Monday.com API integration with managed OAuth. Manage boards, items, columns, groups, and workspaces using GraphQL. Use this skill when users want to create, update, or query Monday.com boards and items, manage tasks, or automate workflows. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
Security Analysis
medium confidenceThe skill's requirements and runtime instructions match its stated purpose (a Monday.com integration proxied through Maton); nothing in the bundle is disproportionate, but the skill relies on a third‑party gateway (maton) of unknown provenance so you should vet that service before trusting credentials.
The skill is a Monday.com GraphQL integration and only requests a MATON_API_KEY to call Maton's gateway (gateway.maton.ai / ctrl.maton.ai). Requiring a Maton API key is coherent with the described gateway‑proxy design.
SKILL.md contains only network requests to Maton endpoints and examples that read MATON_API_KEY from the environment. It does not instruct reading unrelated files, system credentials, or exfiltrating data to unexpected endpoints.
No install spec or code files are present; this is instruction‑only, so nothing is downloaded or written to disk by the skill itself.
Only one env var (MATON_API_KEY) is required, which is proportional to a gateway‑based integration. Note: that key grants the Maton service the ability to act on your behalf (including managing OAuth connections to Monday.com), so its trustworthiness and scope/permissions matter.
always is false and the skill does not request persistent system modifications or other skills' credentials. The skill can be invoked autonomously (platform default), which is expected for skills.
Guidance
This skill appears internally consistent: it uses a Maton API gateway to interact with Monday.com and only needs MATON_API_KEY. Before installing, verify you trust the Maton service (maton.ai / gateway.maton.ai / ctrl.maton.ai), confirm what permissions the MATON_API_KEY has, store the key securely, and prefer least privilege (rotate/revoke keys when done). If you prefer not to route tokens through a third party, consider using direct Monday.com OAuth/API credentials instead. If you need higher assurance, ask the publisher for a homepage, source repository, or additional provenance information.
Latest Release
v1.0.3
- Added new metadata fields under the "metadata" section, including a "clawdbot" section with emoji and required environment variable information. - No other changes to the skill implementation or usage instructions.
More by @byungkyu
Published by @byungkyu on ClawHub
