Google Calendar
v1.0.5Google Calendar API integration with managed OAuth. Create events, list calendars, check availability, and manage schedules. Use this skill when users want to interact with Google Calendar. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
⭐ 21· 8.6k·14 current·15 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the required artifact: the skill is an instruction-only wrapper that calls a Maton gateway to reach Google Calendar. Requesting MATON_API_KEY is expected for a managed-OAuth proxy service.
Instruction Scope
SKILL.md instructs the agent to call https://gateway.maton.ai and control endpoints (ctrl.maton.ai / connect.maton.ai) using MATON_API_KEY and, optionally, Maton-Connection. This stays within the declared purpose but explicitly routes calendar data through Maton-managed endpoints — users should understand that OAuth tokens and calendar data are handled by Maton, not directly by Google.
Install Mechanism
No install spec or code is provided (instruction-only), so nothing is written to disk or automatically installed. This is the lowest-risk installation mechanism.
Credentials
Only MATON_API_KEY is required, which is proportionate for a gateway-based Google Calendar integration. However, that single key grants the Maton gateway the ability to act on the user's behalf (proxy OAuth) — so protecting and trusting that key/service is important.
Persistence & Privilege
always is false and the skill is user-invocable; there is no request to modify other skills or persist broadly. Autonomous invocation is allowed by default but not elevated here.
Assessment
This skill is internally consistent: it calls Maton gateway endpoints and requires only MATON_API_KEY. Before installing, verify that maton.ai (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) is a trusted service for handling your Google OAuth tokens and calendar data. Understand that your calendar data and OAuth tokens will be proxied/stored by Maton (not directly by Google), so review Maton's privacy/security documentation, minimize permissions when authorizing, and treat MATON_API_KEY like a sensitive secret (store it securely and rotate it if compromised). Because the skill is instruction-only, it won’t install code on your system, but it will make outbound network calls whenever invoked. If you need stricter control, consider using an official Google integration or running direct API calls under your own credentials instead of a third-party gateway.Like a lobster shell, security has layers — review code before you run it.
latestvk976yn36nbjb83zw75nzswyj6x80wp79
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY
