Api Gateway 1
v1.0.0Connect to 100+ APIs (Google Workspace, Microsoft 365, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to interact...
⭐ 0· 472·6 current·6 all-time
bydarthn8er@kdegeek
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill claims to be an API gateway that proxies 100+ services and only requires MATON_API_KEY — that environment variable is appropriate and expected for the described functionality. However, there are packaging/metadata inconsistencies (different ownerId and version in _meta.json vs registry metadata, and slug/name differences) that reduce confidence in provenance.
Instruction Scope
SKILL.md instructions are scoped to calling Maton endpoints (gateway.maton.ai and ctrl.maton.ai) and managing OAuth connections via a connect flow. The instructions do not ask the agent to read unrelated files, other environment variables, or system paths. All network calls are directed to Maton-hosted endpoints as expected.
Install Mechanism
No install steps or archive downloads are present (instruction-only skill). No code is written to disk by an installer, which reduces installation risk.
Credentials
The skill only requires a single environment variable, MATON_API_KEY, which aligns with its purpose. That key is sensitive because it authenticates to Maton and will be sent to Maton endpoints; the SKILL.md states the key 'grants NO access to third‑party services by itself' and that explicit user OAuth is required — you must decide whether you trust Maton to enforce that claim.
Persistence & Privilege
The skill is not always: true, is user-invocable, and allows autonomous invocation by default (normal). There is no indication it modifies other skills or system-wide configuration.
What to consider before installing
This skill appears to do what it says (proxy API calls through Maton) and needs only your Maton API key — but you should only install it if you trust Maton (https://maton.ai). Before installing: (1) verify the skill's provenance (registry ownerId, homepage, and version mismatches in the package raise questions), (2) limit and scope the MATON_API_KEY if possible and ensure it is revocable/rotatable, (3) avoid using it with highly sensitive accounts until you confirm Maton's security/privacy policies and audit logs, and (4) monitor and rotate keys after use. If you cannot verify the publisher or are uncomfortable trusting a third‑party gateway that will inject OAuth tokens on your behalf, do not install.Like a lobster shell, security has layers — review code before you run it.
latestvk9722tqm0v4f0g4wkd2qjbkdns81p3ma
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY