← Back to Skills Marketplace
Outlook
by
Otman Heddouch
· GitHub ↗
· v1.0.0
· MIT-0
90
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install outlook-matan
Description
Access Microsoft Outlook via Maton Gateway to read, send, and manage emails, folders, calendar events, and contacts with OAuth authentication.
Usage Guidance
Do not install or enable this skill until you verify the provider and credential requirements. Specific actions to take: 1) Confirm with the skill publisher where MATON_API_KEY should come from and why the registry metadata omits it; demand that the skill declare required env vars and the token's minimum OAuth scopes. 2) Validate Maton (maton.ai / ctrl.maton.ai / gateway.maton.ai) as a trusted third party before giving any token that can read/send mail. 3) Prefer using official Microsoft Graph integration (with per-scope OAuth) or a vetted connector over a third-party gateway for sensitive mail access. 4) If you proceed, limit and rotate the API key, store it securely, and monitor for unexpected agent activity. 5) Ask the publisher for a homepage, source repository, or a signed provenance statement so you (or a reviewer) can audit what the skill will do.
Capability Analysis
Type: OpenClaw Skill
Name: outlook-matan
Version: 1.0.0
The skill provides a standard interface for an AI agent to interact with Microsoft Outlook via the Maton AI gateway (gateway.maton.ai). The instructions in SKILL.md define legitimate API operations for managing emails, calendars, and contacts using a dedicated API key. No evidence of data exfiltration, malicious execution, or prompt injection was found; the high-risk capabilities (email access) are strictly aligned with the stated purpose of the skill.
Capability Tags
Capability Assessment
Purpose & Capability
The SKILL.md and description align: it proxies Microsoft Graph (Outlook) via Maton Gateway (gateway.maton.ai / ctrl.maton.ai) and exposes mailbox, calendar, contacts, and connection management operations that match the stated purpose. However, the skill has unknown source/homepage metadata, which reduces trustworthiness of the provider.
Instruction Scope
The runtime instructions contain numerous curl examples that rely on an environment variable MATON_API_KEY and call ctrl.maton.ai for connection management and gateway.maton.ai for API access. The instructions do not tell the agent to read unrelated local files, but they do instruct use of an undeclared secret (MATON_API_KEY) and to 'open the returned url in your browser' for OAuth flows. The agent will need that API key to act; the SKILL.md expects it but the skill metadata doesn't declare it.
Install Mechanism
No install spec and no code files — this is instruction-only, which minimizes attack surface from bundled binaries or downloads. However, instruction-only also means there is no code to audit beyond the prose, and network calls will go to Maton endpoints.
Credentials
The SKILL.md requires MATON_API_KEY (a bearer token) for Authorization and demonstrates operations that would grant full mailbox/calendar/contact access. But the registry metadata lists no required environment variables and no primary credential. The absence of a declared primary credential is an inconsistency. Requesting a single API key is proportionate for this functionality, but the key grants sensitive access and the skill should have declared it and documented required scopes and storage/rotation practices.
Persistence & Privilege
The skill is not always-enabled and does not request system-level persistence or modification of other skills' configs. Autonomous invocation is allowed (the platform default) but this combination with an undeclared sensitive credential increases the blast radius if the key is provided.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install outlook-matan - After installation, invoke the skill by name or use
/outlook-matan - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Outlook integration via Maton Gateway.
- Enables access to Microsoft Outlook (emails, calendar, contacts, folders) using the Microsoft Graph API through Maton Gateway with managed OAuth.
- Provides step-by-step setup instructions for authentication and API key management.
- Includes detailed curl examples for reading, sending, managing emails, calendar events, and contacts.
- Supports connection management, including creating, listing, specifying, and deleting Outlook connections.
- Documents common query parameters, error codes, and troubleshooting tips.
Metadata
Frequently Asked Questions
What is Outlook?
Access Microsoft Outlook via Maton Gateway to read, send, and manage emails, folders, calendar events, and contacts with OAuth authentication. It is an AI Agent Skill for Claude Code / OpenClaw, with 90 downloads so far.
How do I install Outlook?
Run "/install outlook-matan" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Outlook free?
Yes, Outlook is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Outlook support?
Outlook is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Outlook?
It is built and maintained by Otman Heddouch (@otman-ai); the current version is v1.0.0.
More Skills