub

Vimeo

v1.0.3

Vimeo API integration with managed OAuth. Video hosting and sharing platform. Use this skill when users want to upload, manage, or organize videos, create showcases/albums, manage folders, or interact with the Vimeo community. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.

⭐ 5· 3.4k·0 current·0 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to proxy Vimeo API calls via a Maton gateway and only requires MATON_API_KEY and network access. The declared requirement (MATON_API_KEY) and the SKILL.md endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) align with that purpose—no unrelated credentials or binaries are requested.
✓
Instruction Scope
SKILL.md contains concrete examples (Python urllib) showing how to call the Maton gateway and manage OAuth connections. It only reads the declared MATON_API_KEY environment variable and uses network requests to Maton domains. It does not instruct reading unrelated files, other env vars, or sending data to unexpected endpoints.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute locally. That minimizes installation risk—nothing is downloaded or written to disk by the skill itself.
ℹ
Credentials
Only MATON_API_KEY is required which is proportionate to using a Maton-managed gateway. However, that single key is powerful: it grants access to Maton-managed Vimeo OAuth connections and therefore to users' Vimeo accounts via Maton's services. Accepting this key requires trusting Maton with tokens and proxied API traffic.
✓
Persistence & Privilege
always is false and the skill is user-invocable. disable-model-invocation is false (agent may call the skill autonomously), which is the platform default and not itself problematic here. The skill does not request system-level persistence or modify other skills.
Assessment
This skill appears internally consistent: it proxies Vimeo calls through Maton and only asks for MATON_API_KEY. Before installing, verify you trust maton.ai (who will see/proxy OAuth tokens and API traffic). Confirm the MATON_API_KEY value is obtained from an official Maton account page, and consider using a limited-purpose API key with minimal scope. Check that the Maton endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) are legitimate and use HTTPS. Because this is an instruction-only skill, nothing is installed locally, but the key gives remote power—rotate the key if you stop using the skill and audit Maton connections periodically. If you need stronger assurance, ask the publisher for a verified homepage/maintainer identity and any privacy/security docs for Maton's OAuth gateway.

Like a lobster shell, security has layers — review code before you run it.

latestvk973np9kym6vzr48ybhsgct2kx80wdpm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments