by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it is an instruction-only Google Play integration that uses a Maton API gateway and only requires a single Maton API key to operate.
评估建议
This skill proxies Google Play API calls through Maton and requires you to supply MATON_API_KEY. Before installing: verify you trust maton.ai (no homepage/source was provided in the registry), treat MATON_API_KEY as a secret, and understand that Maton will be able to perform Google Play actions via managed OAuth connections you create at ctrl.maton.ai. Limit key scope where possible, rotate the key if compromised, and review active connections in the Maton control panel. If you need on-premises ...详细分析 ▾
✓ 用途与能力
Name/description (Google Play / Android Publisher) match the runtime instructions which call Maton endpoints (gateway.maton.ai and ctrl.maton.ai). Requesting a single MATON_API_KEY credential is coherent with a managed-OAuth gateway design.
✓ 指令范围
SKILL.md only instructs the agent to make network requests to Maton-hosted endpoints and to use the MATON_API_KEY header; there are no instructions to read unrelated files, other environment variables, or system paths, nor to send data to unexpected endpoints.
✓ 安装机制
No install spec and no code files are included (instruction-only). Nothing is written to disk or downloaded by the skill itself.
ℹ 凭证需求
The skill requires a single environment variable, MATON_API_KEY, which is appropriate for a proxy/gateway service. Note: this key is a sensitive credential granting Maton the ability to act on behalf of the user (via managed OAuth), so trusting the Maton service is necessary.
✓ 持久化与权限
The skill does not request always:true or any elevated, persistent privileges and does not modify other skill or system configurations. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/2/5
- Added a `clawdbot` section to skill metadata, including an emoji and required environment variable (`MATON_API_KEY`). - No code or functionality changes; documentation and metadata update only.
● 无害
安装命令
点击复制官方npx clawhub@latest install google-play
镜像加速npx clawhub@latest install google-play --registry https://cn.longxiaskill.com