← 返回 Skills 市场
rita5fr

Composio Integration

作者 Rita Sharma · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
2448
总下载
3
收藏
6
当前安装
1
版本数
在 OpenClaw 中安装
/install composio-integration
功能描述
Access and manage Gmail emails and Google Tasks via Composio's unified API with tools for sending, searching, creating tasks, and more.
使用说明 (SKILL.md)

Composio Integration Skill

Access 600+ apps and services through Composio's unified API. Currently connected: Gmail and Google Tasks.

🔑 API Key Location

Saved securely in: /home/sidharth/clawd/memory/composio-credentials.md
Also in: ~/.bashrc (line 135) - auto-loads on terminal start

API Key: ak_AXxQjyexBuSiJXTYOTPB

📦 Connected Accounts

Gmail (ca_0cxayHx2BME1)

  • Email: [email protected]
  • Status: ACTIVE ✅
  • Capabilities: Read/send emails, manage labels, drafts, contacts

Google Tasks (ca_kSNnWG4OHngG)

  • Email: [email protected]
  • Status: ACTIVE ✅
  • Capabilities: Create/update/delete tasks and task lists

🛠️ Available Tools

Gmail Tools (20+)

  • GMAIL_FETCH_EMAILS - Fetch emails
  • GMAIL_SEND_EMAIL - Send emails
  • GMAIL_CREATE_EMAIL_DRAFT - Create draft
  • GMAIL_REPLY_TO_THREAD - Reply to email
  • GMAIL_SEARCH_EMAILS - Search inbox
  • GMAIL_ADD_LABEL_TO_EMAIL - Manage labels
  • GMAIL_DELETE_MESSAGE - Delete emails
  • And 13+ more...

Google Tasks Tools (17)

  • GOOGLETASKS_INSERT_TASK - Create task
  • GOOGLETASKS_LIST_TASKS - List tasks
  • GOOGLETASKS_LIST_ALL_TASKS - List all tasks across all lists
  • GOOGLETASKS_UPDATE_TASK - Update task
  • GOOGLETASKS_DELETE_TASK - Delete task
  • GOOGLETASKS_CREATE_TASK_LIST - Create task list
  • GOOGLETASKS_BULK_INSERT_TASKS - Bulk create tasks
  • And 10+ more...

📝 Usage Examples

List Available Tools

export COMPOSIO_API_KEY="ak_AXxQjyexBuSiJXTYOTPB"
node scripts/list-tools.mjs gmail        # Gmail tools only
node scripts/list-tools.mjs googletasks  # Google Tasks tools
node scripts/list-tools.mjs              # All tools (paginated)

Execute a Tool

Fetch Gmail Emails:

node scripts/execute-tool.mjs GMAIL_FETCH_EMAILS ca_0cxayHx2BME1 '{"maxResults":5}'

Create Google Task:

node scripts/execute-tool.mjs GOOGLETASKS_INSERT_TASK ca_kSNnWG4OHngG '{"title":"My Task","notes":"Task details"}'

Send Email:

node scripts/execute-tool.mjs GMAIL_SEND_EMAIL ca_0cxayHx2BME1 '{"to":"[email protected]","subject":"Hello","body":"Hi there!"}'

🔧 Implementation Details

Base URL (v3 API)

https://backend.composio.dev/api/v3/

Authentication

All requests use header:

x-api-key: ak_AXxQjyexBuSiJXTYOTPB

User ID

All tool executions use:

user_id: pg-test-228260f1-217f-40f6-a08a-41fdd0b8d8e6

Scripts Location

/home/sidharth/clawd/skills/composio-integration/scripts/
├── list-tools.mjs       # List available tools
├── execute-tool.mjs     # Execute any tool
└── (future scripts)

🎯 Common Use Cases

Morning Email Summary

node scripts/execute-tool.mjs GMAIL_FETCH_EMAILS ca_0cxayHx2BME1 '{"maxResults":10,"labelIds":["INBOX"]}'

Add Task from Email

  1. Fetch email
  2. Extract key info
  3. Create task:
node scripts/execute-tool.mjs GOOGLETASKS_INSERT_TASK ca_kSNnWG4OHngG '{"title":"Follow up: Email subject","notes":"From: [email protected]"}'

Send Follow-up Email

node scripts/execute-tool.mjs GMAIL_SEND_EMAIL ca_0cxayHx2BME1 '{
  "to":"[email protected]",
  "subject":"Re: Your inquiry",
  "body":"Thank you for reaching out..."
}'

🔄 Adding New Apps

To connect more apps (Calendar, Notion, Slack, etc.):

  1. Visit: https://app.composio.dev/apps
  2. Click "Connect" on desired app
  3. Complete OAuth flow
  4. Note the connected_account_id
  5. Use with execute-tool.mjs

📚 API Reference

Full v3 API Docs: https://docs.composio.dev/rest-api/

Key Endpoints Used:

  • GET /api/v3/tools - List tools
  • GET /api/v3/tools/:slug - Get tool schema
  • POST /api/v3/tools/execute/:slug - Execute tool
  • GET /api/v3/connected_accounts - List connections

