YouTube Reporting
AdvisoryAudited by Static analysis on May 7, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using this skill could change which bulk reports are generated for the connected YouTube account if the user approves.
The skill can create or delete YouTube Reporting jobs, but it clearly scopes this as a user-approved action.
**Job creation and deletion require explicit user approval.** Before creating or deleting a reporting job, confirm the report type and intended effect with the user.
Only approve job creation or deletion after checking the target connection, report type, and intended effect.
Anyone with the API key may be able to make authorized YouTube Reporting requests through the Maton account connection.
The skill requires a Maton API key that authorizes access through a managed OAuth connection.
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY
Store MATON_API_KEY securely, avoid pasting it into shared chats or logs, and revoke or rotate it if exposed.
YouTube analytics report requests and downloaded report data may pass through Maton's API service.
Requests and report data flow through a third-party gateway that manages OAuth token injection.
Maton proxies requests to `youtubereporting.googleapis.com` and automatically injects your OAuth token.
Use this only if you trust Maton's managed OAuth service and privacy practices for your YouTube analytics data.