技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 825 · 2 current installs · 2 all-time installs
⭐ 0
安装量（当前） 2
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：picqer-fulfillment
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The package appears to implement a Picqer dashboard and networked API calls, but its metadata and runtime instructions are inconsistent (missing declared env vars, a background cron not mentioned in SKILL.md, and name/description mismatches), so review before installing.
目的
Code implements a FutureFulfillment Picqer dashboard (fetching picklists, stock, orders) but registry metadata is sparse: the skill name is 'honor' while code/class/slug refer to a Picqer dashboard. SKILL.md documents Picqer commands, but required environment variables (PICQER_SUBDOMAIN and PICQER_API_KEY) are not declared in the registry metadata. This mismatch between declared purpose/requirements and actual code is incoherent.
说明范围
SKILL.md documents a JSON-only command API and notes that API key lives in a local .env and access is via Tailscale. However, the code contains a cron.ts that starts a recurring sync every 5 minutes (auto network calls) which is not mentioned in SKILL.md. The code reads only PICQER_SUBDOMAIN and PICQER_API_KEY and calls picqer.com endpoints; there is no evidence of other data collection or external endpoints, but the background syncing is out-…
安装机制
There is no install spec (instruction-only in metadata) but the package includes source files and package.json with dependencies (dotenv, @openclaw/sdk). No external downloads or obscure URLs are used. The lack of an explicit install spec is unusual given the included code and package.json, but it's not directly hostile.
证书
The code requires PICQER_SUBDOMAIN and PICQER_API_KEY from environment (.env) but the skill's declared required env vars/primary credential fields are empty. Requesting an API key for the integrated service would be reasonable, but failing to declare them in metadata is a significant inconsistency that could hide credential requirements from users or automated checks.
持久
cron.ts launches an initial sync and schedules setInterval to run every 5 minutes, causing autonomous periodic network activity whenever the skill is loaded. always:false so it's not globally forced, but the background process is not documented in SKILL.md. Combined with autonomous invocation allowed (platform default), this increases the surprise/blast radius if the skill is enabled.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「honor」。简介：Provides JSON API commands to fetch Picqer dashboard KPIs, picklists, stock mov…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/johnmcgucki/picqer-fulfillment/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
# FutureFulfillment Picqer Dashboard v2
JSON-only API for dashboard data. No markdown responses.
## Commands
All commands return JSON. No chat explanations.
### `dashboard.fetch`
Returns complete DashboardData object with KPIs, picklists, stock, and revenue.
**Input:** `{ "command": "dashboard.fetch", "filters": { "dateFrom": "2024-01-01", "dateTo": "2024-01-31", "picker": "", "client": "" } }`
### `picklists.fetch`
Returns only picklists data (open, closed, picker stats).
**Input:** `{ "command": "picklists.fetch", "filters": {} }`
### `stock.fetch`
Returns stock movements with slow/fast mover categorization.
**Input:** `{ "command": "stock.fetch", "filters": {} }`
### `revenue.fetch`
Returns revenue per client for sell-stock clients.
**Input:** `{ "command": "revenue.fetch", "filters": {} }`
## Response Format
Always returns JSON. Example success:
```json
{
"kpis": { "openPicklists": 42, "closedPicklists": 128, ... },
"picklists": { "open": [...], "closed": [...], "pickerStats": [...] },
"stock": { "rows": [...] },
"revenue": { "perClient": [...] },
"filtersUsed": { ... }
}
```
Example error:
```json
{ "error": "Picqer API not configured" }
```
## Security
- API key only in local .env file
- No credentials in OpenClaw config
- Access via Tailscale only