Nango API Integration

Connect AI agents to 700+ external APIs using Nango. Handles OAuth, authentication flows, and tool calling for any API. Use when integrating agents with exte...

This skill appears to be a straightforward Nango integration, but there are two practical red flags: the metadata does not declare the environment variables the instructions and scripts expect (NANGO_SECRET_KEY, NANGO_HOST), and there is no homepage/source URL to verify the publisher. Before installing or giving it secrets: 1) Confirm the publisher and source code (verify on nango.dev or a trusted repo). 2) Do not use production secrets for initial testing—use a throwaway key or a self-hosted Nango instance. 3) Limit scopes and permissions on any OAuth clients and API keys you register. 4) Audit logs on your Nango account to track calls made by the agent. 5) If you want to allow autonomous calls, constrain which providers/actions the agent can invoke. If the publisher can provide a homepage/repo and the metadata is updated to declare required env vars (and a reasonable primary credential), the incoherence would be resolved.

Type: OpenClaw Skill Name: nango-api-integration Version: 1.0.0 The skill bundle provides a legitimate integration for the Nango API platform, enabling AI agents to connect to over 700 external services. It includes clear documentation in SKILL.md, functional Python examples in scripts/examples.py, and a utility for testing connectivity in scripts/test_connection.py. The code follows standard security practices, such as using environment variables for secrets, and contains no evidence of malicious intent, data exfiltration, or prompt injection.