by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears internally consistent, but before installing consider: (1) Trust Maton: all API traffic and OAuth flows are proxied via maton.ai/ctrl.maton.ai/gateway.maton.ai so Maton will see request contents and hold OAuth tokens — review Maton's privacy/security and service reputation. (2) MATON_API_KEY is the only secret needed; don't reuse a high-privilege key and rotate/revoke it if compromised. (3) When you create a connection you will grant Google account scopes — review and only gra...详细分析 ▾
✓ 用途与能力
Name/description (Google Slides integration) matches the runtime instructions: calls to a Maton gateway and Maton connection controller to manage OAuth and proxy requests to slides.googleapis.com. The single required env var (MATON_API_KEY) is appropriate for a managed OAuth gateway.
ℹ 指令范围
SKILL.md instructs the agent to make network calls to gateway.maton.ai and ctrl.maton.ai (to create/list/delete OAuth connections) and to include MATON_API_KEY. This is expected for a managed-Google-Slides gateway, but it means user data and API calls are proxied through Maton rather than going directly to Google's APIs — users should be aware Maton will see requests and may hold OAuth tokens.
✓ 安装机制
No install spec and no code files (instruction-only). No files are written to disk and no external packages are pulled, which is the lowest-risk install profile.
✓ 凭证需求
Only a single environment variable (MATON_API_KEY) is required and is used consistently in the examples. No unrelated credentials, config paths, or sensitive system files are requested.
✓ 持久化与权限
always is false and the skill is user-invocable with normal autonomous invocation allowed. The skill does not request persistent system-level privileges or modify other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/2/5
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install google-slides
镜像加速npx clawhub@latest install google-slides --registry https://cn.longxiaskill.com