Chargebee
v1.0.5Chargebee API integration with managed OAuth. Manage subscriptions, customers, invoices, and hosted checkout pages. Use this skill when users want to interact with Chargebee billing data. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
⭐ 3· 5.1k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Chargebee integration) matches the instructions: all example calls target Maton endpoints (gateway.maton.ai, ctrl.maton.ai) and describe managing Chargebee resources. Requesting a Maton API key is coherent with using a Maton-managed proxy/OAuth flow.
Instruction Scope
SKILL.md only instructs the agent to make HTTP calls to Maton-managed endpoints and to open an OAuth URL in a browser. It does not instruct reading unrelated files, scanning system state, or exfiltrating data to unexpected endpoints.
Install Mechanism
No install spec or code is included (instruction-only), so nothing is written to disk or downloaded. This is the lowest-risk install posture and consistent with the simple API-proxy purpose.
Credentials
The only required environment variable is MATON_API_KEY, which is appropriate for authenticating to the Maton gateway described. There are no additional unrelated credentials or config paths requested.
Persistence & Privilege
always is false and the skill is user-invocable; autonomous invocation is allowed (platform default). The skill does not request persistent system modifications or permissions beyond network access and the API key.
Assessment
This skill is an instruction-only adapter that routes Chargebee API calls through Maton (gateway.maton.ai / ctrl.maton.ai). Before installing, confirm you trust Maton as a proxy for your Chargebee data and are willing to provide MATON_API_KEY (this key grants Maton access to perform API actions on your behalf). Verify the Maton endpoints and account pages listed in the SKILL.md, consider using a scoped/rotatable API key, and limit access to only the connections you intend. Note the package/source/homepage in the registry is minimal — if you need stronger assurance, ask the publisher for a verified homepage or source repo before enabling the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97fs7f72hjt1yx0ymf04grf2x80xy59
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY
