← 返回 Skills 市场
vrtalex

Bitrix24 Skill

作者 vrtalex · GitHub ↗ · v1.0.0
cross-platform ✓ 安全检测通过
766
总下载
3
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install bitrix24-apiskill
功能描述
Integrate AI agents with Bitrix24 REST API to automate CRM, tasks, chats, event processing, auth selection, and API error troubleshooting.
使用说明 (SKILL.md)

Bitrix24 Agent (Lean + Reliable)

Use this skill to deliver correct Bitrix24 integrations with minimal token usage.

Default Mode: Lean

Apply these limits unless the user asks for deep detail:

  • Load at most 2 reference files before first actionable step.
  • Start from references/packs.md.
  • Then open only one target file: references/catalog-\x3Cpack>.md.
  • Open references/chains-\x3Cpack>.md only if user asks for workflow/chain.
  • Open references/bitrix24.md only for auth architecture, limits, events reliability, or unknown errors.

Response format limits:

  • Use concise output (goal + next action + one command).
  • Do not retell documentation.
  • Do not dump large JSON unless explicitly requested.
  • Avoid repeating already provided guidance; return only delta.

Routing Workflow

  1. Determine intent:
  • method call,
  • troubleshooting,
  • architecture decision,
  • event/reliability setup.

Term normalization (product vocabulary):

  • "collabs", "workgroups", "projects", "social network groups" -> collab (and boards for scrum).
  • "Copilot", "CoPilot", "BitrixGPT", "AI prompts" -> platform (ai.*).
  • "open lines", "contact center connectors", "line connectors" -> comms (imopenlines.*, imconnector.*).
  • "feed", "live feed", "news feed" -> collab (log.*).
  • "sites", "landing pages", "landing" -> sites (landing.*).
  • "booking", "calendar", "work time", "time tracking" -> services (booking.*, calendar.*, timeman.*).
  • "orders", "payments", "catalog", "products" -> commerce (sale.*, catalog.*).
  • "consents", "consent", "e-signature", "sign" -> compliance (userconsent.*, sign.*).
  1. Choose auth quickly:
  • one portal/internal: incoming webhook.
  • app/multi-portal/lifecycle features: OAuth.
  1. Select minimal packs:
  • default core.
  • add only required packs: comms, automation, collab, content, boards, commerce, services, platform, sites, compliance, diagnostics.
  1. Execute with guardrails:
  • prefer scripts/bitrix24_client.py and scripts/offline_sync_worker.py,
  • enforce allowlist + --confirm-write / --confirm-destructive,
  • keep writes idempotent when possible.
  1. Escalate to deep reference only on trigger:
  • WRONG_AUTH_TYPE, insufficient_scope, QUERY_LIMIT_EXCEEDED, expired_token,
  • offline event loss concerns,
  • OAuth refresh race or tenant isolation issues.

Quality Guardrails

  • Never expose webhook/OAuth secrets.
  • Scope and permissions must be least-privilege.
  • No nested batch.
  • Online events are not guaranteed delivery; use offline flow for no-loss processing.
  • Prefer REST 3.0 where compatible; fallback to v2 where needed.

Reference Loading Map

  1. references/packs.md for pack and loading strategy.
  2. references/catalog-\x3Cpack>.md for method shortlist.
  3. references/chains-\x3Cpack>.md for implementation chains.
  4. references/bitrix24.md only when deeper protocol detail is required.

Useful search shortcuts:

rg -n "^# Catalog|^# Chains" references/catalog-*.md references/chains-*.md
rg -n "WRONG_AUTH_TYPE|insufficient_scope|QUERY_LIMIT_EXCEEDED|expired_token" references/bitrix24.md
rg -n "offline|event\\.bind|event\\.offline|application_token" references/bitrix24.md

Scripts

  • scripts/bitrix24_client.py: method calls, packs, allowlist, confirmations, audit.
  • scripts/offline_sync_worker.py: offline queue processing with retries and DLQ.
安全使用建议
This skill appears to implement what it claims (Bitrix24 REST integration) and uses only Bitrix-relevant environment variables and local files. Before installing: (1) Review and store Bitrix tokens (OAuth/webhook) in a dedicated secrets store or env scoped to the skill; avoid placing other service credentials in the same environment. (2) Run the scripts against a test portal first (use B24_RUN_INTEGRATION or a sandbox) and enable the two-phase/plan-only mode (B24_REQUIRE_PLAN / --plan-only) to avoid accidental writes. (3) Note the scripts write local state (rate limiter, retry state, DLQ); decide where those files will live and who can read them. (4) If you need a policy-level check, ask the publisher to declare required env vars in the registry metadata (current manifest lists none despite many documented env variables). (5) If you are not comfortable granting access to Bitrix tokens, do not enable this skill or provide only least-privilege tokens scoped to the operations you intend to allow.
功能分析
Type: OpenClaw Skill Name: bitrix24-apiskill Version: 1.0.0 The OpenClaw AgentSkills skill bundle for Bitrix24 is designed with a strong emphasis on security and reliability. It implements numerous guardrails such as method allowlisting, explicit confirmation for write/destructive operations, two-phase execution planning, idempotency, secrets masking, audit logging, and rate limiting. The `scripts/bitrix24_client.py` and `scripts/offline_sync_worker.py` handle API interactions and event processing with robust error handling and security checks (e.g., `secure_compare` for application tokens). Documentation (`SKILL.md`, `README.md`, `references/*.md`) consistently advises on security best practices and least privilege. There is no evidence of intentional harmful behavior, data exfiltration to unauthorized endpoints, or malicious code execution. The `process_event_default` function in `offline_sync_worker.py` is a no-op placeholder, meaning the provided skill itself does not process event payloads in a risky manner.
能力评估
Purpose & Capability
Name/description (Bitrix24 REST integrations) matches the included code, CLI scripts, and many Bitrix-specific reference files. All env vars and files referenced in the README/SKILL.md (webhook code, OAuth tokens, B24_* vars) are directly relevant to Bitrix API integration.
Instruction Scope
SKILL.md limits agent actions to Bitrix references and the included scripts, prescribes allowlists/confirm flags, and explicitly forbids exposing secrets. It does not instruct reading unrelated system files or transmitting data to unrelated external endpoints.
Install Mechanism
There is no install spec (scripts are shipped as files). No network downloads, package installs, or obscure URLs are used by the skill itself. This is lower-risk than an arbitrary remote installer.
Credentials
The registry metadata lists no required env vars, but README and SKILL.md show many effective environment variables (B24_DOMAIN, B24_AUTH_MODE, B24_ACCESS_TOKEN, B24_CLIENT_SECRET, etc.). Those variables are appropriate for Bitrix integration, but the metadata omission is a mild inconsistency — the skill expects secrets/tokens to be present at runtime.
Persistence & Privilege
Scripts legitimately read/write local state (rate limiter, retry state, DLQ, plan files) and may create files when running. always:false and no elevated privileges are requested. Persisted files can contain event payloads and retry metadata; users should be aware of on-disk storage location and access controls.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install bitrix24-apiskill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /bitrix24-apiskill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of bitrix24-agent skill. - Provides a lean, reliable workflow for integrating AI agents with Bitrix24 REST API. - Implements strict limits on file loading and response verbosity for efficiency. - Normalizes Bitrix24 product vocabulary for clear intent detection. - Guides rapid selection of authentication model and minimal required API packs. - Enforces security and reliability guardrails, including secret handling and write confirmation. - Includes scripts for online/offline API interaction and event processing.
元数据
Slug bitrix24-apiskill
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Bitrix24 Skill 是什么?

Integrate AI agents with Bitrix24 REST API to automate CRM, tasks, chats, event processing, auth selection, and API error troubleshooting. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 766 次。

如何安装 Bitrix24 Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install bitrix24-apiskill」即可一键安装,无需额外配置。

Bitrix24 Skill 是免费的吗?

是的,Bitrix24 Skill 完全免费(开源免费),可自由下载、安装和使用。

Bitrix24 Skill 支持哪些平台?

Bitrix24 Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Bitrix24 Skill?

由 vrtalex(@vrtalex)开发并维护,当前版本 v1.0.0。

💬 留言讨论