← 返回 Skills 市场
wjayesh

Composio

作者 wjayesh · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
9225
总下载
6
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install composio
功能描述
Connect your AI agent to 500+ apps for discovering tools, managing connections, and executing actions across Gmail, Slack, GitHub, Notion, Google Workspace,...
安全使用建议
Install only if you are comfortable giving an agent access to Composio-connected accounts. Require explicit approval before it sends, posts, edits, deletes, uploads, or bulk-processes anything, and avoid sending private emails, documents, messages, credentials, or account data to the workbench LLM, web search, or file upload helpers unless the destination and need are clear.
功能分析
Type: OpenClaw Skill Name: composio Version: 1.0.0 The skill bundle is classified as suspicious due to the inclusion of highly privileged capabilities, specifically `COMPOSIO_REMOTE_WORKBENCH` and `COMPOSIO_REMOTE_BASH_TOOL` described in `skill.md`. These tools allow for arbitrary Python code execution (including helper functions like `upload_local_file` for potential data exfiltration and `proxy_execute` for direct API calls to connected services) and arbitrary Bash command execution within a persistent sandbox. While these capabilities are presented as legitimate features for advanced automation, they introduce significant risk if the AI agent is compromised via prompt injection, potentially leading to unauthorized data access, exfiltration, or control over connected applications.
能力评估
⚠ Credentials
Remote Python and bash execution, web search, LLM invocation, cloud upload, and direct connected-toolkit API calls are powerful and purpose-related, but they are under-scoped for sensitive connected-account content and secondary data sharing.
✓ Install Mechanism
The artifact is a markdown-only skill with no executable install script or hidden local setup; it instructs users to set a Composio API key and call the disclosed Composio API endpoint.
⚠ Instruction Scope
The instructions require discovery, schema checks, and active connections, but they do not require explicit user confirmation before write/destructive/public actions and include automatic translation guidance that could alter user intent before execution.
⚠ Persistence & Privilege
There is no local host persistence or privilege escalation, but the remote workbench explicitly persists variables and files across executions, and the skill does not give clear cleanup or data-retention controls.
⚠ Purpose & Capability
The purpose is coherent with Composio tool discovery, OAuth connection management, and app automation, but the documented scope spans 500+ apps and includes real side-effecting actions such as sending email or Slack messages plus a direct API escape hatch via proxy_execute.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install composio
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /composio 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Composio v1.0.0 – Initial Release - Introduces a unified platform to connect AI agents with 900+ popular apps for seamless cross-app automation. - Provides clear guides and cURL examples for setup, authentication, and API usage. - Documents core endpoints: tool search (`COMPOSIO_SEARCH_TOOLS`), connection management, input schema fetching, and tool execution. - Explains best practices for planning, finding, connecting, and running tools, with real API payloads and tips for smooth integration.
元数据
Slug composio
版本 1.0.0
许可证 —
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Composio 是什么?

Connect your AI agent to 500+ apps for discovering tools, managing connections, and executing actions across Gmail, Slack, GitHub, Notion, Google Workspace,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 9225 次。

如何安装 Composio?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install composio」即可一键安装,无需额外配置。

Composio 是免费的吗?

是的,Composio 完全免费(开源免费),可自由下载、安装和使用。

Composio 支持哪些平台?

Composio 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Composio?

由 wjayesh(@wjayesh)开发并维护,当前版本 v1.0.0。

💬 留言讨论