โ† All skills
Tencent SkillHub ยท Productivity

Scalekit-Agent-Auth

Secure OAuth token management via Scalekit. Handles token storage, refresh, and retrieval for third-party services (Gmail, Slack, GitHub, etc.). Never stores tokens locally - always fetches fresh tokens from Scalekit.

skill openclawclawhub Free
0 Downloads
0 Stars
0 Installs
0 Score
High Signal

Secure OAuth token management via Scalekit. Handles token storage, refresh, and retrieval for third-party services (Gmail, Slack, GitHub, etc.). Never stores tokens locally - always fetches fresh tokens from Scalekit.

โฌ‡ 0 downloads โ˜… 0 stars Unverified but indexed

Install for OpenClaw

Quick setup
  1. Download the package from Yavira.
  2. Extract the archive and review SKILL.md first.
  3. Import or place the package into your OpenClaw setup.

Requirements

Target platform
OpenClaw
Install method
Manual import
Extraction
Extract archive
Prerequisites
OpenClaw
Primary doc
SKILL.md

Package facts

Download mode
Yavira redirect
Package format
ZIP package
Source platform
Tencent SkillHub
What's included
README.md, SKILL.md, agent_wrapper.py, pyproject.toml, requirements.txt, tool_exec.py

Validation

  • Use the Yavira download entry.
  • Review SKILL.md after the package is downloaded.
  • Confirm the extracted package contains the expected setup assets.

Install with your agent

Agent handoff

Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.

  1. Download the package from Yavira.
  2. Extract it into a folder your agent can access.
  3. Paste one of the prompts below and point your agent at the extracted folder.
New install

I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Then review README.md for any prerequisites, environment setup, or post-install checks. Tell me what you changed and call out any manual steps you could not complete.

Upgrade existing

I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Then review README.md for any prerequisites, environment setup, or post-install checks. Summarize what changed and any follow-up checks I should run.

Trust & source

Release facts

Source
Tencent SkillHub
Verification
Indexed source record
Version
2.2.0

Documentation

ClawHub primary doc Primary doc: SKILL.md 14 sections Open source page

OpenClaw Tool Executor

General-purpose tool executor for OpenClaw agents. Uses Scalekit Connect to discover and run tools for any connected service โ€” OAuth (Notion, Slack, Gmail, GitHub, etc.) or non-OAuth (API Key, Bearer, Basic auth).

Environment Variables

Required in .env: TOOL_CLIENT_ID=<scalekit_client_id> TOOL_CLIENT_SECRET=<scalekit_client_secret> TOOL_ENV_URL=<scalekit_environment_url> TOOL_IDENTIFIER=<default_identifier> # optional but recommended TOOL_IDENTIFIER is used as the default --identifier for all operations. If not set, the script will prompt the user at runtime and display a warning advising them to set it in .env.

Execution Flow

When the user asks to perform an action on a connected service, follow these steps in order:

Step 1 โ€” Discover the Connection

Dynamically resolve the connection_name by listing all configured connections for the provider. The API paginates automatically through all pages: uv run tool_exec.py --list-connections --provider <PROVIDER> Use the key_id from the first result as <CONNECTION_NAME> for all subsequent steps. If no connection found โ†’ inform the user that no <PROVIDER> connection is configured in Scalekit and stop. If multiple connections found โ†’ the first one is selected automatically (a warning is shown).

Step 2 โ€” Check & Authorize

Run --generate-link for the connection. The tool automatically detects the connection type (OAuth vs non-OAuth) and applies the correct auth flow: uv run tool_exec.py --generate-link \ --connection-name <CONNECTION_NAME> OAuth connections: If already ACTIVE โ†’ proceed to Step 3. If not active โ†’ a magic link is generated. Present it to the user, wait for them to complete the flow, then proceed to Step 3. Non-OAuth connections (BEARER, BASIC, API Key, etc.): If account not found โ†’ stop. Tell the user: "Please create and configure the <CONNECTION_NAME> connection in the Scalekit Dashboard." If account exists but not active โ†’ stop. Tell the user: "Please activate the <CONNECTION_NAME> connection in the Scalekit Dashboard." If ACTIVE โ†’ proceed to Step 3. Never use --get-authorization in the execution flow โ€” that is only for inspecting raw OAuth tokens and does not work for non-OAuth connections.

Step 3 โ€” Discover Available Tools

Fetch the list of tools available for the provider: uv run tool_exec.py --get-tool --provider <PROVIDER> Look for a tool that matches the user's intent (e.g. notion_page_get for reading a page). If a matching tool exists โ†’ go to Step 3b. If no matching tool exists โ†’ go to Step 5 (proxy fallback).

