mailgun

Integrates with Mailgun API for managing transactional emails, domains, and templates, enhancing email marketing capabilities.

Install this skill

or

0/100

Security score

The mailgun skill was audited on Feb 16, 2026 and we found 60 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 644

Template literal with variable interpolation in command context

SourceSKILL.md

644	'Authorization': `Bearer ${process.env.MATON_API_KEY}`,

low line 639

Fetch to external URL

SourceSKILL.md

639	const response = await fetch(

medium line 21

Webhook reference - potential data exfiltration

SourceSKILL.md

21	Access the Mailgun API with managed OAuth authentication. Send transactional emails, manage domains, routes, templates, mailing lists, suppressions, and webhooks.

low line 257

Webhook reference - potential data exfiltration

SourceSKILL.md

257	priority=0&description=My Route&expression=match_recipient(".*@example.com")&action=forward("https://example.com/webhook")

medium line 287

Webhook reference - potential data exfiltration

SourceSKILL.md

287	### Webhooks

medium line 289

Webhook reference - potential data exfiltration

SourceSKILL.md

289	#### List Webhooks

low line 292

Webhook reference - potential data exfiltration

SourceSKILL.md

292	GET /mailgun/v3/domains/{domain_name}/webhooks

medium line 295

Webhook reference - potential data exfiltration

SourceSKILL.md

295	#### Create Webhook

low line 298

Webhook reference - potential data exfiltration

SourceSKILL.md

298	POST /mailgun/v3/domains/{domain_name}/webhooks

low line 301

Webhook reference - potential data exfiltration

SourceSKILL.md

301	id=delivered&url=https://example.com/webhook

medium line 304

Webhook reference - potential data exfiltration

SourceSKILL.md

304	Webhook types: `accepted`, `delivered`, `opened`, `clicked`, `unsubscribed`, `complained`, `permanent_fail`, `temporary_fail`

medium line 306

Webhook reference - potential data exfiltration

SourceSKILL.md

306	#### Get Webhook

low line 309

Webhook reference - potential data exfiltration

SourceSKILL.md

309	GET /mailgun/v3/domains/{domain_name}/webhooks/{webhook_type}

medium line 312

Webhook reference - potential data exfiltration

SourceSKILL.md

312	#### Update Webhook

low line 315

Webhook reference - potential data exfiltration

SourceSKILL.md

315	PUT /mailgun/v3/domains/{domain_name}/webhooks/{webhook_type}

low line 318

Webhook reference - potential data exfiltration

SourceSKILL.md

318	url=https://example.com/new-webhook

medium line 321

Webhook reference - potential data exfiltration

SourceSKILL.md

321	#### Delete Webhook

low line 324

Webhook reference - potential data exfiltration

SourceSKILL.md

324	DELETE /mailgun/v3/domains/{domain_name}/webhooks/{webhook_type}

medium line 688

Webhook reference - potential data exfiltration

SourceSKILL.md

688	### Python - Create Route and Webhook

low line 703

Webhook reference - potential data exfiltration

SourceSKILL.md

703	'description': 'Forward to webhook',

low line 710

Webhook reference - potential data exfiltration

SourceSKILL.md

710	# Create webhook

low line 711

Webhook reference - potential data exfiltration

SourceSKILL.md

711	webhook_response = requests.post(

low line 712

Webhook reference - potential data exfiltration

SourceSKILL.md

712	f'https://gateway.maton.ai/mailgun/v3/domains/{domain}/webhooks',

low line 716

Webhook reference - potential data exfiltration

SourceSKILL.md

716	'url': 'https://myapp.com/webhook/delivered'

low line 719

Webhook reference - potential data exfiltration

SourceSKILL.md

719	print(f"Webhook created: {webhook_response.json()}")

low line 644

Access to .env file

SourceSKILL.md

644	'Authorization': `Bearer ${process.env.MATON_API_KEY}`,

low line 6

External URL reference

SourceSKILL.md

6	For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).

low line 13

External URL reference

SourceSKILL.md

13	homepage: "https://maton.ai"

low line 29

External URL reference

SourceSKILL.md

29	req = urllib.request.Request('https://gateway.maton.ai/mailgun/v3/domains')

low line 38

External URL reference

SourceSKILL.md

38	https://gateway.maton.ai/mailgun/v3/{resource}

low line 61

External URL reference

SourceSKILL.md

61	1. Sign in or create an account at [maton.ai](https://maton.ai)

