Box
v1.0.5Box API integration with managed OAuth. Manage files, folders, collaborations, and cloud storage. Use this skill when users want to upload, download, share,...
⭐ 3· 3.6k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (Box API integration) matches the instructions: all network calls target Maton gateway/ctrl endpoints for Box and the skill only requests a MATON_API_KEY which is appropriate for a gateway-managed OAuth flow.
Instruction Scope
SKILL.md instructs only to call Maton endpoints, manage connections via Maton's control endpoint, and perform Box API operations through the gateway. It does not instruct reading local files, unrelated env vars, or sending data to unknown external endpoints.
Install Mechanism
No install spec or code files beyond documentation — instruction-only skill; nothing is written to disk or installed by the skill.
Credentials
Only MATON_API_KEY is required and is justified: Maton API key authenticates requests to the gateway. The SKILL.md explicitly states the key alone does not grant Box access without user OAuth, which matches expectations.
Persistence & Privilege
Skill is not always-enabled and uses the platform default (agent-invocable). It does not request system-wide config changes or credentials for other services.
Assessment
This skill is internally consistent: it proxies Box API calls through Maton.ai and needs your MATON_API_KEY to authenticate to Maton's gateway. Before installing, confirm you trust Maton.ai (review their privacy/security documentation), store your MATON_API_KEY securely, and be aware that actual Box access still requires you to complete OAuth via Maton's connect flow. Because the package source/homepage are not provided here, consider verifying the publisher (maton) and the Maton domains shown (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) independently before use. If you handle highly sensitive files, test with non-sensitive data first and restrict token scope / rotation where possible.Like a lobster shell, security has layers — review code before you run it.
latestvk974xzbt3nezspwcmj7tfzbmc584xn29
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY