OpenClaw Odoo

Full-featured Odoo 17/18/19 ERP connector for OpenClaw — Sales, CRM, Purchase, Inventory, Projects, HR, Fleet, Manufacturing (80+ operations, TypeScript plug...

This skill looks like a real Odoo connector, but the metadata and SKILL.md are inconsistent. Before installing or using it: 1) Verify the referenced GitHub repository yourself — review the code and installation steps rather than blindly running npx. 2) Do not paste production admin credentials into chat; create a least-privilege Odoo account or a dedicated test instance for initial evaluation. 3) Prefer installing and running the connector in a sandbox/test environment first. 4) Ask the skill/maintainer how credentials are stored and whether any code is downloaded/executed at runtime; if installation will fetch code via npx/GitHub, treat it as code execution from an external source. 5) If you need to proceed, restrict the connector's account permissions (e.g., read-only where possible) and audit actions it performs. If you want, provide the full SKILL.md and I can review the remaining instructions for additional red flags.

Type: OpenClaw Skill Name: openclaw-odoo Version: 1.0.0 The OpenClaw Odoo skill is suspicious due to its broad and powerful capabilities, which, while explicitly documented, present significant vulnerabilities if misused. The `SKILL.md` file details tools like `odoo_create`, `odoo_update`, `odoo_delete`, and `odoo_workflow`, allowing the AI agent to perform arbitrary CRUD and workflow operations on any Odoo model. Furthermore, the 'Smart Actions' feature explicitly instructs the agent to automatically create new entities (e.g., customers, products, projects) in Odoo if they don't exist based on user input. These features, while intended, could lead to data pollution, unauthorized resource creation, or data destruction if the agent's input or reasoning is compromised. There is no evidence of intentional malice such as data exfiltration to unauthorized endpoints, backdoors, or prompt injection designed to subvert the agent's core purpose beyond its stated Odoo management functions.