← 返回 Skills 市场
6380
总下载
6
收藏
55
当前安装
1
版本数
在 OpenClaw 中安装
/install composio
功能描述
Connect your AI agent to 500+ apps for discovering tools, managing connections, and executing actions across Gmail, Slack, GitHub, Notion, Google Workspace,...
安全使用建议
Install only if you intentionally want your agent to use Composio across third-party apps. Use a dedicated Composio project, connect only the accounts needed, review OAuth scopes, keep the API key private, require explicit confirmation before sending, posting, editing, deleting, uploading, or running code, and revoke connections when the task is finished.
功能分析
Type: OpenClaw Skill
Name: composio
Version: 1.0.0
The skill bundle is classified as suspicious due to the inclusion of highly privileged capabilities, specifically `COMPOSIO_REMOTE_WORKBENCH` and `COMPOSIO_REMOTE_BASH_TOOL` described in `skill.md`. These tools allow for arbitrary Python code execution (including helper functions like `upload_local_file` for potential data exfiltration and `proxy_execute` for direct API calls to connected services) and arbitrary Bash command execution within a persistent sandbox. While these capabilities are presented as legitimate features for advanced automation, they introduce significant risk if the AI agent is compromised via prompt injection, potentially leading to unauthorized data access, exfiltration, or control over connected applications.
能力评估
Purpose & Capability
The purpose matches the documented Composio workflow of discovering, connecting, and executing tools across many apps, but the capability is very broad: connected-account actions, multi-tool execution, direct toolkit API calls, file upload from the remote sandbox, web search, LLM calls, and arbitrary Python/Bash execution.
Instruction Scope
The skill gives operational rules such as searching first, checking schemas, and requiring active connections, but it does not clearly require user confirmation before high-impact actions like sending messages, changing connected-account data, uploading files, using proxy API calls, or running code/shell commands.
Install Mechanism
The bundle contains a single Markdown skill and no executable install script, which lowers local installation risk; use requires a Composio API key and calls to the external Composio backend.
Credentials
OAuth/API connected accounts, an API key, broad app coverage, networked helper functions, and direct proxy execution are expected for this integration but create high-impact authority that is only partially scoped in the artifact.
Persistence & Privilege
The remote workbench and Bash tool run in a persistent sandbox where variables, imports, and files survive across calls, and connected accounts can remain active beyond a single action unless the user manages or revokes them separately.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install composio - 安装完成后,直接呼叫该 Skill 的名称或使用
/composio触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Composio v1.0.0 – Initial Release
- Introduces a unified platform to connect AI agents with 900+ popular apps for seamless cross-app automation.
- Provides clear guides and cURL examples for setup, authentication, and API usage.
- Documents core endpoints: tool search (`COMPOSIO_SEARCH_TOOLS`), connection management, input schema fetching, and tool execution.
- Explains best practices for planning, finding, connecting, and running tools, with real API payloads and tips for smooth integration.
元数据
常见问题
Composio 是什么?
Connect your AI agent to 500+ apps for discovering tools, managing connections, and executing actions across Gmail, Slack, GitHub, Notion, Google Workspace,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 6380 次。
如何安装 Composio?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install composio」即可一键安装,无需额外配置。
Composio 是免费的吗?
是的,Composio 完全免费(开源免费),可自由下载、安装和使用。
Composio 支持哪些平台?
Composio 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Composio?
由 wjayesh(@wjayesh)开发并维护,当前版本 v1.0.0。
推荐 Skills