coda

Integrates with the Coda API for managing documents, pages, tables, and rows using OAuth authentication.

Install this skill

68/100

Security score

The coda skill was audited on Feb 16, 2026 and we found 28 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 532

Template literal with variable interpolation in command context

SourceSKILL.md

532	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 528

Fetch to external URL

SourceSKILL.md

528	const response = await fetch(

low line 532

Access to .env file

SourceSKILL.md

532	'Authorization': `Bearer ${process.env.MATON_API_KEY}`

low line 6

External URL reference

SourceSKILL.md

6	For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).

low line 13

External URL reference

SourceSKILL.md

13	homepage: "https://maton.ai"

low line 29

External URL reference

SourceSKILL.md

29	req = urllib.request.Request('https://gateway.maton.ai/coda/apis/v1/docs')

low line 38

External URL reference

SourceSKILL.md

38	https://gateway.maton.ai/coda/apis/v1/{resource}

low line 59

External URL reference

SourceSKILL.md

59	1. Sign in or create an account at [maton.ai](https://maton.ai)

low line 60

External URL reference

SourceSKILL.md

60	2. Go to [maton.ai/settings](https://maton.ai/settings)

low line 65

External URL reference

SourceSKILL.md

65	Manage your Coda OAuth connections at `https://ctrl.maton.ai`.

low line 72

External URL reference

SourceSKILL.md

72	req = urllib.request.Request('https://ctrl.maton.ai/connections?app=coda&status=ACTIVE')

low line 84

External URL reference

SourceSKILL.md

84	req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST')

low line 96

External URL reference

SourceSKILL.md

96	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}')

low line 110

External URL reference

SourceSKILL.md

110	"url": "https://connect.maton.ai/?session_token=...",

low line 124

External URL reference

SourceSKILL.md

124	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE')

low line 137

External URL reference

SourceSKILL.md

137	req = urllib.request.Request('https://gateway.maton.ai/coda/apis/v1/docs')

low line 490

External URL reference

SourceSKILL.md

490	"href": "https://coda.io/apis/v1/docs?pageToken=...",

low line 529

External URL reference

SourceSKILL.md

529	'https://gateway.maton.ai/coda/apis/v1/docs?limit=10',

low line 547

External URL reference

SourceSKILL.md

547	'https://gateway.maton.ai/coda/apis/v1/docs',

low line 563

External URL reference

SourceSKILL.md

563	base_url = 'https://gateway.maton.ai/coda/apis/v1'

low line 593

External URL reference

SourceSKILL.md

593	'https://gateway.maton.ai/coda/apis/v1/docs/{docId}/tables/{tableId}/rows',

low line 656

External URL reference

SourceSKILL.md

656	req = urllib.request.Request('https://ctrl.maton.ai/connections')

low line 666

External URL reference

SourceSKILL.md

666	- Correct: `https://gateway.maton.ai/coda/apis/v1/docs`

low line 667

External URL reference

SourceSKILL.md

667	- Incorrect: `https://gateway.maton.ai/apis/v1/docs`

low line 671

External URL reference

SourceSKILL.md

671	- [Coda API Documentation](https://coda.io/developers/apis/v1)

low line 672

External URL reference

SourceSKILL.md

672	- [Coda API Postman Collection](https://www.postman.com/codaio/coda-workspace/collection/0vy7uxn/coda-api)

low line 673

External URL reference

SourceSKILL.md

673	- [Coda API Python Library (codaio)](https://codaio.readthedocs.io/)

low line 674

External URL reference

SourceSKILL.md

674	- [Maton Community](https://discord.com/invite/dBfFAcefs2)

Scanned on Feb 16, 2026

View Security Dashboard

Install this skill with one command

/learn @openclaw/coda-api

GitHub Stars 2.2K

Rate this skill

Categorydevelopment

UpdatedMarch 29, 2026

openclaw api coda

openclaw/skills