by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill proxies JotForm requests through Maton (gateway.maton.ai / ctrl.maton.ai / connect.maton.ai). If you install it, you are trusting Maton to handle OAuth and to see any form/submission data routed through the gateway. Before installing: (1) confirm you trust Maton (review their privacy/security policies and the MATON account page), (2) use a Maton API key with minimal scope and rotate it if needed, (3) be aware that form data and OAuth tokens will be routed through Maton’s endpoints, an...详细分析 ▾
✓ 用途与能力
Name/description (JotForm integration) align with the instructions: all example calls target Maton gateway/ctrl/connect endpoints which proxy to JotForm. The only required secret (MATON_API_KEY) is consistent with a managed-gateway OAuth flow.
✓ 指令范围
SKILL.md only instructs network calls to maton.ai gateway/ctrl/connect endpoints and use of the MATON_API_KEY environment variable. It does not ask the agent to read unrelated files, search the filesystem, or call external endpoints outside the documented Maton/JotForm endpoints. Opening the returned OAuth URL in a browser to complete auth is expected.
✓ 安装机制
There is no install spec and no code files to write or execute — lowest-risk, instruction-only skill.
ℹ 凭证需求
Only a single environment variable (MATON_API_KEY) is required, which is proportionate to a gateway-proxied OAuth integration. Minor metadata inconsistency: the registry metadata lists no primary credential while SKILL.md requires MATON_API_KEY; this is likely a metadata omission but should be corrected.
✓ 持久化与权限
always is false and autonomous invocation is allowed (the platform default). The skill does not request permanent presence or system-level configuration changes.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.42026/2/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install jotform
镜像加速npx clawhub@latest install jotform --registry https://cn.longxiaskill.com