Dropbox API integration with managed OAuth. Files, folders, search, metadata, and cloud storage. Use this skill when users want to manage files and folders in Dropbox, search content, or work with file metadata. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
Security Analysis
high confidenceThe skill is internally consistent: it proxies Dropbox API calls through Maton (gateway.maton.ai / ctrl.maton.ai) and only requires a single MATON_API_KEY environment variable, which matches the described functionality.
Name/description (Dropbox integration) match the runtime instructions: all examples call gateway.maton.ai and ctrl.maton.ai to manage Dropbox via a Maton-managed OAuth flow. The required MATON_API_KEY is reasonable for a gateway-based integration.
Instructions limit operations to Dropbox endpoints proxied by Maton and to connection management at ctrl.maton.ai. They do not ask the agent to read unrelated local files or additional environment variables. NOTE: all file contents, metadata, and OAuth tokens will transit through Maton's services (gateway.maton.ai / ctrl.maton.ai), so using this skill sends Dropbox data to that third party.
No install spec and no code files beyond SKILL.md; this is instruction-only and does not write code to disk or install packages (lowest install risk).
Only MATON_API_KEY is required, which is proportionate for a gateway-based integration. However, this single credential is sensitive and effectively authorizes Maton's gateway to act on the user's Dropbox connections—users must trust Maton with access to their Dropbox data and OAuth tokens.
The skill does not request always:true, does not modify other skills or system settings, and is user-invocable only. No elevated persistence or system-wide privileges are requested.
Guidance
This skill proxies Dropbox through Maton (gateway.maton.ai / ctrl.maton.ai) and requires a MATON_API_KEY. That key is sensitive: anyone holding it can use Maton's gateway to access connected Dropbox accounts. Before installing, verify you trust Maton (review their docs/privacy), create and use a dedicated API key with minimal permissions if possible, rotate/revoke the key when not needed, and avoid exposing the key in logs or public code. If you prefer not to route Dropbox traffic through a third party, use a skill that calls Dropbox directly with your own OAuth client credentials.
Latest Release
v1.0.2
- Added new metadata field in SKILL.md under "metadata", including a "clawdbot" section with an emoji and environment variable requirements. - No code changes were detected; this update is documentation/metadata only. - Skill functionality and usage remain unchanged.
More by @byungkyu
Published by @byungkyu on ClawHub
