📦 Cloud Service Agreement — 云合同生成
v0.2.0一键生成并填充 SaaS 协议模板，包括云服务合同、MSA、订单表、软件许可、试用协议及设计伙伴协议，支持多语言与可定制条款，助你在几分钟内拿到合规、专业的云端合约。
0· 117·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
安全
high confidenceThe skill's declared purpose (drafting and filling SaaS agreement templates) matches its instructions and requirements; it is instruction-only and contains explicit safety guidance for local CLI use and for remote processing.
评估建议
This instruction-only skill appears coherent and appropriate for drafting/filling SaaS agreements. Before installing/using it: (1) If you will use the Remote MCP, explicitly confirm you are comfortable sending agreement field values to openagreements.ai; sensitive customer or pricing details will be transmitted. (2) If you prefer local-only processing, install the open-agreements CLI yourself and follow the SKILL.md sanitization rules — the skill cannot enforce them. In particular, ensure the ag...详细分析 ▾
✓ 用途与能力
The name/description (SaaS agreements, MSAs, order forms, etc.) align with the instructions: discover templates, collect field values, and render DOCX via either a remote MCP (openagreements.ai) or a local CLI (open-agreements). There are no unexpected environment variables, unrelated binaries, or config-path requirements declared.
ℹ 指令范围
The SKILL.md stays within the template-filling scope and explicitly documents trust boundaries and detailed sanitization rules for Local CLI execution (filename pattern, reject shell metacharacters, fixed /tmp path, quoted heredoc, control-character rejection, template-name validation). Important caveat: this is an instruction-only skill and cannot enforce those sanitization rules itself — the hosting agent (or user) must implement them. The remote path also clearly requires explicit user consent before sending values to openagreements.ai.
✓ 安装机制
There is no install spec; the skill is instruction-only. It recommends either using a hosted MCP or installing the documented npm package (and even recommends pinning a specific version). That guidance is proportional to the stated purpose and does not attempt to fetch arbitrary code itself.
✓ 凭证需求
The skill does not request secrets, environment variables, or unrelated credentials. The only external dependency is an optional remote service (openagreements.ai) or a user-installed CLI (open-agreements). The documentation asks for explicit user consent before sending agreement data to the hosted service.
✓ 持久化与权限
always:false and no special privileges are requested. The skill does not modify other skills or system-wide configs. It does write to a temporary file in the Local CLI flow (/tmp/oa-values.json) but documents cleanup and strict handling rules.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.2.02026/4/9
Fix: populate version field
● 可疑
安装命令
点击复制官方npx clawhub@latest install cloud-service-agreement
镜像加速npx clawhub@latest install cloud-service-agreement --registry https://cn.longxiaskill.com