← 返回 Skills 市场
Saas Decomposer
作者
mupengi-bot
· GitHub ↗
· v1.0.0
788
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install saas-decomposer
功能描述
Web SaaS service decomposition and AI internalization development plan generation. Analyze existing SaaS to identify functions replaceable by AI agents and e...
安全使用建议
This skill is internally consistent with its stated purpose, but before installing: 1) Confirm your agent is allowed to fetch the target sites (respect robots.txt and organizational policies). 2) Review and control the agent workspace and memory the skill may read (the SKILL.md references memory/... files) so it doesn't access unexpected notes. 3) Expect the skill to write analysis JSON files (events/...), so ensure you are comfortable with those files being created and stored. 4) Test on public/non-sensitive SaaS landing pages first to verify behavior. If you want extra caution, restrict the agent's outbound network access or run the skill in a sandboxed workspace.
功能分析
Type: OpenClaw Skill
Name: saas-decomposer
Version: 1.0.0
The skill is classified as suspicious due to a significant Server-Side Request Forgery (SSRF) vulnerability. The `SKILL.md` explicitly instructs the AI agent to use `web_fetch` and `data-scraper` on user-provided SaaS service URLs or names. This lack of input sanitization or validation means an attacker could potentially provide malicious URLs (e.g., `file:///etc/passwd`, internal network endpoints) to the agent, leading to unauthorized access and potential data exfiltration from the host system or internal network resources. While the stated purpose of the skill (SaaS decomposition) is benign, the method exposes a critical security risk.
能力评估
Purpose & Capability
Name/description (SaaS decomposition → AI internalization) matches the SKILL.md workflow: crawl pages, extract functions, score AI replaceability, map to skills and produce a roadmap/cost comparison.
Instruction Scope
Runtime instructions use agent tools like web_fetch and data-scraper, reference agent memory files (memory/...) and instruct writing event files (events/saas-analysis-YYYY-MM-DD.json). Those are coherent with the purpose but the skill assumes the agent has web-fetching and workspace/memory access; verify the agent environment's policies (robots/hosts) and that referenced memory files are intended to be read.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install footprint.
Credentials
No environment variables, credentials, or external config paths are requested. The actions described (HTTP crawling, text analysis, file outputs) do not require secrets.
Persistence & Privilege
The skill will write analysis outputs/events and references agent memory files; always:false and default autonomous invocation are set. This is reasonable for its purpose, but you should expect it to create workspace files and consult agent memory during analysis.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install saas-decomposer - 安装完成后，直接呼叫该 Skill 的名称或使用
/saas-decomposer触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
saas-decomposer 1.0.0
- Initial release providing automated SaaS service decomposition and AI internalization planning.
- Analyzes existing SaaS offerings, identifies replaceable functions, and assigns AI replaceability scores.
- Generates detailed internalization roadmaps, including new skill specs, development timelines, and cost comparisons.
- Supports comparative analysis across multiple SaaS products in the same category.
- Includes pre-defined industry templates and troubleshooting guides for common analysis challenges.
元数据
常见问题
Saas Decomposer 是什么？
Web SaaS service decomposition and AI internalization development plan generation. Analyze existing SaaS to identify functions replaceable by AI agents and e... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 788 次。
如何安装 Saas Decomposer？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install saas-decomposer」即可一键安装，无需额外配置。
Saas Decomposer 是免费的吗？
是的，Saas Decomposer 完全免费（开源免费），可自由下载、安装和使用。
Saas Decomposer 支持哪些平台？
Saas Decomposer 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Saas Decomposer？
由 mupengi-bot（@mupengi-bot）开发并维护，当前版本 v1.0.0。
推荐 Skills