Odoo Manager

• Analyzed: May 12, 2026, 3:25 AM
• Findings: 1
• Version: 0.0.1
• Hash: ce0ebd48994709c1cdf9b446c6d23ace4104f8dc683049bac513caf793d23fcb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Odoo Manager skill is designed for legitimate interaction with Odoo's XML-RPC API, enabling CRUD operations and model introspection. It explicitly handles sensitive Odoo credentials via environment variables (`ODOO_URL`, `ODOO_DB`, `ODOO_USERNAME`, `ODOO_PASSWORD`/`ODOO_API_KEY`) and contains clear instructions in `SKILL.md` and `README.md` for the agent to never log or expose these secrets. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent; instead, it promotes secure practices like least privilege and environment variable usage.