← 返回 Skills 市场

CRM-in-a-Box

Name: CRM-in-a-Box
Author: taylorhou

作者 taylorhou · GitHub ↗ · v0.1.0

cross-platform ⚠ suspicious

1002

总下载

当前安装

版本数

在 OpenClaw 中安装

/install crm-in-a-box

功能描述

Bootstrap and manage an open, file-based CRM using the CRM-in-a-Box protocol (contacts, pipeline, interactions as NDJSON). Use when setting up a new CRM for...

使用说明 (SKILL.md)

CRM-in-a-Box Skill

An open, agent-native CRM protocol. One directory = one CRM. No vendor lock-in.

Files

contacts.ndjson — one JSON object per line, each a contact/company record
pipeline.ndjson — deal/opportunity tracking with stages
interactions.ndjson — append-only log of emails, calls, notes, meetings
config.yaml — pipeline stages and labels

Bootstrap a New CRM

Copy the baseline files into a company directory:

mkdir -p ./mycompany/crm
cp /path/to/crm-in-a-box/{config.yaml,contacts.ndjson,pipeline.ndjson,interactions.ndjson} ./mycompany/crm/

Or start fresh with empty NDJSON files and the default config.

Contact Schema

{
  "id": "c001",
  "name": "Jane Smith",
  "email": "[email protected]",
  "company": "Acme Corp",
  "phone": "+1-555-0100",
  "stage": "new",
  "labels": ["hot-lead"],
  "notes": "Referred by John.",
  "created_at": "2026-01-01T00:00:00Z"
}

Pipeline Schema

{
  "id": "p001",
  "contact_id": "c001",
  "stage": "proposal_sent",
  "deal": "Enterprise License",
  "value": 12000,
  "updated_at": "2026-01-15T00:00:00Z"
}

Interaction Schema

{
  "id": "i001",
  "contact_id": "c001",
  "type": "email",
  "summary": "Sent intro email about Denver market sale.",
  "at": "2026-01-15T10:00:00Z"
}

Pipeline Stages (default)

new → contacted → meeting_scheduled → proposal_sent → negotiating → won / lost

Default Labels

hot-lead, warm-lead, cold-lead, referral, conference, inbound, outbound

Agent Instructions

Log a contact: append a JSON line to contacts.ndjson
Update a stage: append an updated entry to pipeline.ndjson (keep old entries — append-only)
Log an interaction: append to interactions.ndjson
Search contacts: grep -i "name" contacts.ndjson | python3 -m json.tool
List pipeline: cat pipeline.ndjson | python3 -c "import sys,json; [print(json.dumps(json.loads(l), indent=2)) for l in sys.stdin]"

Forks / Verticals

Fork config.yaml to customize stages and labels for your vertical:

pm-crm — Property management (tenants, owners, vendors)
saas-crm — SaaS sales
realestate-crm — Buyers, sellers, listings
recruiting-crm — Candidates, jobs, placements

Part of the biz-in-a-box family of open protocols.

安全使用建议

This is an instruction-only skill that manipulates local NDJSON/YAML files (append/search) and is coherent with its CRM purpose. Before installing: confirm you trust the registry owner/source (homepage is missing), ensure the agent will only be allowed to access the intended CRM directory (to avoid accidental exposure of other files), and be aware that contacts stored as plain NDJSON contain PII—use appropriate repository controls, backups, or encryption if needed. Also verify your runtime has grep and python3 if you plan to use the provided one-liners.

功能分析

Type: OpenClaw Skill Name: crm-in-a-box Version: 0.1.0 The `SKILL.md` file contains agent instructions that execute shell commands, specifically `grep` and `cat` piped to `python3`. The `grep` command, `grep -i "name" contacts.ndjson | python3 -m json.tool`, presents a significant shell injection vulnerability (RCE risk) if the `name` parameter is derived from unsanitized user input. While these commands are intended for legitimate data processing within the CRM skill, the lack of explicit input sanitization instructions for the agent makes this a high-risk capability, classifying it as suspicious rather than benign due to the potential for exploitation.

能力评估

✓ Purpose & Capability

Name/description describe a file-based CRM protocol and the skill only requires creating/reading/writing NDJSON and a YAML config; all declared and included files align with that purpose.

✓ Instruction Scope

Runtime instructions are limited to creating/copying files, appending JSON lines, and simple local searches using grep/python; they do not request reading unrelated system files, environment variables, or sending data to external endpoints.

✓ Install Mechanism

No install spec or code is present (instruction-only), so nothing is written to disk by an installer and no external archives or unknown URLs are fetched by the skill itself.

✓ Credentials

The skill declares no required environment variables, credentials, or config paths. The simple use of grep and python is proportionate to the described functionality.

✓ Persistence & Privilege

always is false, the skill has no install-time persistence, and its instructions operate on local files within the CRM directory only — no modifications to other skills or system-wide settings are requested.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install crm-in-a-box
安装完成后，直接呼叫该 Skill 的名称或使用 /crm-in-a-box 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

Initial release — open file-based CRM protocol with contacts, pipeline, and interactions

元数据

Slug crm-in-a-box

版本 0.1.0

许可证 —

累计安装 4

当前安装数 3

历史版本数 1

常见问题

CRM-in-a-Box 是什么？

Bootstrap and manage an open, file-based CRM using the CRM-in-a-Box protocol (contacts, pipeline, interactions as NDJSON). Use when setting up a new CRM for... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1002 次。

如何安装 CRM-in-a-Box？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install crm-in-a-box」即可一键安装，无需额外配置。

CRM-in-a-Box 是免费的吗？

是的，CRM-in-a-Box 完全免费（开源免费），可自由下载、安装和使用。

CRM-in-a-Box 支持哪些平台？

CRM-in-a-Box 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 CRM-in-a-Box？

由 taylorhou（@taylorhou）开发并维护，当前版本 v0.1.0。