Api Gateway 1.0.31

• Outcome: Review
• Latest audit: Sep 10, 2026 · 8:45 PM UTC
• Version: 1.0.0

Overview

This Maton API gateway skill is a broad, powerful connector that can read and change many authorized accounts, and its documentation includes credential-exposure patterns and destructive operations without enough guardrails.

Install only if you are comfortable letting the agent make direct API calls through Maton to every OAuth connection you authorize. Treat MATON_API_KEY and connection URLs as secrets, avoid running examples that print them, specify the intended connection ID for sensitive actions, and require manual confirmation before deletes, admin changes, webhooks, payments, file sharing, or public messages.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

• Location: SKILL.md:537

Finding

API Key Disclosed Through Troubleshooting Output

Content

View full analysis

Remediation

View remediation

T09 · Insecure Skill Coding Practices

Warning

• Location: SKILL.md:123

Finding

OAuth Connection Session Token Exposed in Printed API Responses

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (415)

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/active-campaign.md (reported line 47)May include surrounding context.

Delete Contact

bash

DELETE /active-campaign/api/3/contacts/{contactId}

Tags

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/active-campaign.md (reported line 87)May include surrounding context.

Remove Tag from Contact

bash

DELETE /active-campaign/api/3/contactTags/{contactTagId}

Lists

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/acuity-scheduling.md (reported line 127)May include surrounding context.

Delete Block

bash

DELETE /acuity-scheduling/api/v1/blocks/{id}

List Forms

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/airtable.md (reported line 99)May include surrounding context.

Delete Records

bash

DELETE /airtable/v0/{baseId}/{tableIdOrName}?records[]=recXXXXX&records[]=recYYYYY

List Bases

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/asana.md (reported line 64)May include surrounding context.

Delete a Task

bash

DELETE /asana/api/1.0/tasks/{task_gid}

Get Subtasks

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/asana.md (reported line 134)May include surrounding context.

Delete Webhook

bash

DELETE /asana/api/1.0/webhooks/{webhook_gid}

Notes

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/attio.md (reported line 76)May include surrounding context.

Delete Record

bash

DELETE /attio/v2/objects/{object}/records/{record_id}

List Tasks

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/beehiiv.md (reported line 61)May include surrounding context.

Delete Subscription

bash

DELETE /beehiiv/v2/publications/{publication_id}/subscriptions/{subscription_id}

Posts

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/box.md (reported line 72)May include surrounding context.

Delete Folder

bash

DELETE /box/2.0/folders/{folder_id}
DELETE /box/2.0/folders/{folder_id}?recursive=true

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

The recursive=true variant materially increases blast radius by enabling deletion of an entire folder tree, and presenting it without any warning or guardrails can encourage dangerous use in an agentic context. If an LLM or user invokes this carelessly through the API gateway, substantial data loss could occur within the authorized Box tenant.

Content

Scanner excerpt · references/box.md (reported line 73)May include surrounding context.

Delete Folder

bash

DELETE /box/2.0/folders/{folder_id}
DELETE /box/2.0/folders/{folder_id}?recursive=true

Get File

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/box.md (reported line 98)May include surrounding context.

Delete File

bash

DELETE /box/2.0/files/{file_id}

Create Shared Link

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/box.md (reported line 141)May include surrounding context.

Trash

bash

GET /box/2.0/folders/trash/items
DELETE /box/2.0/files/{file_id}/trash
DELETE /box/2.0/folders/{folder_id}/trash

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/box.md (reported line 142)May include surrounding context.

bash

GET /box/2.0/folders/trash/items
DELETE /box/2.0/files/{file_id}/trash
DELETE /box/2.0/folders/{folder_id}/trash

Collections

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/box.md (reported line 160)May include surrounding context.

bash

GET /box/2.0/webhooks
POST /box/2.0/webhooks
DELETE /box/2.0/webhooks/{webhook_id}

Pagination

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/brevo.md (reported line 56)May include surrounding context.

Delete Contact

bash

DELETE /brevo/v3/contacts/{identifier}

Lists

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/cal-com.md (reported line 50)May include surrounding context.

Delete Event Type

bash

DELETE /cal-com/v2/event-types/{eventTypeId}

Event Type Webhooks

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/cal-com.md (reported line 77)May include surrounding context.

Delete Webhook

bash

DELETE /cal-com/v2/event-types/{eventTypeId}/webhooks/{webhookId}

Bookings

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/cal-com.md (reported line 130)May include surrounding context.

Delete Schedule

bash

DELETE /cal-com/v2/schedules/{scheduleId}

Availability Slots

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/cal-com.md (reported line 188)May include surrounding context.

Delete Webhook

bash

DELETE /cal-com/v2/webhooks/{webhookId}

Teams

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 82% confidence

Finding

A documented DELETE operation over a path parameterized by an arbitrary subscription UUID can be abused by an agent or user to remove webhook subscriptions, disrupting monitoring or business workflows. In this skill context, the API gateway exposes authenticated third-party actions, so destructive endpoints are more sensitive and should be guarded against accidental or unauthorized invocation.

Content

Scanner excerpt · references/calendly.md (reported line 89)May include surrounding context.

Delete Webhook Subscription

bash

DELETE /calendly/webhook_subscriptions/{uuid}

Notes

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/callrail.md (reported line 120)May include surrounding context.

Delete Tag

bash

DELETE /callrail/v3/a/{account_id}/tags/{tag_id}.json

Users

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 90% confidence

Finding

A documented DELETE endpoint with a user-controlled contact_id is a high-risk action surface because an agent may pass attacker-influenced or mistaken identifiers directly into the route. Within this skill, OAuth-backed access to real ClickFunnels workspaces makes such parameter abuse materially dangerous, enabling unauthorized or unintended deletion of CRM records.

Content

Scanner excerpt · references/clickfunnels.md (reported line 88)May include surrounding context.

Delete Contact

bash

DELETE /clickfunnels/api/v2/contacts/{contact_id}

Upsert Contact

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 91% confidence

Finding

The DELETE webhook endpoint exposes a sensitive control-plane action where an attacker-influenced endpoint_id could disable monitoring, integrations, or outbound business processes. In this API-gateway context, misuse could both interrupt operations and conceal future activity by removing audit/integration webhooks tied to the authorized workspace.

Content

Scanner excerpt · references/clickfunnels.md (reported line 208)May include surrounding context.

Delete Webhook Endpoint

bash

DELETE /clickfunnels/api/v2/webhooks/outgoing/endpoints/{endpoint_id}

Images

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/clicksend.md (reported line 49)May include surrounding context.

GET /clicksend/v3/sms/templates POST /clicksend/v3/sms/templates PUT /clicksend/v3/sms/templates/{template_id} DELETE /clicksend/v3/sms/templates/{template_id}

text

### MMS

Tool Parameter Abuse

High

• Category: Tool Misuse
• Confidence: 80% confidence

Finding

Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Content

Scanner excerpt · references/clicksend.md (reported line 88)May include surrounding context.

GET /clicksend/v3/lists/{list_id} POST /clicksend/v3/lists PUT /clicksend/v3/lists/{list_id} DELETE /clicksend/v3/lists/{list_id}

text

### Contacts

Static analysis

Detected: suspicious.exposed_resource_identifier

Example code exposes a concrete Google Sheets spreadsheet ID instead of a placeholder.

Critical

• Code: suspicious.exposed_resource_identifier
• Location: SKILL.md:438

Example code exposes a concrete connection_id instead of a placeholder.

Critical

• Code: suspicious.exposed_resource_identifier
• Location: SKILL.md:94