Dynamics 365

ReviewAudited by ClawScan on May 16, 2026.

Overview

This is a coherent Dynamics 365 integration through ClawLink with disclosed credential handling and write confirmations, but users should recognize it delegates CRM access to a third-party plugin/service.

Before installing, make sure you trust ClawLink and the ClawLink plugin with your Dynamics 365 data. Connect the least-privileged Dynamics account or scopes that will work, do not paste raw credentials into chat, and approve CRM writes only after reviewing the preview.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may create or update CRM records in the user's Dynamics 365 account if the user approves those actions.

Why it was flagged

The skill can invoke tools that mutate CRM records, but the artifact instructs the agent to preview and obtain user confirmation before writes.

Skill content
Create or update records after confirmation ... For writes or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user. Execute with `clawlink_call_tool`.
Recommendation

Review previews carefully before approving writes, especially bulk, destructive, or customer-facing changes.

What this means

ClawLink and its plugin will have access to the Dynamics 365 capabilities granted by the user's connected account and scopes.

Why it was flagged

The integration relies on delegated account access and a locally stored device credential, which is expected for this CRM integration and is disclosed.

Skill content
ClawLink ... handles hosted connection flows and credentials ... The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Recommendation

Connect only accounts and scopes you are comfortable delegating, and revoke the ClawLink connection if you no longer use the skill.

What this means

Installing the plugin adds external integration code and tools to OpenClaw beyond this instruction-only skill.

Why it was flagged

The skill depends on a separate plugin installed by the user; that plugin is not included in the provided skill artifacts for review.

Skill content
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Recommendation

Install the ClawLink plugin only from the expected ClawHub source and review ClawLink's documentation or verification page if trust is a concern.

What this means

Dynamics 365 data and actions may pass through ClawLink as part of normal operation.

Why it was flagged

CRM requests, results, and connection handling are mediated through the ClawLink integration hub and dynamically discovered tools.

Skill content
Powered by ClawLink ... an integration hub ... ClawLink provides tools dynamically based on what the user has connected.
Recommendation

Use this only if you trust ClawLink with the relevant CRM data, and avoid requesting access to records that are not needed for the task.