← 返回 Skills 市场
领星 ERP
作者
wengjianmin19850412
· GitHub ↗
· v1.0.0
· MIT-0
101
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install lingxing-erp
功能描述
Integrate with Lingxing ERP to query today's orders, product inventory, and retrieve product lists via OpenClaw.
使用说明 (SKILL.md)
领星 ERP 技能
用于 OpenClaw 对接领星 ERP,查询订单、库存、商品数据。
配置项
- ACCESS_KEY: 领星开放平台 AccessKey
- SECRET_KEY: 领星开放平台 SecretKey
- BASE_URL: 领星 API 域名(默认 https://openapi.lingxing.com)
功能
- 查询今日订单
- 查询商品库存
- 获取商品列表
安全使用建议
What to consider before installing:
- The code itself only implements get_today_orders; SKILL.md claims inventory and product-list features that are not present. Don't assume those features exist without asking the publisher.
- The skill requires ACCESS_KEY and SECRET_KEY (used to HMAC-sign API calls) — that's expected for an API integration, but the registry metadata incorrectly lists no required env vars. Confirm how/where you'll provide credentials and whether the platform will store them securely.
- Source and homepage are missing. That reduces trust: prefer skills with a verifiable publisher or project page. Consider requesting the publisher's identity or audit trail before using production credentials.
- Test with limited-scope or read-only API keys first. Monitor network traffic and API use after enabling the skill.
- If you need inventory/product-list functionality, ask the author for an updated release; do not rely on undocumented behavior.
If you want, I can draft questions to ask the publisher or propose a minimal test plan to validate behavior safely.
功能分析
Type: OpenClaw Skill
Name: lingxing-erp
Version: 1.0.0
The skill provides a standard integration for the Lingxing ERP platform to query order data. The implementation in main.py uses a legitimate HMAC-SHA256 signing algorithm for API authentication and communicates with the official API endpoint (openapi.lingxing.com). No malicious behavior, data exfiltration, or prompt injection attempts were detected.
能力评估
Purpose & Capability
Name/description promise (Lingxing ERP queries) aligns with the code: the implementation signs requests and calls Lingxing's API to fetch today's orders. However, the registry metadata claims 'Required env vars: none' while SKILL.md and main.py clearly expect ACCESS_KEY and SECRET_KEY — an inconsistency in what the skill declares vs what it actually needs.
Instruction Scope
SKILL.md lists three capabilities (today's orders, inventory, product list) but main.py only implements get_today_orders. The runtime instructions and code only access the configured BASE_URL and credentials and do not read other files or unexpected environment variables, but the missing implementations and mismatch between documentation and code are scope/integrity concerns.
Install Mechanism
No install spec (instruction-only plus a small Python file). This minimizes install-time risk. The code uses the 'requests' library but no installer is provided — not a security risk but could cause runtime failures if the runtime lacks requests.
Credentials
The skill legitimately requires ACCESS_KEY and SECRET_KEY to talk to the Lingxing API (proportionate). However, the registry metadata advertises no required env vars/credentials while SKILL.md and main.py require them — this discrepancy is suspicious and could lead to misconfiguration or hidden credential handling.
Persistence & Privilege
The skill does not request persistent presence (always=false), does not modify other skills or system settings, and does not write to disk beyond normal execution. Autonomous invocation is allowed by default but is not combined with other high-risk factors here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install lingxing-erp - 安装完成后,直接呼叫该 Skill 的名称或使用
/lingxing-erp触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
领星 ERP 技能首次发布。
- 支持查询今日订单
- 支持查询商品库存
- 支持获取商品列表
- 可通过配置 ACCESS_KEY、SECRET_KEY 和 BASE_URL 对接领星 ERP
元数据
常见问题
领星 ERP 是什么?
Integrate with Lingxing ERP to query today's orders, product inventory, and retrieve product lists via OpenClaw. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 101 次。
如何安装 领星 ERP?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install lingxing-erp」即可一键安装,无需额外配置。
领星 ERP 是免费的吗?
是的,领星 ERP 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
领星 ERP 支持哪些平台?
领星 ERP 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 领星 ERP?
由 wengjianmin19850412(@wengjianmin19850412)开发并维护,当前版本 v1.0.0。
推荐 Skills