by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears internally consistent and minimal: it simply proxies WhatsApp Business calls through Maton and only needs your MATON_API_KEY. Before installing, verify you trust Maton (maton.ai) and the skill owner, ensure the API key you provide has least privilege, and avoid supplying other unrelated credentials. Remember the skill will make network calls to maton domains when used; consider whether you want the agent to be allowed to invoke skills autonomously (disable-model-invocation) if...详细分析 ▾
✓ 用途与能力
Name/description advertise a WhatsApp Business integration and the only required credential is MATON_API_KEY which the SKILL.md uses to call maton.ai/gateway/ctrl endpoints. Required items align with the stated purpose.
✓ 指令范围
SKILL.md contains example HTTP calls to gateway.maton.ai, ctrl.maton.ai, and connect.maton.ai using only MATON_API_KEY; it does not instruct the agent to read local files, shell history, unrelated environment variables, or to transmit data to unexpected endpoints.
✓ 安装机制
No install spec and no code files — instruction-only skill. This minimizes local disk changes and execution of downloaded code.
✓ 凭证需求
Only one environment variable (MATON_API_KEY) is required and it is used exclusively for Authorization headers to the Maton gateway; no unrelated secrets or multiple credentials are requested.
ℹ 持久化与权限
Skill is not marked always:true and has no install. However disable-model-invocation is not set (default allows model-initiated invocation), so the model could autonomously call the gateway when eligible — this is normal but worth noting if you require explicit user triggers.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/2/4
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install whatsapp-business
镜像加速npx clawhub@latest install whatsapp-business --registry https://cn.longxiaskill.com