by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill is coherent but relies entirely on a third-party gateway (maton.ai) to proxy Mailchimp API calls and manage OAuth. Before installing: 1) Verify Maton (maton.ai) is a service you trust — confirm the domain, privacy policy, and who operates the service. 2) Treat MATON_API_KEY as a high-privilege secret: limit its scope if possible, use a least-privilege account, and rotate it if compromised. 3) Understand that Mailchimp data and OAuth tokens will flow through Maton endpoints (gateway.ma...详细分析 ▾
✓ 用途与能力
The name/description (Mailchimp Marketing API integration) matches the instructions: all examples call Maton-managed endpoints (gateway.maton.ai and ctrl.maton.ai) to operate on Mailchimp resources. Requested artifacts (MATON_API_KEY) are coherent with a managed OAuth gateway approach.
ℹ 指令范围
SKILL.md only instructs the agent to call Maton endpoints and to read the single env var MATON_API_KEY. It does not request unrelated files, system paths, or other environment variables. Note: all traffic and OAuth handling are routed through maton.ai domains — using this skill routes Mailchimp data and tokens via that third party.
✓ 安装机制
No install spec and no code files (instruction-only) — nothing is written to disk and no external packages or downloads are required.
ℹ 凭证需求
Only one required environment variable (MATON_API_KEY) is declared and used, which is proportionate to a gateway-based integration. This key grants the gateway access to your Mailchimp connections, so treat it as a high-privilege secret. (The registry metadata lists no explicit 'primary credential' field but the SKILL.md relies on MATON_API_KEY.)
✓ 持久化与权限
always:false (default) and no install-time persistence. The skill does not request system-wide config changes or additional privileges. The agent may invoke it autonomously (platform default) — that allows actions using MATON_API_KEY when the agent has permission.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/2/5
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install mailchimp
镜像加速npx clawhub@latest install mailchimp --registry https://cn.longxiaskill.com