API Gateway
byungkyu/api-gateway
Connect to 100+ APIs (Google Workspace, Microsoft 365, GitHub, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to...
运行要求
Runtime requirements🧠 ClawdisEnvMATON_API_KEY
安全扫描
Security ScanVirusTotalVirusTotalBenignView report →OpenClawOpenClawBenignhigh confidenceThe skill's requirements and instructions match its stated purpose (a proxy to many third‑party APIs using a Maton API key); there are no surprising installs or unrelated credential requests, but the gateway legitimately exposes very powerful read/write operations to any services you have already authorized in Maton and you should treat the MATON_API_KEY as sensitive.Details ▾✓Purpose & CapabilityName/description (managed OAuth gateway for 100+ APIs) align with what the skill requires and does: a single MATON_API_KEY and calls to maton.ai endpoints. The included reference docs map to supported services and expected API paths; nothing in the manifest requests unrelated cloud credentials or system binaries.ℹInstruction ScopeSKILL.md contains explicit, narrow runtime instructions (HTTP calls to gateway.maton.ai and ctrl.maton.ai, using the MATON_API_KEY). It does not instruct reading local files or other environment variables. Important security note: the gateway exposes broad capabilities (read, create, update, delete across many services). If your Maton account already has OAuth connections authorized, calls via this gateway can act on those services—so the scope of impact depends on which service connections exist.✓Install MechanismInstruction-only skill with no install spec and no code files executed or downloaded. This is low-risk from an installation/write-to-disk perspective.ℹCredentialsThe only required environment variable is MATON_API_KEY, which is proportional to a hosted API gateway. Treat it as a secret: possession of this key plus existing authorized OAuth connections in Maton lets callers perform actions on connected services. Minor metadata inconsistency: registry lists no primary credential even though MATON_API_KEY is required.✓Persistence & Privilegealways:false and no requested config paths—skill does not demand permanent/system-level presence. The platform default (agent can invoke autonomously) applies; combined with a valid MATON_API_KEY this enables the agent to call external services, but that is the skill's purpose rather than an unexpected privilege.…