Clawhub Package Full

Full-featured Odoo 19 ERP connector for OpenClaw - Sales, CRM, Purchase, Inventory, Projects, HR, Fleet, Manufacturing (80+ operations, complete Python code included, XML-RPC integration).

Before installing, verify the following: 1) Confirm that the author/repository is trustworthy (registry lists unknown source; SKILL.md points to a GitHub repo—inspect it). 2) Expect to provide ODOO_URL, ODOO_DB, ODOO_USERNAME, and ODOO_API_KEY (and optionally ODOO_WEBHOOK_SECRET) — the skill will fail without them; ask the publisher to declare these in metadata. 3) Review and decide whether you want a skill that can run a webhook HTTP server and a background poller; if not, ask for an option to disable webhook/poller functionality. 4) Use least-privilege credentials: create an Odoo API user with only the needed model permissions (avoid admin/root keys). 5) Run the skill in an isolated environment (sandbox/container) and monitor network activity and listening ports the first time you enable it. 6) If you need higher assurance, inspect the full remaining source files (sync/poller.py, sync/webhook.py, smart_actions.py) for any unexpected external endpoints, data exfiltration, or obfuscated code and ask the maintainer to add explicit metadata listing required env vars and the webhook behavior. If you cannot review the code or obtain metadata clarifications, treat the skill as untrusted and avoid installing it in production systems.

Type: OpenClaw Skill Name: odoo-erp-connector Version: 1.1.0 The OpenClaw Odoo ERP Connector skill is designed for comprehensive Odoo ERP integration, providing extensive CRUD operations across various Odoo modules. The code and documentation are consistent with this stated purpose. It handles Odoo API credentials (URL, DB, username, API key) but uses them solely for legitimate XML-RPC calls to the Odoo instance. The skill includes features for real-time updates via a background poller and an inbound webhook server, both of which are standard integration patterns and include security measures like HMAC verification for webhooks. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the OpenClaw agent. The `setup.ps1` script only performs local file copying. While the skill possesses powerful capabilities due to its nature as an ERP connector, these are transparently documented and necessary for its functionality, without any indication of malicious intent.