Example code exposes a concrete Google Sheets spreadsheet ID instead of a placeholder.
Critical
- Code
- suspicious.exposed_resource_identifier
- Location
- SKILL.md:495
Security audit
Api Gateway.Disabled
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed API gateway for user-authorized third-party services, with broad but purpose-aligned access.
Install only if you trust Maton with brokered access to the external services you connect. Review OAuth scopes for each service, avoid running example mutations like posting messages or creating contacts without changing placeholders, and delete unused Maton connections when no longer needed.
SkillSpector
By NVIDIA
SkillSpector could not complete.
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.exposed_resource_identifier
Example code exposes a concrete connection_id instead of a placeholder.
Critical
- Code
- suspicious.exposed_resource_identifier
- Location
- SKILL.md:94