ClawHub

Kit

v1.0.2

Kit (formerly ConvertKit) API integration with managed OAuth. Manage email subscribers, forms, tags, sequences, broadcasts, and custom fields. Use this skill when users want to manage their email marketing lists, create or update subscribers, manage tags, or work with email sequences and broadcasts. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).

⭐ 5· 6.6k·2 current·3 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description declare a Kit API integration and the SKILL.md exclusively documents calling Maton-managed endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) using a Maton API key — this aligns with the stated purpose.
✓
Instruction Scope
Runtime instructions show only HTTP calls to Maton endpoints and describe OAuth connection flows. They do not instruct reading unrelated files, other env vars, or sending data to unexpected third-party endpoints.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files to be written to disk — lowest install risk.
ℹ
Credentials
Only MATON_API_KEY is required, which is appropriate for a proxy gateway offering managed OAuth. Note that this single key can grant wide access to the user's Kit accounts through Maton's gateway, so the credential is sensitive and should be treated accordingly.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modify other skills. The skill can be invoked autonomously by agents (default), which is expected for skills; no additional persistence is requested.
Assessment
This skill is internally consistent with its purpose, but before installing: (1) Confirm you trust the Maton service (maton.ai and the gateway/ctrl/connect subdomains) because the MATON_API_KEY you provide can be used to access/manage your Kit (ConvertKit) connections and subscribers. (2) Treat MATON_API_KEY as a high-privilege secret—store it securely and use a least-privilege key if Maton supports scoped keys. (3) Because the skill lets an agent call external endpoints, only enable it for agents/workflows you trust. (4) If you need tighter control, prefer creating a limited Maton account or scoped API key and audit activity in Maton’s control panel after use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97011vwh0523yhm0h5qwxqtmn80w30a

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments