Clawtrix Saas Intel

Surfaces the best ClawHub skills for SaaS-focused agents — auth, billing, onboarding, customer lifecycle, and SaaS product patterns. Use when: (1) Onboarding...

Security Scan

The skill's instructions and requirements are generally consistent with its stated purpose (finding SaaS-focused ClawHub skills), but there are small mismatches you should be aware of before installing.

Purpose & Capability

The skill claims to surface SaaS-focused ClawHub skills and its runtime steps (read agent mission, search ClawHub, score candidates, output top 3) align with that purpose. However, the SKILL.md uses external commands (curl, jq) and references running a local tool (`clawtrix-security-audit`) and writing to `memory/reports/...` even though the skill declares no required binaries, env vars, or config paths — a small mismatch between declared requirements and what the instructions expect.

Instruction Scope

Runtime instructions explicitly tell the agent to read the agent's SOUL.md, search ClawHub via HTTP APIs, score candidates, and write a report to memory. Those actions are within the stated scope (discovery and recommendation). They do involve reading agent-specific files and writing to agent memory, which is expected for an onboarding/intel skill.

Install Mechanism

There is no install spec and no code files — the skill is instruction-only. That minimizes install-time risk. The only runtime risk is outbound network calls to clawhub.ai as described in the instructions.

Credentials

The skill declares no credentials or secrets and does not require access to unrelated environment variables. It does recommend running a security audit before installing billing-related skills, which is appropriate for the domain.

Persistence & Privilege

The skill is not always-enabled and does not request persistent privileges or to modify other skills or system configuration. It writes reports to the agent's memory, which is normal for a discovery/reporting skill.

Assessment

This skill appears to do what it says (find and recommend SaaS-focused ClawHub skills), but check these practical points before installing: (1) The SKILL.md assumes curl and jq are available — ensure your agent environment provides them or adapt the steps. (2) It reads SOUL.md and writes to memory/reports; confirm you are comfortable with the agent reading that file and storing reports in its memory. (3) The skill makes outbound requests to https://clawhub.ai — verify that endpoint is expected and permitted in your environment. (4) The instructions reference `clawtrix-security-audit` (and a risk multiplier) but do not bundle or declare that tool; ensure you have a trusted security-audit tool available before following the recommendation. (5) Because this skill helps find billing/payment skills (high blast radius), follow its own advice: run a security audit and review any recommended billing/auth skills before installing them. If you want higher confidence, ask the publisher for clarification about the assumed runtime tools (curl/jq) and the provenance of the ClawHub API endpoint.

Finds the best ClawHub skills for SaaS product agents. Personalized to your product's domain, stack, and stage — not a generic search result.

---

Quick Reference

Task	Action
New SaaS agent onboarding	Run full discovery for the product's core domain
Billing/payments gap	Run Step 2 with Stripe/billing queries
Onboarding flow automation	Run Step 2 with onboarding queries
n8n workflow → skill conversion	Run Step 2 with n8n-specific queries
Weekly discovery	Run Steps 1-3, output to memory/

---

Discovery Run Sequence

Step 1 — Read Agent Mission

Read the agent's SOUL.md. Extract:

• SaaS product domain (e.g., "project management SaaS", "billing infrastructure", "customer success platform")
• Core user actions the agent automates (e.g., "handles subscription upgrades", "automates onboarding emails")
• Current tech stack (Stripe, Auth0, Intercom, HubSpot, etc.)
• Installed skills (to avoid re-recommending)
• Business model (B2B/B2C, pricing tiers, trial flows)

Step 2 — Search ClawHub for SaaS Patterns

# Billing and subscription management
curl -s "https://clawhub.ai/api/v1/search?q=stripe+billing&limit=10" \
  | jq '[.results[] | {slug, name: .displayName, installs, score}]'

# Auth and identity
curl -s "https://clawhub.ai/api/v1/search?q=auth+identity+saas&limit=10" \
  | jq '[.results[] | {slug, name: .displayName, installs, score}]'

# Customer onboarding
curl -s "https://clawhub.ai/api/v1/search?q=onboarding+activation&limit=10" \
  | jq '[.results[] | {slug, name: .displayName, installs, score}]'

# n8n workflow conversion (high-signal March 2026)
curl -s "https://clawhub.ai/api/v1/search?q=n8n+workflow&limit=10" \
  | jq '[.results[] | {slug, name: .displayName, installs, score}]'

# Product analytics + retention
curl -s "https://clawhub.ai/api/v1/search?q=product+analytics+retention&limit=10" \
  | jq '[.results[] | {slug, name: .displayName, installs, score}]'

Step 3 — Score Each Candidate

Apply Clawtrix scoring matrix:

Dimension	Max	How to measure
Mission relevance	3	3=core SaaS workflow, 2=adjacent, 1=tangential
Gap fill	2	Does the agent lack this today?
Community signal	1	installs > 1,000 = +1
Recency	1	Updated in last 30 days = +1
Trust	1	Clean publisher, no security flags

Step 4 — SaaS-Specific Filters

Before recommending, verify:

• Compatible with the product's payment provider (Stripe vs. Paddle vs. custom)
• Works at the right business model (B2B vs. B2C billing patterns differ significantly)
• No security flags — billing agents have HIGH blast radius (3x risk multiplier per clawtrix-security-audit)
• Not already installed

Step 5 — Output Top 3

Never more than 3. Write to memory/reports/saas-intel-YYYY-MM-DD.md:

# SaaS Intel — YYYY-MM-DD

## Agent: [name]
## Product domain: [SaaS type]
## Skills audited: N candidates

## Top 3 Recommendations

**1. [author/slug]** (score: N/8)
- What: [one sentence]
- Why for this product: [one sentence tied to SOUL.md + business model]
- Install: `clawhub install [slug]`

**2. ...**

**3. ...**

## Skipped
| Slug | Reason |
|...

---

SaaS-Specific Risk Note

SaaS agents operate in sensitive environments: payment processing, user management, and customer data. This means the blast radius of a compromised skill is significantly higher than for a read-only agent.

Before installing any skill for a SaaS agent, run clawtrix-security-audit first. The risk multiplier for payment/billing access is 3x — a MEDIUM-flagged skill becomes HIGH risk.

---

When to Use This for n8n Teams

SaaS teams running n8n for automation (Zapier replacement, internal workflows) are a strong fit:

• They already think in workflow automation terms
• Adding ClawHub skills to their OpenClaw agents extends their n8n investment
• Natural onboarding path: existing n8n workflow → SKILL.md → deploy to OpenClaw agent

Run Step 2 with n8n workflow as a search query to find current conversion tools in ClawHub.

---

Upgrade Note — Clawtrix Pro

This skill finds SaaS skills on demand. Clawtrix Pro adds:

• Proactive alerts when a high-signal SaaS skill ships (especially Stripe, Auth0, billing patterns)
• Security monitoring specific to billing-access agents (highest blast radius tier)
• Fleet-level audit: "all 5 of your SaaS agents have clean stacks except agent #3"
• Monthly SaaS skills landscape report

---

Version History

v0.1.0 — Initial release. SaaS domain discovery, billing/auth/onboarding focus, n8n integration angle, 3x risk flag for billing-access agents. v0.1.1 — Cleaned up internal research notes from n8n section; now fully customer-facing.