Maton browse plan — API Gateway

Guides the user through installing the Maton API Plan — browsing capture Chrome extension from the Chrome Web Store (or building from source), then combines...

This skill appears to do what it says: it helps you install a Chrome extension and use the exported matonPlan together with the Maton API. Before installing, verify you trust the Maton extension and the GitHub repo (prefer the Chrome Web Store install). Be aware that: 1) you will need to provide MATON_API_KEY to let the skill call Maton services — consider a scoped/limited API key; 2) if you enable the local relay/native messaging, you (or scripts you run) will write a native messaging manifest to your browser/system (this is normal for native hosts but requires care); 3) the SKILL.md references MATON_RELAY_TOKEN for relay auth but that variable isn't declared by the skill metadata — if you plan to use the relay, confirm how the token is set and protected. If you have sensitive data in your browser history, the extension may request history/tabs access — review its permissions before consenting.

Type: OpenClaw Skill Name: maton-browse-plan Version: 1.3.1 The skill guides users to install a Chrome extension and a local relay to analyze browsing history for API integration suggestions. It instructs the agent to proactively poll a local HTTP endpoint (127.0.0.1:37191) and directs users to execute shell commands in SKILL.md to install a native messaging host. While these capabilities are aligned with the stated purpose of the 'Maton API Plan,' the combination of local network access, system-level configuration changes, and the processing of sensitive browsing data represents a high-risk profile without explicit evidence of malicious intent.