✅ Tested & Working

  • ✅ API key authentication
  • ✅ Gmail email fetching
  • ✅ Tool discovery (600+ apps)
  • ✅ Connected account management
  • ✅ v3 API compliance (no deprecated endpoints)

🚀 Next Steps

  • Create wrapper functions for common tasks
  • Add Google Calendar integration
  • Build email-to-task automation
  • Create morning digest generator
  • Add error handling & retry logic

Last Updated: 2026-01-20
Status: ✅ Fully Operational
Integration Time: ~30 minutes

安全使用建议
Do not install or run this skill as-is. It includes a plaintext API key and connected-account details in SKILL.md and relies on environment variables and binaries that the registry metadata does not declare. Before using: (1) Verify the API key ownership — if it's yours rotate it immediately and do not embed keys in the skill; (2) Remove any hard-coded secrets from documentation and code, and require COMPOSIO_API_KEY via secure secret configuration instead; (3) Ensure required runtimes/utilities are declared (Node, curl, jq) and sanitize or remove references to developer-specific file paths; (4) Confirm the endpoints and user IDs are expected and that you trust backend.composio.dev; (5) If you already used the bundled API key or account, rotate credentials and check activity on that Composio account and the listed Gmail account. If you want to proceed after fixes, insist on a version that does not contain embedded credentials and that declares its required environment variables and binaries.
功能分析
Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 5 This skill bundle provides integration with the Composio API for Gmail and Google Tasks. The `SKILL.md` and associated scripts (`execute-tool.mjs`, `list-tools.mjs`, `composio-action.sh`, `composio-list-apps.sh`, `test-gmail.js`) are client-side wrappers for interacting with the `backend.composio.dev` API. While the skill enables powerful actions like sending emails and managing tasks, these are the stated purpose of the integration. There is no evidence of intentional harmful behavior such as data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent. The hardcoded API key in `SKILL.md` is for the Composio service itself, not a user's sensitive credential, and is used by the skill for its intended function.
能力评估
Purpose & Capability
The code and SKILL.md align with a 'Composio' integration (listing tools, endpoints, and scripts that call backend.composio.dev). However the registry metadata declares no required environment variables or credentials while the runtime instructions and scripts clearly expect a COMPOSIO_API_KEY and a Node runtime. This mismatch (no declared primary credential vs. explicit API key usage) is incoherent and surprising.
Instruction Scope
SKILL.md includes a plaintext API key (ak_AXxQjyexBuSiJXTYOTPB), explicit connected-account IDs and an email address, and points to a local credential file (/home/sidharth/clawd/memory/composio-credentials.md) and a specific ~/.bashrc line. The README therefore exposes sensitive secrets and environment-specific paths. It also gives examples that require exporting COMPOSIO_API_KEY and running Node scripts, which is outside the metadata's declared requirements.
Install Mechanism
There is no install spec (instruction-only), which is lower risk in principle. The package.json lists an npm dependency (@composio/client), so installing npm packages / node is necessary but not declared. The scripts use curl and jq and assume Node is available; required binaries were declared as 'none' in metadata — that mismatch is a usability and coherence problem but not direct evidence of malicious intent.
Credentials
Sensitive credentials are embedded in the SKILL.md rather than declared as required env vars: a clear plaintext COMPOSIO API key, specific connected account IDs, and a user email. The bundle expects COMPOSIO_API_KEY at runtime (scripts reference process.env.COMPOSIO_API_KEY) but the skill metadata didn't ask for it. Hard-coded credentials bundled with a skill are disproportionate and risky (possible leaked or stale key).
Persistence & Privilege
The skill is not marked 'always: true' and does not request to modify other skills or system-wide settings. It does reference user-local paths (which are likely specific to the original developer) but does not itself declare persistence or privileged installation behavior.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install composio-integration
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /composio-integration 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Composio Integration Skill v1.0.0 - Initial release enabling access to 600+ apps/services via Composio's unified API. - Supports Gmail and Google Tasks integrations with secure API key handling. - 20+ Gmail tools and 17 Google Tasks tools available for automation. - Includes ready-to-use CLI scripts for listing and executing tools. - Detailed setup, usage examples, and common workflows documented. - v3 API endpoints used with tested features: authentication, email/task automation, account management.
元数据
Slug composio-integration
版本 1.0.0
许可证
累计安装 6
当前安装数 6
历史版本数 1
常见问题

Composio Integration 是什么?

Access and manage Gmail emails and Google Tasks via Composio's unified API with tools for sending, searching, creating tasks, and more. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2448 次。

如何安装 Composio Integration?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install composio-integration」即可一键安装,无需额外配置。

Composio Integration 是免费的吗?

是的,Composio Integration 完全免费(开源免费),可自由下载、安装和使用。

Composio Integration 支持哪些平台?

Composio Integration 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Composio Integration?

由 Rita Sharma(@rita5fr)开发并维护,当前版本 v1.0.0。

💬 留言讨论