Pans Crm Sync

AI算力销售 CRM 同步工具。对接 Salesforce 和 HubSpot 双平台， 自动同步客户状态、更新 Pipeline、生成 CRM 报表，支持双向/增量同步 和冲突检测与解决。 触发词：CRM同步, 客户同步, Salesforce, HubSpot, pipeline同步, 客户状态更新, CRM...

Security Scan

The skill's code and README legitimately require Salesforce and HubSpot credentials and pip packages, but the registry metadata incorrectly declares no required environment variables — an incoherence users should notice before installing.

Purpose & Capability

The skill's name/description (Salesforce + HubSpot CRM sync) matches the code and runtime instructions: it queries contacts, updates pipeline stages, and supports sync/query/update operations. Requiring Salesforce username/password/security token and a HubSpot API key is appropriate for this purpose. However, the registry metadata lists no required environment variables or primary credential, which is inconsistent with the SKILL.md and the script.

Instruction Scope

SKILL.md and scripts/crm.py confine actions to interacting with Salesforce and HubSpot APIs, printing results, and optionally writing output JSON to a user-specified file. There are no instructions to read unrelated system files, exfiltrate data to arbitrary endpoints, or perform other out-of-scope actions.

Install Mechanism

There is no formal install spec (instruction-only), which minimizes automatic code installation risk. The README asks users to run pip install simple-salesforce and hubspot-api-client — expected for this functionality but means external packages will be installed at runtime. Those are standard SDKs, not obscure hosts, but pip installs always carry supply-chain risk.

Credentials

The code requires sensitive credentials (SALESFORCE_USERNAME, SALESFORCE_PASSWORD, SALESFORCE_SECURITY_TOKEN, HUBSPOT_API_KEY) — appropriate for the stated integrations — but the registry metadata declares no required environment variables or primary credential. This mismatch is an incoherence: the skill will prompt for or expect secrets even though the registry advertises none. Users should be aware and ensure they only provide least-privilege credentials.

Persistence & Privilege

The skill is not always-enabled and does not request elevated platform privileges. It does not modify other skills or system-wide settings. Autonomous invocation is permitted (platform default) but not combined with other high-risk flags.

What to consider before installing

This skill appears to do what it says (sync Salesforce and HubSpot), but the registry metadata failing to declare required environment variables is a warning sign — the code expects sensitive credentials (Salesforce username/password/security token and HubSpot API key). Before installing or running: 1) review the full script (you already have it) to confirm there are no hidden endpoints; 2) run it in an isolated environment (or container) and avoid using production/high-privilege credentials — create and use least-privilege API tokens or a test account; 3) be aware you'll need to pip install external SDKs (verify their provenance); 4) consider rotating credentials after use and monitor API/activity logs for unexpected access. If the registry entry will be published, ask the maintainer to update the metadata to list the required env vars so the requirement is transparent.

AI算力销售CRM同步工具。对接Salesforce/HubSpot，自动同步客户状态、更新Pipeline、生成CRM报表。

功能

• 支持 Salesforce 和 HubSpot 双平台
• 客户数据同步（双向/增量）
• Pipeline 状态更新
• CRM 报表生成
• 冲突检测与解决

安装

# 安装依赖
pip install simple-salesforce hubspot-api-client

# 配置环境变量
export SALESFORCE_USERNAME="your_username"
export SALESFORCE_PASSWORD="your_password"
export SALESFORCE_SECURITY_TOKEN="your_token"
export HUBSPOT_API_KEY="your_api_key"

使用

# 同步客户数据
python scripts/crm.py --sync --platform salesforce

# 更新Pipeline状态
python scripts/crm.py --update --platform hubspot --status "Closed Won"

# 查询客户信息
python scripts/crm.py --query --platform salesforce --email "[e-mail]"

CLI 参数

参数	说明
--sync	执行同步操作
--update	更新记录
--query	查询记录
--platform	平台选择: salesforce 或 hubspot
--status	状态值（用于 --update）
--email	邮箱（用于 --query）
--limit	查询结果限制

触发词

CRM同步, 客户同步, Salesforce, HubSpot, pipeline同步, 客户状态更新, CRM报表, crm sync