技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 841 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：avirweb/twenty-oauth-mastery
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's content is plausible for OAuth troubleshooting, but its runtime instructions ask an agent to inspect containers, environment variables, and change cookie/security settings without declaring or justifying that access — this mismatch could expose sensitive credentials or weaken security if used carelessly.
目的
The name and SKILL.md focus on Twenty CRM OAuth troubleshooting and implementation. The files referenced, commands suggested (build, restart, docker, curl) and code snippets are consistent with debugging an OAuth server and enabling token preservation for sync services.
说明范围
Although reasonable for a debugging guide, the SKILL.md explicitly instructs the agent/operator to run commands that inspect container filesystem and environment (e.g., docker exec ... cat /app/dist/..., docker exec fratres-twenty env | grep AUTH_GOOGLE) and to change server/cookie settings (e.g., set httpOnly: false). Those instructions let an agent read environment variables, compiled code, and potentially modify security-relevant code — act…
安装机制
Instruction-only skill with no install spec or external downloads. No code is written or fetched by an installer, which keeps install risk low.
证书
The skill declares no required env vars but repeatedly references AUTH_GOOGLE_CLIENT_ID, AUTH_GOOGLE_CLIENT_SECRET, AUTH_GOOGLE_CALLBACK_URL and suggests grepping env output. Requiring unrestricted access to container env and config is disproportionate to a read-only guidance document and increases risk of credential exposure if the agent follows instructions autonomously or without environment safeguards.
持久
The skill is not always-enabled, does not install or request persistent presence, and is user-invocable. It does not request elevated platform privileges itself.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Twenty CRM OAuth Mastery」。简介：Provides expert OAuth 2.0 implementation, troubleshooting, and token management…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/avirweb/twenty-oauth-mastery/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。