ClawHub

Squarespace

v1.0.0

Squarespace Commerce API integration with managed OAuth. Manage products, inventory, orders, customer profiles, and transactions. Use this skill when users w...

⭐ 0· 382·0 current·0 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Squarespace Commerce integration) match the declared requirement (MATON_API_KEY) and the SKILL.md examples (calls to gateway.maton.ai / ctrl.maton.ai). The requested environment variable and endpoints are consistent with a proxy/OAuth manager for Squarespace.
ℹ
Instruction Scope
SKILL.md stays on-topic (shows how to call the Maton gateway, manage connections, and use OAuth). It does not instruct reading unrelated files or extra environment variables. Note: all API traffic is routed through Maton's endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai), so runtime behavior depends on that third party.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk by the skill itself, which is the lowest-risk install model.
ℹ
Credentials
Only a single environment variable is required (MATON_API_KEY), which is appropriate for this gateway-style integration. However, that key likely grants broad access to Squarespace accounts via Maton's managed OAuth, so the credential is high-privilege and should be treated accordingly.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills' configs. Agent-autonomous invocation is allowed (default) but not a unique risk here.
Assessment
This skill is internally consistent for a Squarespace integration that uses Maton as a gateway, but installing it requires trusting maton.ai with your MATON_API_KEY. Before installing, verify Maton's trustworthiness and privacy/security practices, avoid reusing high-privilege keys, prefer issuing a scoped or revocable key for this integration if possible, and confirm you are comfortable that API calls and OAuth tokens will be proxied through Maton's services (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai).

Like a lobster shell, security has layers — review code before you run it.

latestvk977br7k9x9dccdy1sqz6d9kf581wnca

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvMATON_API_KEY

Comments