Bitrix24 Vibe Test

Work with Bitrix24 (Битрикс24) via Vibe Platform API. Triggers on: CRM — "сделки", "контакты", "лиды", "воронка", "клиенты", "deals", "contacts", "leads", "p...

This skill appears to do what it says: it needs python3 and a Vibe API key (VIBE_API_KEY) to call the Vibe Platform on your behalf, and it will fetch /v1/guide and /v1/me and cache those responses locally. Before installing: (1) only provide an API key with the minimal scopes required for your use (read vs write), (2) be aware the key may be read from platform config (/home/node/.openclaw/openclaw.json) on managed agents and can be saved to ~/.config/bitrix24-skill/config.json if you use --save-key, (3) the skill will make network calls automatically for read/list requests (per SKILL.md) — review whether you are comfortable with automated calls and local caching, and (4) if you need strict human confirmation for writes, verify the agent enforces the one-line yes/no confirmation described in SKILL.md because the CLI no longer enforces confirm flags. If you want, inspect the included scripts (scripts/vibe.py and scripts/vibe_config.py) yourself or run them in a safe environment to verify behaviour and base_url before supplying a production key.

Type: OpenClaw Skill Name: bitrix24-vibe-test Version: 2.0.1 The skill bundle is a legitimate integration for Bitrix24 via the Vibe Platform. The Python scripts (vibe.py and vibe_config.py) implement standard API interaction logic, including a multi-source configuration priority chain and local caching of discovery data. Security-wise, vibe.py includes a path sanitization function (is_safe_path) to prevent directory traversal or SSRF via the path parameter. The SKILL.md instructions are well-structured for a business-focused user experience and do not contain any evidence of malicious prompt injection, unauthorized data exfiltration, or hidden persistence mechanisms.