OKKI CRM

连接 OKKI（小满）CRM 系统，支持查询客户、创建跟进记录、管理订单等操作。频道限定触发。

This skill's documentation instructs the agent to run a local Python client and read config files and environment variables, but the published metadata declares no required env vars or files. Before installing or enabling: 1) Ask the publisher for the upstream source/repository and provide the okki_client.py and config.json for review. 2) Require an explicit list of environment variables and credential types (API token, workspace ID, Discord channel ID) so you can scope and rotate secrets. 3) Verify where tokens are stored and how automatic caching/refresh works; prefer ephemeral or scoped tokens and avoid plain-text files. 4) If you cannot review the client code, run this skill only in an isolated sandbox or deny it access to sensitive workspaces. 5) Ensure the skill prompts for explicit user confirmation on high-risk operations (create/update/delete/send_email) as documented. If the author cannot supply a clear list of required env vars, code, and a trusted source, treat the skill as untrusted.

Type: OpenClaw Skill Name: ssa-okki-crm Version: 1.0.0 The skill bundle provides instructions for an AI agent to interact with the OKKI CRM, including high-risk operations like deleting records and sending emails. It is classified as suspicious because the SKILL.md file instructs the agent to execute shell commands using unvalidated user input (e.g., python3 ... <company_id>), which presents a shell injection vulnerability. Furthermore, the bundle contains hardcoded local file paths and an anomalous future timestamp (2026) in _meta.json.