by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent: it routes Klaviyo requests through Maton and requires only MATON_API_KEY. Before installing, confirm you trust maton.ai (gateway.maton.ai, ctrl.maton.ai) because API requests and OAuth tokens will pass through their service. Treat MATON_API_KEY as sensitive (rotate if compromised), ensure the Maton account has only the permissions you intend, and verify the Maton privacy/security terms if you will send customer data through their gateway. The registry metadata omits a dec...详细分析 ▾
✓ 用途与能力
The skill claims Klaviyo API access via managed OAuth and only asks for MATON_API_KEY and gateway endpoints (gateway.maton.ai / ctrl.maton.ai). Those requirements are coherent with a proxy/OAuth manager for Klaviyo.
✓ 指令范围
SKILL.md only instructs making HTTPS requests to Maton endpoints and using the MATON_API_KEY header, managing connections via the ctrl endpoint, and completing OAuth via the returned URL. It does not instruct reading unrelated files, other env vars, or transmitting data to unexpected endpoints.
✓ 安装机制
No install spec and no code files (instruction-only). Nothing is written to disk or downloaded by the skill itself, which minimizes install-time risk.
ℹ 凭证需求
Only one env var (MATON_API_KEY) is required, which is appropriate for a managed gateway. Note: the Maton API key is powerful — it grants access to the proxy and any linked Klaviyo connections, so treat it like a high-privilege credential.
✓ 持久化与权限
always is false and there is no install-time persistence or modification of other skills/config. Default autonomous invocation is allowed but not combined with other concerning privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.42026/2/5
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install klaviyo
镜像加速npx clawhub@latest install klaviyo --registry https://cn.longxiaskill.com