← Back to Skills Marketplace
wlkr123

Erxes

by Wlkr123 · GitHub ↗ · v1.0.4 · MIT-0
cross-platform ⚠ suspicious
162
Downloads
0
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install erxes-next
Description
Manage contacts, companies, products, tags, documents, brands, automations, team members, and organization data on an erxes instance. Use when the user wants...
README (SKILL.md)

erxes– Чадварууд

Login

Use scripts/login.sh for authentication.

ERXES_BASE_URL=\x3Curl> ERXES_CLIENT_ID=${ERXES_CLIENT_ID:-erxes-local} bash scripts/login.sh
  • ERXES_BASE_URL is required.
  • ERXES_CLIENT_ID is optional. Default to erxes-local.
  • Accept the URL in whatever form the user gives and normalize it to ERXES_BASE_URL=\x3Curl>.
  • Do not explain OAuth internals unless the user asks.
  • Do not ask the user to copy tokens manually.
  • Do not store tokens in project files.
  • The script opens the browser, waits for approval, and prints a session JSON payload to stdout.

Read erxes-app-token-auth.md only when you need the quick login reference.

API calls

After login, use the returned session payload directly.

  • Read accessToken from the login JSON response.
  • Send Authorization: Bearer \x3CaccessToken> and erxes-subdomain: \x3Csubdomain> headers on GraphQL calls.
  • If the access token expires during the current task, use the in-memory refreshToken to get a new access token.
  • Do not write tokens to .auth.json or any other project file.
  • Read erxes-graphql-api.md only when you need query or mutation examples.

Харилцагч

  • Бүх харилцагчийн жагсаалт харах
  • Нэр, имэйл, утсаар хайх
  • Харилцагчийн дэлгэрэнгүй мэдээлэл харах
  • Төрлөөр нь бүлэглэх (үйлчлүүлэгч / боломжит / зочин)
  • Шинэ харилцагч нэмэх
  • Харилцагчийн мэдээлэл засах
  • Харилцагч устгах
  • Давхардсан харилцагчийг нэгтгэх

Бүтээгдэхүүн

  • Бүтээгдэхүүний жагсаалт харах
  • Нэг бүтээгдэхүүний дэлгэрэнгүй харах
  • Шинэ бүтээгдэхүүн нэмэх
  • Бүтээгдэхүүн засах, устгах, нэгтгэх
  • Ангилал болон хэмжих нэгж удирдах

Шошго

  • Бүх шошго харах
  • Шошго нэмэх, засах, устгах
  • Харилцагч эсвэл бүтээгдэхүүнд шошго хавсаргах

Баримт бичиг

  • Баримт бичгийн жагсаалт харах
  • Баримт бичиг нэмэх, засах, устгах

Брэнд

  • Брэндийн жагсаалт харах
  • Брэнд нэмэх, засах, устгах

Автоматжуулалт

  • Бүх автоматжуулалтын жагсаалт харах
  • Автоматжуулалт нэмэх, засах, идэвхжүүлэх, устгах

Байгууллагын бүтэц

  • Хэлтэс, салбар, нэгж, албан тушаалын бүтэц харах
  • Хэлтэс, салбар, нэгж, тушаал нэмэх, засах, устгах

Багийн гишүүд

  • Гишүүдийн жагсаалт харах
  • Шинэ гишүүн урих
  • Гишүүний мэдээлэл засах
  • Гишүүнийг идэвхгүй болгох

