← 返回 Skills 市场

Erxes

Name: Erxes
Author: wlkr123

作者 Wlkr123 · GitHub ↗ · v1.0.4 · MIT-0

cross-platform ⚠ suspicious

162

总下载

当前安装

版本数

在 OpenClaw 中安装

/install erxes-next

功能描述

Manage contacts, companies, products, tags, documents, brands, automations, team members, and organization data on an erxes instance. Use when the user wants...

使用说明 (SKILL.md)

erxes– Чадварууд

Login

Use scripts/login.sh for authentication.

ERXES_BASE_URL=\x3Curl> ERXES_CLIENT_ID=${ERXES_CLIENT_ID:-erxes-local} bash scripts/login.sh

ERXES_BASE_URL is required.
ERXES_CLIENT_ID is optional. Default to erxes-local.
Accept the URL in whatever form the user gives and normalize it to ERXES_BASE_URL=\x3Curl>.
Do not explain OAuth internals unless the user asks.
Do not ask the user to copy tokens manually.
Do not store tokens in project files.
The script opens the browser, waits for approval, and prints a session JSON payload to stdout.

Read erxes-app-token-auth.md only when you need the quick login reference.

API calls

After login, use the returned session payload directly.

Read accessToken from the login JSON response.
Send Authorization: Bearer \x3CaccessToken> and erxes-subdomain: \x3Csubdomain> headers on GraphQL calls.
If the access token expires during the current task, use the in-memory refreshToken to get a new access token.
Do not write tokens to .auth.json or any other project file.
Read erxes-graphql-api.md only when you need query or mutation examples.

Харилцагч

Бүх харилцагчийн жагсаалт харах
Нэр, имэйл, утсаар хайх
Харилцагчийн дэлгэрэнгүй мэдээлэл харах
Төрлөөр нь бүлэглэх (үйлчлүүлэгч / боломжит / зочин)
Шинэ харилцагч нэмэх
Харилцагчийн мэдээлэл засах
Харилцагч устгах
Давхардсан харилцагчийг нэгтгэх

Бүтээгдэхүүн

Бүтээгдэхүүний жагсаалт харах
Нэг бүтээгдэхүүний дэлгэрэнгүй харах
Шинэ бүтээгдэхүүн нэмэх
Бүтээгдэхүүн засах, устгах, нэгтгэх
Ангилал болон хэмжих нэгж удирдах

Шошго

Бүх шошго харах
Шошго нэмэх, засах, устгах
Харилцагч эсвэл бүтээгдэхүүнд шошго хавсаргах

Баримт бичиг

Баримт бичгийн жагсаалт харах
Баримт бичиг нэмэх, засах, устгах

Брэнд

Брэндийн жагсаалт харах
Брэнд нэмэх, засах, устгах

Автоматжуулалт

Бүх автоматжуулалтын жагсаалт харах
Автоматжуулалт нэмэх, засах, идэвхжүүлэх, устгах

Байгууллагын бүтэц

Хэлтэс, салбар, нэгж, албан тушаалын бүтэц харах
Хэлтэс, салбар, нэгж, тушаал нэмэх, засах, устгах

Багийн гишүүд

Гишүүдийн жагсаалт харах
Шинэ гишүүн урих
Гишүүний мэдээлэл засах
Гишүүнийг идэвхгүй болгох

References

scripts/login.sh — Browser login helper
erxes-app-token-auth.md — Quick login reference
erxes-graphql-api.md — Үйлдлүүдийн техникийн лавлах

安全使用建议

This skill appears to do what it says (authenticate to an erxes gateway and make GraphQL calls), but check two things before installing: (1) The skill requires ERXES_BASE_URL (and optionally ERXES_CLIENT_ID) even though the registry metadata doesn't list them — set ERXES_BASE_URL correctly. (2) The login helper prints the full token JSON to stdout; that can expose tokens in logs. If you will run this in environments where stdout is logged or accessible, prefer using a safer method (capture only the access token into memory) or confirm your agent environment does not persist logs. Also confirm you trust the erxes instance URL you provide. If you want stronger assurances, ask the skill author to fix the metadata to declare ERXES_BASE_URL and to avoid printing refresh/access tokens to stdout.

