Monday Ops
PassAudited by ClawScan on May 12, 2026.
Overview
This is a coherent monday.com operations skill, but it can make persistent workspace changes and should be used with clear user approval for bulk or destructive actions.
Install this only if you want the agent to manage monday.com on your behalf. Before allowing changes, especially deletes, column changes, raw GraphQL mutations, or bulk item creation, review the proposed plan and confirm it targets the correct workspace, board, and items.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used carelessly, the agent could delete or alter monday.com items, columns, or other workspace data.
The skill exposes mutating and destructive monday.com operations, plus a raw GraphQL escape-hatch tool. These are disclosed and aligned with the monday.com operations purpose, but they can cause significant workspace changes.
`delete_item` | Permanently delete an item ... `delete_column` | Remove a column from a board ... `all_monday_api` | Run a specific monday.com GraphQL query or mutation approved by the user
Review the plan before execution, require explicit confirmation for destructive or broad changes, and prefer standard scoped MCP tools over raw GraphQL where possible.
The agent may be able to view or change any monday.com boards and records available to the connected account.
The skill depends on a connected monday.com account and will operate with whatever permissions that connector grants. This is expected for the integration, but it is account-level authority.
The user must have the monday.com MCP connector enabled in their Claude session. The hosted MCP endpoint is `https://mcp.monday.com/mcp`.
Connect only the intended monday.com account/workspace and use least-privilege access where available.
monday.com board, item, user, and workflow data may be retrieved into the agent session through the MCP connector.
The skill routes monday.com operations through an external MCP connector. The endpoint is disclosed and purpose-aligned, but workspace data and actions depend on that connector boundary.
The hosted MCP endpoint is `https://mcp.monday.com/mcp`.
Use the connector only for workspaces whose data you are comfortable exposing to the active agent session and provider connector.
An incorrect mapping, assignee, status, or task list could create or modify many monday.com records before the mistake is noticed.
The workflow supports batch creation and other multi-step operations. This is normal for project-management automation, but a mistaken plan can be repeated across many items.
for each task:
create_item(board_id, item_name, group_id, column_values)For large batches, ask for a preview and consider approving a small sample before allowing all changes.