技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 14 · 1 current installs · 1 all-time installs
⭐ 0
安装量（当前） 1
🛡 VirusTotal ：挂起 · OpenClaw ：可疑
Package：cjboy007/okki-email-sync
安全扫描（ClawHub）
- VirusTotal ：挂起
- OpenClaw ：可疑
OpenClaw 评估
The skill's code and instructions broadly match its stated purpose (syncing emails/quotations to OKKI), but there are inconsistencies and integration behaviors (undeclared environment variables, file-copy integration into other skills, and execution of local Python/CLI tools) that you should verify before installing.
目的
The name/description (sync emails/quotations to OKKI CRM) aligns with what the JS module does: domain matching, vector search fallback, deduplication, and calling an OKKI CLI to create trails. Nothing in the code attempts unrelated cloud access or surprising capabilities. However the SKILL.md expects external local tooling (OKKI CLI, vector search script) and environment variables even though the registry declares no required env vars — a mism…
说明范围
Runtime instructions and the JS code stay within the described scope: they extract domains, optionally call a local vector-search Python script, call a local OKKI CLI (via python), and log unmatched items and processed UIDs to /tmp files. A notable behavior: the SKILL.md instructs you to copy the module into other skill workspaces (e.g., imap-smtp-email, quotation-workflow) so it becomes part of those skills' runtime; that modifies other skill…
安装机制
No install script or remote downloads are used; the skill is instruction+source only. That lowers risk: nothing will be fetched from arbitrary URLs. The JS file executes local Python and a local okki.py script via execFile, which is expected for this integration.
证书
The registry shows no required environment variables, but SKILL.md and the code expect several environment/config overrides (OKKI_CLI_PATH, VECTOR_SEARCH_PATH, PYTHON_VENV_PATH, OKKI_SYNC_RECORD_FILE). The module also inherits process.env when launching subprocesses. While no explicit API keys are declared in requires.env, the OKKI CLI likely needs credentials configured elsewhere — you should confirm where OKKI credentials are stored and that…
持久
The skill does not set always:true and is user-invocable (normal). Still, it is designed to be copied into and run from other skills' directories (it even documents copying/overwriting okki-sync.js into other skill workspaces). This practice modifies other skill code/configuration and increases blast radius if the module or the local CLI/scripts are malicious. It also writes state to /tmp files (processed records and unmatched logs) — benign i…
scripts/okki-sync.js:63
检测到Shell命令执行（ child_process ）。
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「OKKI Email Sync」。简介：Synchronize email activities and quotation events with OKKI CRM as follow-up tr…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/cjboy007/okki-email-sync/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。