ClawHub

Zoho People

v1.0.3

Zoho People API integration with managed OAuth. Manage employees, departments, designations, attendance, and leave. Use this skill when users want to read, create, update, or query HR data like employees, departments, designations, and forms in Zoho People. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.

⭐ 3· 11.7k·3 current·5 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description match the runtime instructions: all examples call Maton gateway endpoints (gateway.maton.ai / ctrl.maton.ai) and request a MATON_API_KEY. There are no unrelated credentials, binaries, or paths requested.
✓
Instruction Scope
SKILL.md contains only network calls to the Maton gateway/control endpoints and examples showing how to create/list/delete OAuth connections; it does not instruct reading local files, other environment variables, or sending data to unexpected third-party endpoints.
✓
Install Mechanism
This is an instruction-only skill with no install spec or code files. Nothing is written to disk or downloaded by the skill itself.
ℹ
Credentials
Only MATON_API_KEY is required which is proportional to a gateway/proxy integration. Note that HR data is sensitive; requiring a single gateway API key is expected, but you should verify what that key can access and whether Maton audits/logs proxied HR requests.
!
Persistence & Privilege
The skill did not set disableModelInvocation:true (default allows the model to invoke the skill autonomously). Because it accesses sensitive HR data (employees, attendance, leave), automatic model invocation and always-present privileges merit review. 'always' is not set, which is fine, but lack of explicit disableModelInvocation is a governance risk.
Assessment
This skill appears to do what it says: it proxies Zoho People via Maton and only needs MATON_API_KEY. Before installing: (1) Confirm the MATON_API_KEY will be issued by a trusted Maton account and understand its scope/permissions; (2) Ask the skill publisher (or your platform admin) to set disableModelInvocation:true if you don't want the model to call the skill autonomously, since it can access sensitive HR data; (3) Verify the Maton endpoints (gateway.maton.ai / ctrl.maton.ai) and their privacy/audit policies; and (4) Prefer a published source/homepage or maintainer contact—this skill has no homepage/source listed, which reduces confidence in provenance.

Like a lobster shell, security has layers — review code before you run it.

latestvk972vp7esw1830ctyxvbkamj1h80w56c

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments