技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.0
统计：⭐ 0 · 531 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：danielfoch/kvcore-mcp-cli
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's runtime instructions expect a local npm-based CLI and sensitive credentials (KVCORE API token, optional Twilio credentials), but the published package contains no code or declared env requirements — this mismatch is unexpected and warrants caution.
目的
The SKILL.md describes a CLI/‘MCP server’ and lists concrete binaries/commands (npm run dev:kvcore-mcp, node packages/kvcore-cli/dist/index.js) plus required env vars (KVCORE_API_TOKEN, optional Twilio creds). However, the registry metadata declares no required env vars and the skill bundle contains no code files. A user would reasonably expect either the CLI code or an install spec; their absence is inconsistent with the stated purpose.
说明范围
Instructions tell the agent to run npm scripts and node executables under packages/..., and to use KVCORE_API_TOKEN and optional Twilio credentials. Those commands reference local project files that are not included in the skill. The instructions also permit raw endpoint access (kvcore_request) and fallback Twilio calls — behavior that will transmit data to external services. The SKILL.md asks the agent to access environment variables not decl…
安装机制
There is no install spec (instruction-only), which minimizes direct install risk. However, the runtime instructions require running npm build/dev commands implying a local repository or installed package; because no code or install steps are provided, an agent running those commands could either fail or execute arbitrary local npm scripts if present. The missing code/install details are a practical and transparency concern.
证书
Requiring KVCORE_API_TOKEN and optional Twilio credentials is proportionate to the CRM and outbound-call functionality described. That said, the registry metadata lists no required env vars while SKILL.md does — an inconsistency. Also note that Twilio auth tokens and the KVCORE API token are sensitive: if supplied they enable external API operations (sending texts/emails/placing calls).
持久
The skill does not request persistent installation or always:true. It is user-invocable and may be invoked autonomously by the agent (platform default), which is expected. There is no evidence the skill modifies other skills or system-wide settings.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「KVcore MCP CLI」。简介：Perform KVcore CRM actions via MCP/CLI, including managing contacts, tags, note…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/danielfoch/kvcore-mcp-cli/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: kvcore-mcp-cli
description: Use this skill when users need KVcore CRM actions through MCP/CLI (contacts, tags, notes, calls, email, text, campaigns), including raw endpoint access and optional Twilio call fallback.
---
# KVcore MCP/CLI Skill
Use this skill for KVcore CRM operations from chat interfaces.
## Environment
Required:
- `KVCORE_API_TOKEN`
Optional:
- `KVCORE_BASE_URL` (default `https://api.kvcore.com`)
- `KVCORE_TIMEOUT_MS`
- `TWILIO_ACCOUNT_SID`, `TWILIO_AUTH_TOKEN`, `TWILIO_FROM_NUMBER`
## MCP Server
Start with:
```bash
npm run dev:kvcore-mcp
```
Primary tools:
- `kvcore_contact_search`, `kvcore_contact_get`, `kvcore_contact_create`, `kvcore_contact_update`
- `kvcore_contact_tag_add`, `kvcore_contact_tag_remove`
- `kvcore_note_add`
- `kvcore_call_log`, `kvcore_call_schedule`
- `kvcore_email_send`, `kvcore_text_send`
- `kvcore_user_tasks`, `kvcore_user_calls`
- `kvcore_campaigns_refresh`
- `kvcore_request` (raw endpoint access)
- `twilio_call_create` (fallback outbound call)
## CLI
Build:
```bash
npm run build
```
Examples:
```bash
node packages/kvcore-cli/dist/index.js contact search --query "john smith" --pretty
node packages/kvcore-cli/dist/index.js email:send --contact-id 123 --subject "Quick update" --body "Following up" --pretty
node packages/kvcore-cli/dist/index.js text:send --contact-id 123 --body "Can we connect today?" --pretty
node packages/kvcore-cli/dist/index.js call:schedule --json '{"contact_id":123,"user_id":456,"scheduled_at":"2026-02-15 10:00:00"}' --pretty
node packages/kvcore-cli/dist/index.js call:twilio --to "+14165550001" --twiml "<Response><Say>Hello</Say></Response>" --pretty
```
## Scope Notes
KVcore Public API v2 supports contacts, notes, call logging, send email/text, schedule call, user task/call listing, and campaign refresh.
For endpoints not wrapped yet, use `kvcore_request` or CLI `raw`.