Sales Dashboard

Aggregate sales data from OKKI CRM and Campaign Tracker to generate weekly/monthly reports with alerts and push them to Discord.

Before installing or enabling this skill: - Inspect config/dashboard-config.json and any referenced OKKI client/config files. The config contains absolute paths to /Users/wilson/... and other skill workspaces — if those exist on your system the skill will read them (and may read credentials inside). - Treat the skill as requiring access to local secrets even though no env vars are declared: it loads .env files and OKKI API config (which can contain client_id/client_secret) and will request tokens from the OKKI token endpoint. - If you do not want it to access other projects, change OKKI_WORKSPACE and ENV_PATH environment variables (or sanitize the config) to point to a safe location, or remove/replace absolute paths in config/dashboard-config.json before use. - Because the collector writes a token cache and logs into the referenced OKKI workspace, run the skill in an isolated environment (container or dedicated account) if you cannot fully audit the referenced files. - Consider requesting the publisher to: 1) remove hard-coded absolute paths, 2) declare required env vars/credentials in registry metadata, and 3) make explicit what external files it needs and why. If you can't verify those changes, avoid giving this skill autonomous invocation or run it only manually with dry-run options. If you want, I can: point out the exact lines that read/write external paths, help create a sanitized config, or suggest a safe sandbox command to run the scripts for testing.

Type: OpenClaw Skill Name: ssa-sales-dashboard Version: 1.0.0 The ssa-sales-dashboard skill bundle is a legitimate tool designed to aggregate sales metrics from the OKKI CRM API and other local data sources. The scripts (data-collector.js, metrics-calculator.js, etc.) implement standard data processing logic, including OAuth2 authentication, KPI calculation, and report generation. While data-collector.js accesses sensitive files like the workspace .env and sibling skill directories to gather metrics, this behavior is consistent with its stated purpose as a centralized dashboard. The bundle contains no evidence of malicious intent, obfuscation, or unauthorized data exfiltration.