Zoho Mail API integration with managed OAuth. Send, receive, and manage emails, folders, and labels. Use this skill when users want to send emails, read messages, manage folders, or work with email labels in Zoho Mail. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
Security Analysis
high confidenceThe skill's requests and runtime instructions are consistent with a Zoho Mail proxy integration that uses a single Maton API key; nothing in the bundle suggests mismatched or unexplained access.
The name/description promise a Zoho Mail integration and the SKILL.md only requires network access and a MATON_API_KEY to call Maton-managed gateway and control endpoints; the requested environment variable and endpoints align with that purpose.
Runtime instructions show only HTTP calls to Maton endpoints (gateway.maton.ai, ctrl.maton.ai, connect.maton.ai) and examples that use the MATON_API_KEY. The docs do not instruct the agent to read local files, other env vars, or send data to unrelated third-party endpoints.
No install spec or code files are included (instruction-only). Nothing will be downloaded or written to disk by an installer as part of the skill bundle.
The only required environment variable is MATON_API_KEY which is proportionate for a managed-OAuth gateway proxy. There are no unrelated secrets or multiple credential requests. Note: the key grants Maton-mediated access to your Zoho account, which is expected but central to the integration.
The skill is not always-on and is user-invocable; it does not request elevated installation privileges or modify other skills' configs. Autonomous invocation is permitted (platform default) and appropriate for an API integration. Be aware that Maton endpoints will hold OAuth tokens once connections are created.
Guidance
This skill is coherent: it proxies Zoho Mail calls through Maton and only asks for a MATON_API_KEY. Before installing, confirm you trust Maton (maton.ai) because Maton will store or broker OAuth tokens for your Zoho account. Consider: (1) use a dedicated Maton API key with minimal privileges, (2) review Maton privacy/terms and connection management at ctrl.maton.ai, (3) rotate/ revoke the key if you stop using the skill, and (4) the static scanner had no code to analyze (instruction-only), so runtime network calls to Maton are the primary risk — only proceed if you trust that service.
Latest Release
v1.0.4
- Added "homepage" field to metadata, linking to the Maton homepage. - No other changes detected.
More by @byungkyu
Published by @byungkyu on ClawHub
