安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to be what it says: a thin integration that proxies Calendly calls through Maton. Before installing, confirm you trust Maton (gateway.maton.ai / ctrl.maton.ai) because the MATON_API_KEY you provide will allow that service to access and manage your Calendly data (events, invitees, webhooks). If you need higher assurance: verify the owner/source or official homepage, confirm the token scopes and least privilege (issue a key limited to needed scopes), and be prepared to rotate/re...详细分析 ▾
✓ 用途与能力
Name/description (Calendly integration) matches the instructions: every example calls Maton gateway endpoints (gateway.maton.ai and ctrl.maton.ai) to access Calendly resources. No unrelated services, binaries, or config paths are requested.
✓ 指令范围
SKILL.md only instructs the agent to make HTTPS requests to Maton endpoints and to read the MATON_API_KEY environment variable. It does not ask the agent to read arbitrary local files, other env vars, or send data to unrelated endpoints. OAuth flow is handled via a returned connect URL the user opens in a browser.
✓ 安装机制
Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded. This is the lowest-risk install model.
ℹ 凭证需求
The only required env var is MATON_API_KEY, which is appropriate for a gateway-managed OAuth integration. Note: MATON_API_KEY is a sensitive credential granting Maton gateway access to your Calendly connections; the skill doesn't declare a 'primaryEnv' but the declared requirement matches the runtime examples.
✓ 持久化与权限
always is false and there is no installation step that grants persistent system-wide privileges. The skill may be invoked autonomously (default), which is normal for skills — combine that with the single MATON_API_KEY for usual risk considerations.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/2/3
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install calendly-api
镜像加速npx clawhub@latest install calendly-api --registry https://cn.longxiaskill.com