Query Odoo data including salesperson performance, customer analytics, orders, invoices, CRM, accounting, VAT, inventory, and AR/AP. Generates WhatsApp cards, PDFs, Excel. Use when user explicitly mentions Odoo or asks for Odoo data.
The text references files that are not there: add them or drop the references.
For the model run — optional
Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.
Guard findings · 1
✓ No critical or high findings
Medium and low: 1
lowExfiltrationread-dotenvSKILL.md:38
Reads a .env file
cp .env.example .env
Files scanned: 36. Evidence is masked. Grey chips explain why severity was lowered.
Against the Agent Skills spec
warningmissing-ref reference to a missing file: assets/autonomous-cfo/.env
warningmissing-ref reference to a missing file: assets/autonomous-cfo/output/
Process rating: all ten parameters 47/100
Will not run. References files that are not bundled: assets/autonomous-cfo/.env, assets/autonomous-cfo/output/
0Tools and files. 2 referenced file(s) missing: assets/autonomous-cfo/.env, assets/autonomous-cfo/output/
0Inputs and preconditions. Does not say what the process needs to start
0Progress reporting. Says nothing while it works
30Running it twice. 2 mutating operations with no state check
40Consistency. Frontmatter name (odoo) differs from the folder (odoo-openclaw-skill)
50When it triggers. No condition that starts the skill
60Result and completion. Output format stated, no completion criterion
70Failures and branches. 4 branches
100Steps. 73 steps
100Execution cost. Instruction body is 2876 tokens
medium Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
low 14 top-level sections: this looks like several domains in one skill
Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.
Quality signals
+5Description has no quoted example phrases that should trigger the skill
+4Description does not say when NOT to use the skill (false activations)
+1No license
+2Single-language instructions
+3Description length 233: enough signal without eating the budget
+4Structure: 27 headings
+3Step-by-step instructions: 73 items
+3Output format is stated explicitly
+4Has examples (13 code blocks)
Quality base 70; lint remarks subtract, signals add up to 100. Result: 78.
External checks
ClawHub: suspicious
The skill is coherent for read-only Odoo financial reporting, but it handles finance credentials and data while allowing plaintext or unauthenticated TLS connections.