← Back to Skills Marketplace
wengjianmin19850412

领星 ERP

by wengjianmin19850412 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
101
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install lingxing-erp
Description
Integrate with Lingxing ERP to query today's orders, product inventory, and retrieve product lists via OpenClaw.
README (SKILL.md)

领星 ERP 技能

用于 OpenClaw 对接领星 ERP,查询订单、库存、商品数据。

配置项

  • ACCESS_KEY: 领星开放平台 AccessKey
  • SECRET_KEY: 领星开放平台 SecretKey
  • BASE_URL: 领星 API 域名(默认 https://openapi.lingxing.com

功能

  • 查询今日订单
  • 查询商品库存
  • 获取商品列表
Usage Guidance
What to consider before installing: - The code itself only implements get_today_orders; SKILL.md claims inventory and product-list features that are not present. Don't assume those features exist without asking the publisher. - The skill requires ACCESS_KEY and SECRET_KEY (used to HMAC-sign API calls) — that's expected for an API integration, but the registry metadata incorrectly lists no required env vars. Confirm how/where you'll provide credentials and whether the platform will store them securely. - Source and homepage are missing. That reduces trust: prefer skills with a verifiable publisher or project page. Consider requesting the publisher's identity or audit trail before using production credentials. - Test with limited-scope or read-only API keys first. Monitor network traffic and API use after enabling the skill. - If you need inventory/product-list functionality, ask the author for an updated release; do not rely on undocumented behavior. If you want, I can draft questions to ask the publisher or propose a minimal test plan to validate behavior safely.
Capability Analysis
Type: OpenClaw Skill Name: lingxing-erp Version: 1.0.0 The skill provides a standard integration for the Lingxing ERP platform to query order data. The implementation in main.py uses a legitimate HMAC-SHA256 signing algorithm for API authentication and communicates with the official API endpoint (openapi.lingxing.com). No malicious behavior, data exfiltration, or prompt injection attempts were detected.
Capability Assessment
Purpose & Capability
Name/description promise (Lingxing ERP queries) aligns with the code: the implementation signs requests and calls Lingxing's API to fetch today's orders. However, the registry metadata claims 'Required env vars: none' while SKILL.md and main.py clearly expect ACCESS_KEY and SECRET_KEY — an inconsistency in what the skill declares vs what it actually needs.
Instruction Scope
SKILL.md lists three capabilities (today's orders, inventory, product list) but main.py only implements get_today_orders. The runtime instructions and code only access the configured BASE_URL and credentials and do not read other files or unexpected environment variables, but the missing implementations and mismatch between documentation and code are scope/integrity concerns.
Install Mechanism
No install spec (instruction-only plus a small Python file). This minimizes install-time risk. The code uses the 'requests' library but no installer is provided — not a security risk but could cause runtime failures if the runtime lacks requests.
Credentials
The skill legitimately requires ACCESS_KEY and SECRET_KEY to talk to the Lingxing API (proportionate). However, the registry metadata advertises no required env vars/credentials while SKILL.md and main.py require them — this discrepancy is suspicious and could lead to misconfiguration or hidden credential handling.
Persistence & Privilege
The skill does not request persistent presence (always=false), does not modify other skills or system settings, and does not write to disk beyond normal execution. Autonomous invocation is allowed by default but is not combined with other high-risk factors here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install lingxing-erp
  3. After installation, invoke the skill by name or use /lingxing-erp
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
领星 ERP 技能首次发布。 - 支持查询今日订单 - 支持查询商品库存 - 支持获取商品列表 - 可通过配置 ACCESS_KEY、SECRET_KEY 和 BASE_URL 对接领星 ERP
Metadata
Slug lingxing-erp
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is 领星 ERP?

Integrate with Lingxing ERP to query today's orders, product inventory, and retrieve product lists via OpenClaw. It is an AI Agent Skill for Claude Code / OpenClaw, with 101 downloads so far.

How do I install 领星 ERP?

Run "/install lingxing-erp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 领星 ERP free?

Yes, 领星 ERP is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 领星 ERP support?

领星 ERP is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 领星 ERP?

It is built and maintained by wengjianmin19850412 (@wengjianmin19850412); the current version is v1.0.0.

💬 Comments