by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: it proxies Microsoft Graph through Maton and needs a single MATON_API_KEY. Before installing, verify you trust Maton (review maton.ai privacy/security docs), understand that the API key grants access to your Outlook data (email, calendar, contacts), and only provide a key with the minimum needed privileges. If you want to prevent the AI from calling the skill autonomously, set disableModelInvocation or avoid placing the MATON_API_KEY in always-available age...详细分析 ▾
✓ 用途与能力
The name/description say Microsoft Graph (Outlook) via a managed OAuth gateway, and the skill only requires MATON_API_KEY and references maton endpoints (gateway.maton.ai, ctrl.maton.ai). There are no unrelated env vars, binaries, or install steps.
✓ 指令范围
SKILL.md contains explicit HTTP examples using the Maton gateway and connection management endpoints and only references the MATON_API_KEY environment variable. It does not instruct reading unrelated files or other environment variables, nor does it direct data to unexpected endpoints beyond Maton's documented domains.
✓ 安装机制
Instruction-only skill with no install spec and no code files—nothing is written to disk or pulled from external URLs during install.
✓ 凭证需求
Only one required environment variable (MATON_API_KEY) is declared and used. This is proportionate to a gateway-based OAuth integration, but the key is sensitive because it grants access to email/calendar/contacts via Maton.
ℹ 持久化与权限
Skill does not set always:true (good) but also does not set disableModelInvocation, so by default the model could call the skill autonomously if the key is present in the agent environment. If you want to avoid autonomous access to mail, consider disabling model invocation or restricting where the API key is stored.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/2/3
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install outlook-api
镜像加速npx clawhub@latest install outlook-api --registry https://cn.longxiaskill.com