Acumatica Customization Management
v1.0.0Manage Acumatica ERP customization projects via the CustomizationApi web API. Use this skill whenever the user wants to export, import, publish, validate, un...
⭐ 0· 100·0 current·0 all-time
byawei@allanwei
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name, description, SKILL.md, README, and acumaticahelper.sh all align: the script calls only Acumatica API endpoints (derived from the official CustomizationApi docs) and exposes commands for list, export, import, validate, publish, unpublish, delete, status, and maintenance. No unrelated services, binaries, or credentials are requested.
Instruction Scope
Most runtime instructions stay on-task (they read a local acumatica.conf, perform authenticated requests against ACUMATICA_URL, write exported ZIPs locally, and clean up a session cookie). Minor inconsistency: README/SKILL.md say optional tuning can be provided via exported env vars, but the script immediately errors if acumatica.conf is missing — so in practice the helper requires the config file to exist in the script directory. Otherwise, instructions are explicit and do not instruct the agent to access unrelated files or external endpoints.
Install Mechanism
No install spec and no downloads — this is an instruction-only skill with a single helper script. That is the lowest-risk install model.
Credentials
The skill requires Acumatica credentials (username/password) and an ACUMATICA_URL, but these are supplied via a local acumatica.conf file rather than declared environment variables in the registry metadata. Requiring plaintext credentials for an API client is proportionate, but the registry metadata lists no required env/config points while the script actually requires the config file to exist. Also, the README warns about plaintext credentials; store the file securely and .gitignore it.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system-wide privileges. It writes a temporary cookie file in /tmp during a session and exported ZIPs to the user's chosen output directory; it does not modify other skills or system config.
Assessment
This skill is coherent with its stated purpose, but review these before installing: 1) The helper requires a local acumatica.conf in the script directory containing ACUMATICA_URL, ACUMATICA_USERNAME, and ACUMATICA_PASSWORD — the registry metadata does not declare these, so the config file is mandatory. 2) acumatica.conf contains plaintext credentials; add it to .gitignore, set restrictive permissions (chmod 600), and prefer a least-privilege Acumatica account (Customizer role as suggested). 3) Verify ACUMATICA_URL points to a trusted instance — the script only talks to that host. 4) You can inspect the included acumaticahelper.sh (which is provided) and run it in a controlled environment; the skill does not perform unexpected network calls or exfiltration. 5) If you require env-var-based configuration or stricter secrets handling, consider adapting the script (or wrapping it) so you don't keep credentials in plaintext files.Like a lobster shell, security has layers — review code before you run it.
latestvk977rn55r39az7nsfafx29e8wn83mezf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.