References

  • scripts/login.sh — Browser login helper
  • erxes-app-token-auth.md — Quick login reference
  • erxes-graphql-api.md — Үйлдлүүдийн техникийн лавлах
Usage Guidance
This skill appears to do what it says (authenticate to an erxes gateway and make GraphQL calls), but check two things before installing: (1) The skill requires ERXES_BASE_URL (and optionally ERXES_CLIENT_ID) even though the registry metadata doesn't list them — set ERXES_BASE_URL correctly. (2) The login helper prints the full token JSON to stdout; that can expose tokens in logs. If you will run this in environments where stdout is logged or accessible, prefer using a safer method (capture only the access token into memory) or confirm your agent environment does not persist logs. Also confirm you trust the erxes instance URL you provide. If you want stronger assurances, ask the skill author to fix the metadata to declare ERXES_BASE_URL and to avoid printing refresh/access tokens to stdout.
Capability Analysis
Type: OpenClaw Skill Name: erxes-next Version: 1.0.4 The skill bundle provides a comprehensive interface for managing an erxes instance via its GraphQL API. It includes a standard OAuth device flow implementation in `scripts/login.sh` and detailed documentation in `erxes-graphql-api.md` for various operations like contact and product management. The instructions in `SKILL.md` specifically include security-conscious directives, such as advising the agent not to store authentication tokens in project files, and no indicators of malicious intent or data exfiltration were identified.
Capability Tags
requires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
The name/description (manage erxes data) aligns with the included GraphQL reference and the login helper script. However the registry metadata lists no required environment variables while SKILL.md and the login script clearly require ERXES_BASE_URL (and optionally ERXES_CLIENT_ID). This metadata mismatch is an incoherence that could lead to improper installation or unexpected failures.
Instruction Scope
SKILL.md confines runtime activity to authenticating via Device Flow and making GraphQL calls to the provided ERXES_BASE_URL; the GraphQL docs enumerate only erxes operations. But the login script prints the full session JSON (including accessToken/refreshToken) to stdout even though SKILL.md instructs to 'keep this payload in memory' and 'do not store tokens in project files'. Printing tokens to stdout increases the chance of accidental logging or exfiltration (agent logs, CI logs, terminal history). There are no instructions to send data to any endpoint other than the provided ERXES_BASE_URL.
Install Mechanism
Instruction-only skill with a small helper script; no install spec, no downloads, and no packages installed. Low install-time risk.
Credentials
The runtime actually requires ERXES_BASE_URL and optionally ERXES_CLIENT_ID (used by the script). The registry metadata claims no required env vars — that mismatch is confusing. There are no other credentials, unrelated secrets, or config paths requested.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. Autonomous invocation is allowed (default) but is not combined with any broad credential access or always:true, so no exceptional persistence concerns.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install erxes-next
  3. After installation, invoke the skill by name or use /erxes-next
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.4
- Improved authentication flow documentation: session payload is now printed to stdout, no longer stored in project files. - Updated API usage instructions to use access/refresh tokens from in-memory session only. - Added guidance to send required headers (`Authorization`, `erxes-subdomain`) with each GraphQL call. - Removed instructions to write tokens to `.auth.json` or any project file.
v1.0.3
erxes-next 1.0.3 - Replaced Python login helper with a new shell script: added scripts/login.sh, removed scripts/erxes_local.py. - Greatly simplified login instructions; now use scripts/login.sh for authentication. - Updated documentation for a shorter, clearer login and API call process. - Adjusted environment requirements and examples for improved clarity and ease of use.
v1.0.2
- Updated login instructions to require only the login command for authentication. - Clarified usage of ERXES_BASE_URL and subdomain extraction; now handled automatically. - Deprecated use of login-start and login-finish commands. - Login and token refresh are now fully automated without user prompts or extra steps. - Revised documentation to reflect new authentication flow and provide updated usage examples.
v1.0.1
- Skill renamed from erxes-local to erxes. - Now requires the environment variable ERXES_BASE_URL to specify the erxes API URL. - Token storage path updated from skills/erxes-local/.auth.json to skills/erxes/.auth.json. - References and documentation links updated to reflect new skill name and paths.
v1.0.0
v.1.0.0
Metadata
Slug erxes-next
Version 1.0.4
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 5
Frequently Asked Questions

What is Erxes?

Manage contacts, companies, products, tags, documents, brands, automations, team members, and organization data on an erxes instance. Use when the user wants... It is an AI Agent Skill for Claude Code / OpenClaw, with 162 downloads so far.

How do I install Erxes?

Run "/install erxes-next" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Erxes free?

Yes, Erxes is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Erxes support?

Erxes is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Erxes?

It is built and maintained by Wlkr123 (@wlkr123); the current version is v1.0.4.

💬 Comments