Supermetrics

Official Supermetrics skill. Query marketing data from 100+ platforms including Google Analytics, Meta Ads, Google Ads, and LinkedIn. Requires API key.

This package appears to implement a normal Supermetrics API client and only needs SUPERMETRICS_API_KEY, but there are provenance and metadata inconsistencies you should resolve before installing: 1) Verify the skill's publisher/source — it claims to be 'Official' but has no homepage or authoritative source listed. Prefer an integration obtained directly from Supermetrics or a trusted registry entry. 2) Confirm the platform will prompt you to provide SUPERMETRICS_API_KEY (the registry metadata omitted it); do not paste other secrets. 3) Note the code will read a .env file at ~/.openclaw/skills/supermetrics-openclawd/.env if the env var is absent — ensure that file does not contain additional unrelated secrets. 4) Check that the BASE_URL (https://mcp.supermetrics.com) matches Supermetrics' documented endpoints. If you cannot verify publisher authenticity, run the skill in a restricted environment, provide a least-privilege API key (revocable), and monitor network usage and logs. If you want higher assurance, ask the publisher for a homepage/repo or use an official Supermetrics integration.

Type: OpenClaw Skill Name: supermetrics-openclawd Version: 1.0.1 The skill bundle appears benign. The `supermetrics.py` script acts as a client for the Supermetrics API, retrieving the `SUPERMETRICS_API_KEY` from environment variables or a skill-specific `.env` file and using it to authenticate requests to `https://mcp.supermetrics.com`. All network calls are directed to this legitimate domain, and there is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or obfuscation. The `SKILL.md` file provides clear, non-malicious instructions for using the API and does not contain any prompt injection attempts against the agent.