Odoo Assistant Store Manager

Odoo ERP via XML-RPC — sales, web orders, stock, products (CLI). Optional Discuss listener.

This skill appears to implement an Odoo CLI and an optional Discuss listener; functionally coherent but exercise caution before enabling the listener. Before installing or running: 1) Fix the metadata mismatch — ensure the registry lists the required env vars (ODOO_URL/DB/USER/PASSWORD) so you don’t accidentally publish or run without secrets configured. 2) Do NOT run the listener in production unless you explicitly want a long‑running bot that polls Odoo Discuss; test it in a staging environment first. 3) Consider network controls for the runtime ( e.g., block requests to internal IP ranges / metadata endpoints ) because the skill will fetch URLs supplied via messages or product fields (SSRF risk). 4) Run with least-privilege Odoo credentials (avoid admin/root DB user) and rotate keys if re-used. 5) Review the full code locally (already included) and run tests in an isolated environment. If you don’t need automated polling and external-URL scraping, use only the CLI (odoo_manager.py) and avoid setting ODOO_BOT_PARTNER_ID.

Type: OpenClaw Skill Name: odoo-assistant-manager Version: 1.0.1 The skill bundle provides a functional Odoo ERP management system, but contains high-risk architectural patterns. Specifically, `src/odoo_listener.py` implements a polling loop that monitors Odoo Discuss messages and executes subprocesses via `odoo_manager.py` based on chat input; while it uses `shlex.quote` for sanitization, this remains a significant attack surface for command injection. Additionally, both `src/odoo_listener.py` and `src/odoo_manager.py` perform unvalidated HTTP requests to user-provided URLs (via `requests.get` and `urllib.request.urlopen`) to scrape metadata and download images, which introduces a Server-Side Request Forgery (SSRF) vulnerability. Although these behaviors align with the stated purpose of the tool and no clear malicious intent was found, the combination of remote-triggered execution and SSRF risks warrants a suspicious classification.