Odoo Manager

Manage Odoo (contacts, any business objects, and metadata) via the official External XML-RPC API. Supports generic CRUD operations on any model using execute_kw, with ready-made flows for res.partner and model introspection. Features dynamic instance and database switching with context-aware URL, database, and credential resolution.

This skill appears coherent for interacting with Odoo via XML-RPC. Before installing, ensure you: (1) provide an account with least privilege needed for the tasks (avoid using a global admin account), (2) prefer an ODOO_API_KEY scoped to the integration and rotate it regularly, (3) avoid setting temporary_url or user_url to endpoints you don't control (an attacker-provided URL would receive credentials), and (4) avoid pasting secrets into chat history — treat temporary/user context values as sensitive. If you need stronger assurance, request the skill author publish source code or a canonical homepage/repo so you can audit the exact runtime calls and data handling.

Type: OpenClaw Skill Name: odoo-manager Version: 0.0.1 The OpenClaw Odoo Manager skill is designed for legitimate interaction with Odoo's XML-RPC API, enabling CRUD operations and model introspection. It explicitly handles sensitive Odoo credentials via environment variables (`ODOO_URL`, `ODOO_DB`, `ODOO_USERNAME`, `ODOO_PASSWORD`/`ODOO_API_KEY`) and contains clear instructions in `SKILL.md` and `README.md` for the agent to never log or expose these secrets. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent; instead, it promotes secure practices like least privilege and environment variable usage.