by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do what it says: proxy Fathom API calls through Maton. Before installing, verify the Maton service (maton.ai) is trustworthy for your organization, and consider: 1) treat MATON_API_KEY as sensitive — it likely allows access to meeting recordings/transcripts, so store it securely, rotate it, and scope it if possible; 2) review active OAuth connections in ctrl.maton.ai and only authorize accounts you trust; 3) be cautious about webhooks — ensure webhook endpoints you register...详细分析 ▾
✓ 用途与能力
Name/description declare a Fathom integration via a Maton-managed gateway; the skill's instructions and endpoints consistently reference maton.ai, gateway.maton.ai, ctrl.maton.ai and Fathom endpoints. The single required env var (MATON_API_KEY) is consistent with using a managed gateway.
✓ 指令范围
SKILL.md only instructs the agent to make authenticated HTTP requests to the Maton gateway and control endpoints, how to create/list/delete OAuth connections, and how to fetch recordings/transcripts. It does not direct reading unrelated local files, shell history, or other environment variables beyond MATON_API_KEY.
✓ 安装机制
No install spec and no code files (instruction-only). This minimizes disk-write/execute risk; runtime uses Python standard library examples to call network endpoints.
ℹ 凭证需求
Only MATON_API_KEY is required, which is appropriate for a gateway-based integration. Note: this single key likely grants broad access to the user's Maton-managed connections and thus to meeting recordings/transcripts; the SKILL.md references managing multiple OAuth connections. Ensure you understand the scope/permissions of the MATON_API_KEY before use.
✓ 持久化与权限
Skill is not always-enabled and does not request persistent system modifications or other skills' configs. It allows normal autonomous invocation (disable-model-invocation=false), which is expected for skills; no elevated persistence privileges are requested.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.52026/2/3
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install fathom-api
镜像加速npx clawhub@latest install fathom-api --registry https://cn.longxiaskill.com