Step 3b โ€” Fetch Tool Schema (mandatory before executing)

Always fetch the schema of the matched tool before constructing the input. This tells you the exact parameter names, types, required vs optional fields, and valid enum values: uv run tool_exec.py --get-tool --tool-name <TOOL_NAME> Read the input_schema.properties from the response โ€” use only the parameter names defined there. Note which fields are in required โ€” these must always be included in --tool-input. Use description and display_properties to understand what each field expects. Never guess parameter names โ€” always derive them from the schema.

Step 4 โ€” Execute the Tool

Construct the tool input using only parameters from the schema fetched in Step 3b, then run: uv run tool_exec.py --execute-tool \ --tool-name <TOOL_NAME> \ --connection-name <CONNECTION_NAME> \ --tool-input '<JSON_INPUT>' Return the result to the user.

Step 5 โ€” Proxy Fallback (only if no tool exists)

If no Scalekit tool covers the required action, attempt a proxied HTTP request directly to the provider's API: uv run tool_exec.py --proxy-request \ --connection-name <CONNECTION_NAME> \ --path <API_PATH> \ --method <GET|POST|PUT|DELETE> \ --query-params '<JSON>' \ # optional --body '<JSON>' # optional Note: Proxy may be disabled on some environments. If it returns TOOL_PROXY_DISABLED, inform the user that this action isn't supported by the current Scalekit tool catalog and suggest they request a new tool from Scalekit.

Example: Search LinkedIn (via HarvestAPI)

User: "Find software engineers in San Francisco on LinkedIn" --list-connections --provider HARVESTAPI โ†’ key_id: harvestapi-xxxx, type: API_KEY --generate-link --connection-name harvestapi-xxxx โ†’ detects API_KEY, checks account โ†’ ACTIVE --get-tool --provider HARVESTAPI โ†’ finds harvestapi_search_people 3b. --get-tool --tool-name harvestapi_search_people โ†’ schema shows valid params: first_names, last_names, search, locations, current_job_titles, etc. --execute-tool --tool-name harvestapi_search_people --connection-name harvestapi-xxxx --tool-input '{"first_names": "John", "locations": "San Francisco", "current_job_titles": "Software Engineer"}' โ†’ returns matching LinkedIn profiles Any LinkedIn-related request (profiles, jobs, companies, posts, people search, ads, groups) โ†’ use provider HARVESTAPI.

Example: Search the web with Exa (API Key connection)

User: "Search for latest AI news using Exa" --list-connections --provider EXA โ†’ key_id: exa, type: API_KEY --generate-link --connection-name exa โ†’ detects API_KEY, checks account โ†’ ACTIVE --get-tool --provider EXA โ†’ finds exa_search 3b. --get-tool --tool-name exa_search โ†’ schema shows query (required), num_results, type, etc. --execute-tool --tool-name exa_search --connection-name exa --tool-input '{"query": "latest AI news"}' โ†’ returns search results

Example: Read a Notion Page (OAuth connection)

User: "Read my Notion page https://notion.so/..." --list-connections --provider NOTION โ†’ key_id: notion-ijIQedmJ, type: OAUTH --generate-link --connection-name notion-ijIQedmJ โ†’ detects OAuth, already ACTIVE --get-tool --provider NOTION โ†’ finds notion_page_get 3b. --get-tool --tool-name notion_page_get โ†’ schema shows page_id (required) --execute-tool --tool-name notion_page_get --connection-name notion-ijIQedmJ --tool-input '{"page_id": "..."}' โ†’ returns page metadata

Example: Action Not Yet in Scalekit

User: "Fetch the blocks of a Notion page" --list-connections --provider NOTION โ†’ key_id: notion-ijIQedmJ --generate-link --connection-name notion-ijIQedmJ โ†’ ACTIVE --get-tool --provider NOTION โ†’ no notion_blocks_fetch tool found --proxy-request --path "/blocks/<page_id>/children" โ†’ fallback attempt If proxy disabled โ†’ inform user the action isn't available yet

Supported Providers

Any provider configured in Scalekit (Notion, Slack, Gmail, Google Sheets, GitHub, Salesforce, HubSpot, Linear, and 50+ more). Use the provider name in uppercase for --provider (e.g. NOTION, SLACK, GOOGLE).

Category context

Workflow acceleration for inboxes, docs, calendars, planning, and execution loops.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package
2 Docs2 Scripts2 Files
  • SKILL.md Primary doc
  • README.md Docs
  • agent_wrapper.py Scripts
  • tool_exec.py Scripts
  • pyproject.toml Files
  • requirements.txt Files