odoo
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill acts as a comprehensive documentation and interface layer for Odoo ERP.
- [CREDENTIALS_UNSAFE]: The
.env.examplefile uses generic placeholder credentials (admin/admin), which is safe for demonstration. The documentation explicitly instructs users to avoid passing passwords as command-line arguments to prevent leakage in shell history. - [EXTERNAL_DOWNLOADS]: The skill references libraries and repositories associated with the author (@marcfargas) or the well-known Odoo Community Association (OCA). These are considered legitimate vendor and ecosystem resources.
- [INDIRECT_PROMPT_INJECTION]: As an ERP integration, the skill retrieves data from external Odoo instances. The implementation follows standard patterns for data retrieval and does not bypass AI safety guidelines. Capability inventory includes standard Odoo CRUD operations and messaging, which are scoped to the connected instance.
Audit Metadata