by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent: it proxies Pipedrive calls through Maton and only asks for a Maton API key. Before installing, confirm you trust maton.ai (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) because your Pipedrive OAuth tokens and operations will be routed through their service. Treat MATON_API_KEY as a high-value secret: use an account with least privilege if possible, rotate the key regularly, and review what connections exist in your Maton dashboard. If you prefer direct integration wi...详细分析 ▾
✓ 用途与能力
Name/description: Pipedrive API integration. Declared requirement: MATON_API_KEY. SKILL.md instructs use of gateway.maton.ai / ctrl.maton.ai and Maton-managed OAuth. The requested environment variable and endpoints match the stated purpose; there are no unrelated credentials or binaries required.
ℹ 指令范围
Instructions are limited to calling Maton endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) to list/create/delete connections and proxy Pipedrive API calls. The skill does not instruct the agent to read local files, other env vars, or system paths. Note: because the gateway proxies to api.pipedrive.com and injects OAuth tokens, using this skill routes your CRM data through Maton — this is expected but a trust decision for the user.
✓ 安装机制
No install spec and no code files (instruction-only). This is low-risk from a disk/installation perspective — nothing is downloaded or written by the skill itself.
ℹ 凭证需求
Only one env var is required: MATON_API_KEY, which is proportional to a proxy/OAuth-managed integration. However, that single key likely grants Maton control over all linked Pipedrive connections and ability to act on behalf of those accounts, so the key is high-value and should be treated accordingly.
✓ 持久化与权限
The skill does not request persistent 'always' inclusion and has no install-time persistence. It does not modify other skills or system-wide configs per the provided instructions.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/2/4
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install pipedrive-api
镜像加速npx clawhub@latest install pipedrive-api --registry https://cn.longxiaskill.com