← Back to Skills Marketplace
mupengi-bot

Saas Decomposer

by mupengi-bot · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
788
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install saas-decomposer
Description
Web SaaS service decomposition and AI internalization development plan generation. Analyze existing SaaS to identify functions replaceable by AI agents and e...
Usage Guidance
This skill is internally consistent with its stated purpose, but before installing: 1) Confirm your agent is allowed to fetch the target sites (respect robots.txt and organizational policies). 2) Review and control the agent workspace and memory the skill may read (the SKILL.md references memory/... files) so it doesn't access unexpected notes. 3) Expect the skill to write analysis JSON files (events/...), so ensure you are comfortable with those files being created and stored. 4) Test on public/non-sensitive SaaS landing pages first to verify behavior. If you want extra caution, restrict the agent's outbound network access or run the skill in a sandboxed workspace.
Capability Analysis
Type: OpenClaw Skill Name: saas-decomposer Version: 1.0.0 The skill is classified as suspicious due to a significant Server-Side Request Forgery (SSRF) vulnerability. The `SKILL.md` explicitly instructs the AI agent to use `web_fetch` and `data-scraper` on user-provided SaaS service URLs or names. This lack of input sanitization or validation means an attacker could potentially provide malicious URLs (e.g., `file:///etc/passwd`, internal network endpoints) to the agent, leading to unauthorized access and potential data exfiltration from the host system or internal network resources. While the stated purpose of the skill (SaaS decomposition) is benign, the method exposes a critical security risk.
Capability Assessment
Purpose & Capability
Name/description (SaaS decomposition → AI internalization) matches the SKILL.md workflow: crawl pages, extract functions, score AI replaceability, map to skills and produce a roadmap/cost comparison.
Instruction Scope
Runtime instructions use agent tools like web_fetch and data-scraper, reference agent memory files (memory/...) and instruct writing event files (events/saas-analysis-YYYY-MM-DD.json). Those are coherent with the purpose but the skill assumes the agent has web-fetching and workspace/memory access; verify the agent environment's policies (robots/hosts) and that referenced memory files are intended to be read.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install footprint.
Credentials
No environment variables, credentials, or external config paths are requested. The actions described (HTTP crawling, text analysis, file outputs) do not require secrets.
Persistence & Privilege
The skill will write analysis outputs/events and references agent memory files; always:false and default autonomous invocation are set. This is reasonable for its purpose, but you should expect it to create workspace files and consult agent memory during analysis.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install saas-decomposer
  3. After installation, invoke the skill by name or use /saas-decomposer
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
saas-decomposer 1.0.0 - Initial release providing automated SaaS service decomposition and AI internalization planning. - Analyzes existing SaaS offerings, identifies replaceable functions, and assigns AI replaceability scores. - Generates detailed internalization roadmaps, including new skill specs, development timelines, and cost comparisons. - Supports comparative analysis across multiple SaaS products in the same category. - Includes pre-defined industry templates and troubleshooting guides for common analysis challenges.
Metadata
Slug saas-decomposer
Version 1.0.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is Saas Decomposer?

Web SaaS service decomposition and AI internalization development plan generation. Analyze existing SaaS to identify functions replaceable by AI agents and e... It is an AI Agent Skill for Claude Code / OpenClaw, with 788 downloads so far.

How do I install Saas Decomposer?

Run "/install saas-decomposer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Saas Decomposer free?

Yes, Saas Decomposer is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Saas Decomposer support?

Saas Decomposer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Saas Decomposer?

It is built and maintained by mupengi-bot (@mupengi-bot); the current version is v1.0.0.

💬 Comments