YouTube Reporting

ReviewAudited by ClawScan on May 7, 2026.

Overview

This skill is a disclosed YouTube Reporting integration that uses Maton-managed OAuth and API calls; users should understand it grants delegated access to YouTube reporting data and job management.

Before installing, confirm you trust Maton with managed OAuth access to your YouTube Reporting data, keep MATON_API_KEY private, and require confirmation before any reporting job is created or deleted.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent using this skill could change which bulk reports are generated for the connected YouTube account if the user approves.

Why it was flagged

The skill can create or delete YouTube Reporting jobs, but it clearly scopes this as a user-approved action.

Skill content
**Job creation and deletion require explicit user approval.** Before creating or deleting a reporting job, confirm the report type and intended effect with the user.
Recommendation

Only approve job creation or deletion after checking the target connection, report type, and intended effect.

What this means

Anyone with the API key may be able to make authorized YouTube Reporting requests through the Maton account connection.

Why it was flagged

The skill requires a Maton API key that authorizes access through a managed OAuth connection.

Skill content
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY
Recommendation

Store MATON_API_KEY securely, avoid pasting it into shared chats or logs, and revoke or rotate it if exposed.

What this means

YouTube analytics report requests and downloaded report data may pass through Maton's API service.

Why it was flagged

Requests and report data flow through a third-party gateway that manages OAuth token injection.

Skill content
Maton proxies requests to `youtubereporting.googleapis.com` and automatically injects your OAuth token.
Recommendation

Use this only if you trust Maton's managed OAuth service and privacy practices for your YouTube analytics data.