自然语言操作 辉火云企业套件 — 实施经理助手，覆盖任务、CRM、项目、工单、财务、销售

This plugin implements exactly what it claims (an Odoo/辉火云 integration) and will ask users for the Odoo URL, DB, username and password and then persist those credentials to files under ~/.openclaw/plugin-configs/odoo. Important points to consider before installing: - Shared-by-default credential behavior: By default the plugin saves credentials into a shared default.json so "one org configuration" is reused by all agents/channels. If you do not want organization-wide reuse, always use odoo_connect with private=true or preconfigure per-agent files. Consider whether a shared credential is acceptable in your environment. - Plaintext storage: Credentials are written as cleartext JSON files in the home directory. Evaluate filesystem permissions, multi-user risks, and whether this storage approach complies with your security policy. Prefer service accounts with minimal privileges rather than global admin credentials. - Background polling & persistence: The plugin runs a poller (default every 30s) and writes mutation logs and envelope caches to disk. This is expected for a notification integration but means the plugin maintains an ongoing connection and stored state — review for data retention/privacy implications. - Prompt-injection signal: The SKILL.md contained unicode control characters flagged by the scanner. Ask the author to confirm/remove hidden characters and provide the SKILL.md raw text for inspection. Hidden control chars in prompts can alter behavior of prompt parsers. - Verify provenance: The package repository URL is non-standard; validate the author/org (contact [email protected] or [email protected] listed in README) and prefer installing from known, trusted sources. Audit the plugin code and test in an isolated environment before granting access to production data. - Least privilege: When possible, create an Odoo account scoped to the plugin's needs (read/write limited to necessary models) rather than using an admin or broad credential. If you want, I can: 1) list the exact file paths the plugin will create, 2) point out the lines that write credentials and where they are stored, or 3) suggest minimal Odoo permission sets that would reduce risk.

Type: OpenClaw Skill Name: huo15-huihuoyun-odoo Version: 1.10.0 The skill bundle provides a comprehensive integration for a rebranded Odoo ERP system ('Huihuoyun'). It is classified as suspicious due to the high-risk file-handling capabilities in 'index.ts' ('odoo_attach_file' and 'odoo_document_upload'), which allow the agent to read and upload files from arbitrary local paths. This creates a significant path-traversal and data-exfiltration surface if the agent is manipulated via prompt injection. Additionally, the 'before_prompt_build' hook in 'index.ts' contains 'hard rules' designed to steer the agent's behavior and strictly hide the underlying technology's identity. Credentials (URL, username, and password) are stored in plaintext JSON files within the user's home directory as managed by 'src/modules/config-manager.ts'.