Systeme.io API integration with managed OAuth. Manage contacts, tags, courses, communities, and subscriptions. Use this skill when users want to manage Systeme.io contacts, enroll students in courses, manage community memberships, or handle subscriptions. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
Security Analysis
high confidenceThe skill's requests and runtime instructions are consistent with a gateway-based Systeme.io integration that uses a Maton API key; nothing in the skill asks for unrelated credentials, installs, or filesystem access.
The skill claims to proxy Systeme.io via a managed OAuth gateway and the SKILL.md exclusively documents calls to Maton endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) and the use of MATON_API_KEY — this matches the stated purpose of managing contacts, courses, tags, connections, and subscriptions.
Runtime instructions are explicit HTTP calls (example Python snippets) that only read MATON_API_KEY from environment and call the Maton gateway/control endpoints. There are no instructions to read arbitrary files, other env vars, or to transmit data to unexpected domains beyond Maton/systeme proxy URLs. OAuth requires opening a returned URL in a browser, which is documented.
This is an instruction-only skill with no install spec and no code files to execute locally, so there is no installer or downloaded code to evaluate — lowest install risk.
The only required environment variable is MATON_API_KEY, which is appropriate for a gateway-based integration. Minor metadata inconsistency: registry 'Primary credential' is listed as none while the SKILL.md and requirements declare MATON_API_KEY; confirm that MATON_API_KEY is the intended primary credential in the platform UI before installing.
always:false and no install or system modifications are requested. The skill can be invoked autonomously by the agent (disable-model-invocation:false), which is the platform default; this means the agent can call Maton endpoints using the provided API key when permitted.
Guidance
This skill appears coherent: it acts as a documented proxy to Systeme.io via Maton and only needs a MATON_API_KEY. Before installing, verify you trust maton.ai (the gateway) because the API key grants access to your Systeme.io connections and data. Prefer creating a limited-scope/test Maton key (or a test Systeme.io account) first, confirm the exact token scopes and expiration/rotation policy, and verify the registry metadata (the SKILL.md lists MATON_API_KEY but registry 'primary credential' is unset). Revoke or rotate the key when you stop using the skill. If you require higher assurance, ask the publisher for an official homepage or documentation and confirm the Maton endpoints in a browser or via their public docs.
Latest Release
v1.0.4
- Webhook management operations and references have been removed from the documentation. - The description has been updated to reflect support for contacts, tags, courses, communities, and subscriptions only (webhook support no longer mentioned). - Documentation is now more concise and focused on the remaining supported features. - All usage and authentication instructions remain unchanged.
More by @byungkyu
Published by @byungkyu on ClawHub