功能分析

Type: OpenClaw Skill Name: erxes-next Version: 1.0.4 The skill bundle provides a comprehensive interface for managing an erxes instance via its GraphQL API. It includes a standard OAuth device flow implementation in `scripts/login.sh` and detailed documentation in `erxes-graphql-api.md` for various operations like contact and product management. The instructions in `SKILL.md` specifically include security-conscious directives, such as advising the agent not to store authentication tokens in project files, and no indicators of malicious intent or data exfiltration were identified.

能力标签

requires-oauth-tokenrequires-sensitive-credentials

能力评估

ℹ Purpose & Capability

The name/description (manage erxes data) aligns with the included GraphQL reference and the login helper script. However the registry metadata lists no required environment variables while SKILL.md and the login script clearly require ERXES_BASE_URL (and optionally ERXES_CLIENT_ID). This metadata mismatch is an incoherence that could lead to improper installation or unexpected failures.

⚠ Instruction Scope

SKILL.md confines runtime activity to authenticating via Device Flow and making GraphQL calls to the provided ERXES_BASE_URL; the GraphQL docs enumerate only erxes operations. But the login script prints the full session JSON (including accessToken/refreshToken) to stdout even though SKILL.md instructs to 'keep this payload in memory' and 'do not store tokens in project files'. Printing tokens to stdout increases the chance of accidental logging or exfiltration (agent logs, CI logs, terminal history). There are no instructions to send data to any endpoint other than the provided ERXES_BASE_URL.

✓ Install Mechanism

Instruction-only skill with a small helper script; no install spec, no downloads, and no packages installed. Low install-time risk.

ℹ Credentials

The runtime actually requires ERXES_BASE_URL and optionally ERXES_CLIENT_ID (used by the script). The registry metadata claims no required env vars — that mismatch is confusing. There are no other credentials, unrelated secrets, or config paths requested.

✓ Persistence & Privilege

always is false and the skill does not request persistent system-wide privileges or modify other skills. Autonomous invocation is allowed (default) but is not combined with any broad credential access or always:true, so no exceptional persistence concerns.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install erxes-next
安装完成后，直接呼叫该 Skill 的名称或使用 /erxes-next 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.4

- Improved authentication flow documentation: session payload is now printed to stdout, no longer stored in project files. - Updated API usage instructions to use access/refresh tokens from in-memory session only. - Added guidance to send required headers (`Authorization`, `erxes-subdomain`) with each GraphQL call. - Removed instructions to write tokens to `.auth.json` or any project file.

v1.0.3

erxes-next 1.0.3 - Replaced Python login helper with a new shell script: added scripts/login.sh, removed scripts/erxes_local.py. - Greatly simplified login instructions; now use scripts/login.sh for authentication. - Updated documentation for a shorter, clearer login and API call process. - Adjusted environment requirements and examples for improved clarity and ease of use.

v1.0.2

- Updated login instructions to require only the login command for authentication. - Clarified usage of ERXES_BASE_URL and subdomain extraction; now handled automatically. - Deprecated use of login-start and login-finish commands. - Login and token refresh are now fully automated without user prompts or extra steps. - Revised documentation to reflect new authentication flow and provide updated usage examples.

v1.0.1

- Skill renamed from erxes-local to erxes. - Now requires the environment variable ERXES_BASE_URL to specify the erxes API URL. - Token storage path updated from skills/erxes-local/.auth.json to skills/erxes/.auth.json. - References and documentation links updated to reflect new skill name and paths.

v1.0.0

v.1.0.0

元数据

Slug erxes-next

版本 1.0.4

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 5

常见问题

Erxes 是什么？

Manage contacts, companies, products, tags, documents, brands, automations, team members, and organization data on an erxes instance. Use when the user wants... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 162 次。

如何安装 Erxes？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install erxes-next」即可一键安装，无需额外配置。

Erxes 是免费的吗？

是的，Erxes 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Erxes 支持哪些平台？

Erxes 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Erxes？

由 Wlkr123（@wlkr123）开发并维护，当前版本 v1.0.4。