Zoho Calendar
v1.0.3Zoho Calendar API integration with managed OAuth. Manage calendars and events with full scheduling capabilities. Use this skill when users want to read, create, update, or delete calendar events, manage calendars, or schedule meetings. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
⭐ 4· 11.9k·3 current·5 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md shows a Zoho Calendar integration that proxies requests through gateway.maton.ai and uses Maton-managed OAuth; the single required env var (MATON_API_KEY) is exactly what the skill needs to authenticate to that gateway. Endpoints and functionality described (calendars/events, connections) align with the stated purpose.
Instruction Scope
Instructions are limited to making HTTPS requests to gateway.maton.ai and ctrl.maton.ai (listing/creating/deleting connections and calendar CRUD). The SKILL.md does not instruct reading unrelated files, other environment variables, or contacting unrelated endpoints. It requires opening an OAuth URL in a browser to authorize accounts, which is expected for managed OAuth.
Install Mechanism
No install spec or code files are included (instruction-only). This is low-risk because nothing is written to disk or installed by the skill itself.
Credentials
Only MATON_API_KEY is required, which is proportionate to the described gateway-based integration. The SKILL.md uses only that env var. However, the skill relies on a third-party service (Maton) to hold OAuth tokens, so the API key effectively grants access to user Zoho calendars via Maton.
Persistence & Privilege
The skill does not request always:true and is user-invocable only. It does not modify other skills or system settings. Autonomous invocation is allowed (platform default) but not excessive on its own.
Assessment
This skill appears to do what it says: it proxies Zoho Calendar calls through Maton and needs a Maton API key. Before installing, verify you trust maton.ai (gateway.maton.ai and ctrl.maton.ai) because the API key and Maton-managed OAuth give Maton access to your calendar data. Note the registry entry has no external homepage/source — that reduces transparency. If you proceed, use a limited-scope API key if possible, review Maton's privacy/security docs, and be prepared to revoke the MATON_API_KEY and any created Maton connections when you no longer need the integration. If you need higher assurance, ask the publisher for a source repo or official homepage before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk9777ajfm0nk5wnqjyggwzvdt180wpk7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY
