SignNow

SignNow API integration with managed OAuth. E-signature platform for sending, signing, and managing documents. Use this skill when users want to upload documents, send signature invites, create templates, or manage e-signature workflows. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.

This skill is internally consistent: it proxies SignNow calls through Maton and only asks for a MATON_API_KEY. Before installing, verify you trust Maton (gateway.maton.ai / ctrl.maton.ai) because the gateway will see and act on your requests and tokens. Treat MATON_API_KEY as sensitive: limit its scope if possible, use a dedicated/rotatable key, and review Maton's documentation and privacy/security posture. If you expect calls to go directly to signnow.com (not via a proxy), confirm that behavior with the skill author; otherwise the Maton proxy is functioning as designed.

Type: OpenClaw Skill Name: signnow Version: 1.0.2 The skill bundle appears benign. All code examples and instructions in `SKILL.md` are directly related to integrating with the SignNow API via the `maton.ai` gateway, requiring a `MATON_API_KEY` from environment variables. Network calls are exclusively directed to `https://gateway.maton.ai` and `https://ctrl.maton.ai`. File access is limited to reading a specific `document.pdf` for upload, which aligns with the skill's purpose. There is no evidence of data exfiltration to unauthorized third parties, unauthorized command execution, persistence mechanisms, obfuscation, or prompt injection attempts designed to subvert the agent's core function. The ability to set a `callback_url` for webhooks is a standard API feature, not an inherent malicious act by the skill itself.