low line 62

External URL reference

SourceSKILL.md

62	2. Go to [maton.ai/settings](https://maton.ai/settings)

low line 67

External URL reference

SourceSKILL.md

67	Manage your Mailgun OAuth connections at `https://ctrl.maton.ai`.

low line 74

External URL reference

SourceSKILL.md

74	req = urllib.request.Request('https://ctrl.maton.ai/connections?app=mailgun&status=ACTIVE')

low line 86

External URL reference

SourceSKILL.md

86	req = urllib.request.Request('https://ctrl.maton.ai/connections', data=data, method='POST')

low line 98

External URL reference

SourceSKILL.md

98	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}')

low line 112

External URL reference

SourceSKILL.md

112	"url": "https://connect.maton.ai/?session_token=...",

low line 126

External URL reference

SourceSKILL.md

126	req = urllib.request.Request('https://ctrl.maton.ai/connections/{connection_id}', method='DELETE')

low line 139

External URL reference

SourceSKILL.md

139	req = urllib.request.Request('https://gateway.maton.ai/mailgun/v3/domains')

low line 257

External URL reference

SourceSKILL.md

257	priority=0&description=My Route&expression=match_recipient(".*@example.com")&action=forward("https://example.com/webhook")

low line 301

External URL reference

SourceSKILL.md

301	id=delivered&url=https://example.com/webhook

low line 318

External URL reference

SourceSKILL.md

318	url=https://example.com/new-webhook

low line 618

External URL reference

SourceSKILL.md

618	"first": "https://api.mailgun.net/v3/.../pages?page=first&limit=100",

low line 619

External URL reference

SourceSKILL.md

619	"last": "https://api.mailgun.net/v3/.../pages?page=last&limit=100",

low line 620

External URL reference

SourceSKILL.md

620	"next": "https://api.mailgun.net/v3/.../pages?page=next&limit=100",

low line 621

External URL reference

SourceSKILL.md

621	"previous": "https://api.mailgun.net/v3/.../pages?page=prev&limit=100"

low line 640

External URL reference

SourceSKILL.md

640	'https://gateway.maton.ai/mailgun/v3/example.com/messages',

low line 661

External URL reference

SourceSKILL.md

661	'https://gateway.maton.ai/mailgun/v3/example.com/messages',

low line 680

External URL reference

SourceSKILL.md

680	'https://gateway.maton.ai/mailgun/v3/domains',

low line 699

External URL reference

SourceSKILL.md

699	'https://gateway.maton.ai/mailgun/v3/routes',

low line 705

External URL reference

SourceSKILL.md

705	'action': 'forward("https://myapp.com/incoming-email")'

low line 712

External URL reference

SourceSKILL.md

712	f'https://gateway.maton.ai/mailgun/v3/domains/{domain}/webhooks',

low line 716

External URL reference

SourceSKILL.md

716	'url': 'https://myapp.com/webhook/delivered'

low line 768

External URL reference

SourceSKILL.md

768	req = urllib.request.Request('https://ctrl.maton.ai/connections')

low line 778

External URL reference

SourceSKILL.md

778	- Correct: `https://gateway.maton.ai/mailgun/v3/domains`

low line 779

External URL reference

SourceSKILL.md

779	- Incorrect: `https://gateway.maton.ai/v3/domains`

low line 789

External URL reference

SourceSKILL.md

789	- [Mailgun API Documentation](https://documentation.mailgun.com/docs/mailgun/api-reference/api-overview)

low line 790

External URL reference

SourceSKILL.md

790	- [Mailgun API Reference](https://mailgun-docs.redoc.ly/docs/mailgun/api-reference/intro/)

low line 791

External URL reference

SourceSKILL.md

791	- [Mailgun Postman Collection](https://www.postman.com/mailgun/mailgun-s-public-workspace/documentation/ik8dl61/mailgun-api)

low line 792

External URL reference

SourceSKILL.md

792	- [Maton Community](https://discord.com/invite/dBfFAcefs2)

Scanned on Feb 16, 2026

View Security Dashboard

Installation guide →

GitHub Stars 2.2K

Rate this skill

Categorymarketing

UpdatedApril 4, 2026

openclaw api email-marketer growth-marketer marketing-analyst marketing

openclaw/skills