Customer Segmentation

Automatically segment customers into five levels using OKKI CRM data, score them, sync tags safely, and provide lifecycle and value-based strategy recommenda...

What to consider before installing/running: - The code expects OKKI CRM credentials and a config JSON in a path outside the skill (default ../../../xiaoman-okki/api/config.json) and will read a .env file at ../../../.env if present. The registry metadata does not declare these required credentials — assume the skill will look for and use local config files. - The scripts will write persistent files (data/, logs/) inside the skill and will also write a token cache into the external OKKI_WORKSPACE path. If that external workspace is shared with other tools, this skill could overwrite or add tokens used elsewhere. - Tag-sync performs remote writes to OKKI (but defaults to dry-run). Actual writes require --confirm; still, token acquisition and API calls will occur when confirmed. Review and test in dry-run mode first. - The scripts merge and replace customer tag arrays (cus_tag is written as a full list) — that behavior is explicit in the code, so if you want to preserve non-segmentation tags be cautious and inspect the merging logic and backups (script claims it creates backups to data/). - Recommended actions before running: - Inspect the OKKI config file (client_id, client_secret, baseUrl) that the scripts will read and ensure it points to an appropriate test workspace. - Move or provide an isolated OKKI_WORKSPACE and .env for testing so the skill cannot read unrelated credentials from your machine. - Run only the dry-run modes (collector --dry-run, tag-sync without --confirm) first and review produced data in data/ and logs/. - Backup any real OKKI workspace api/token.cache and companyEnums before performing a confirmed run. - If you intend to use this skill, update the skill metadata or code to explicitly declare required env vars/paths (so users know what sensitive data is needed) or modify the paths to point inside the skill workspace. Given the clear mismatch between declared requirements and what the code actually touches (external .env, external config and token cache), treat this skill as suspicious until you can confirm and isolate the configuration it will read/write.

Type: OpenClaw Skill Name: ssa-customer-segmentation Version: 1.0.0 The skill bundle is a legitimate tool for OKKI CRM customer segmentation, providing automated data collection, scoring, and tag synchronization. It includes robust safety features such as default dry-run modes, API quota monitoring, rate limiting (500ms intervals), and tag-merging logic to prevent overwriting existing CRM data. While it accesses environment variables and configuration files from parent directories (e.g., `../../../.env`), this behavior is consistent with standard integration patterns for local CRM workspaces, and no evidence of malicious data exfiltration or unauthorized execution was found in scripts like `customer-data-collector.js` or `tag-sync.js`.