Microsoft Excel API integration with managed OAuth. Read and write Excel workbooks, worksheets, ranges, tables, and charts stored in OneDrive. Use this skill when users want to read or modify Excel spreadsheets, manage worksheet data, work with tables, or access cell values. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
Security Analysis
high confidenceThe skill's requests, instructions, and required environment variable are consistent with a Microsoft Excel (Microsoft Graph) proxy integration via Maton; it appears to do what it says and asks only for an API key it needs to call the gateway.
Name/description claim access to Microsoft Excel via a managed gateway; SKILL.md shows requests to gateway.maton.ai and ctrl.maton.ai and requires MATON_API_KEY — this matches the stated purpose.
All runtime instructions are HTTP calls to Maton endpoints and use only the declared MATON_API_KEY. There are no instructions to read unrelated files, other environment variables, or to exfiltrate data to unexpected endpoints.
No install spec or code files — the skill is instruction-only, so nothing is written to disk or installed by the skill itself.
The skill requires a single env var (MATON_API_KEY), which is appropriate for a gateway-based integration. Note: primary credential field is unset but that is not harmful; the required secret is a single API key and appears proportionate.
always:false and default autonomy settings are used. The skill does not request permanent system presence or modify other skills or system-wide settings.
Guidance
This skill routes Microsoft Graph calls through Maton (gateway.maton.ai / ctrl.maton.ai / connect.maton.ai) and requires a MATON_API_KEY. Before installing: verify you trust Maton (domain, company, privacy/security policies), ensure the API key you provide has least privilege (use a test or limited account where possible), confirm OAuth URLs returned by the service are legitimate (check TLS and hostnames), and avoid using high-privilege or long-lived credentials from production accounts until you've validated behavior. The skill is internally consistent, but because the gateway will proxy your workbook data, treat Maton as a data custodian and vet it accordingly. If provenance matters, ask the publisher for a homepage or source repository before use.
Latest Release
v1.0.3
- Added a "clawdbot" metadata section specifying the required environment variable (`MATON_API_KEY`) and an identifying emoji. - No other changes to functionality or documentation.
More by @byungkyu
Published by @byungkyu on ClawHub
