Skills/ClawHub/cordys-crm

cordys-crm@1.2.1

VERIFIED· install only

Publisher claims: "Cordys CRM L2C 全链路技能。支持跨模块关联追踪、漏斗分析、Customer 360、智能工作流引导，以及完整的 CLI 指令映射。 触发词：线索、客户、商机、跟进、报价单、合同、回款、发票、工商抬头、订单、审批、漏斗、管道、CRM" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher fit2-zhao · publishing for 96 daysInstalls 1,649Last detonated 5d ago
$clawhub install cordys-crm
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-09 and scored it 86/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsregistry.json:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"notes": "可以通过系统环境变量或技能目录中的.env文件提供。.env文件包含敏感信息，不应提交到版本控制。可选变量 ROLE_MAP 用于自定义岗位→角色的映射规则。"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:83 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- `.env` 文件是敏感文件，不提交版本控制，不在输出中提及其内容Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/cordys.py:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 如果没有 python-dotenv，提供简单的 .env 加载实现Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/cordys.sh:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesENV_FILE="${SKILL_DIR}/.env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/cordys.py:34 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesENV_FILE = SKILL_DIR / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsregistry.json:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"notes": "此技能需要访问Cordys CRM API，使用X-Access-Key和X-Secret-Key进行身份验证。请确保只向可信的CORDYS_CRM_DOMAIN发送请求。技能会读取技能目录中的.env文件（如果存在），这可能会带来安全风险。"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈761 tok
1 file · 25 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

cordys-crm@1.2.1 safety verdict: Verified (install only) — KillerSkills