📦 GHL CRM for Realtors — 房产经纪CRM
v1.0.0通过 GoHighLevel API v2 一站式完成房产经纪日常：搜索并更新客户资料、跟踪销售管道、发送消息、预约日历时段、自动注册营销工作流，全流程提效。
2· 726·2 当前·2 累计
by @danielfoch下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill looks like a plausible GHL integration, but take these precautions before installing:
- Verify provenance: the source/homepage is unknown; confirm you trust the owner before supplying credentials.
- Provide a dedicated Private Integration token with the minimum scopes needed (contacts.readonly, conversations.readonly/write, calendars, etc.) rather than a high-privilege account token. Rotate or revoke the token after testing.
- Do not paste your token into chat or public logs. Althoug...详细分析 ▾
ℹ 用途与能力
The code and SKILL.md are coherent with the stated purpose: both scripts interact only with GoHighLevel (services.leadconnectorhq.com) and implement contact, conversation, calendar, and opportunity endpoints. However, the registry metadata lists no required environment variables while the SKILL.md and both scripts clearly require HIGHLEVEL_TOKEN and HIGHLEVEL_LOCATION_ID. That metadata omission is an inconsistency that should be corrected.
ℹ 指令范围
Runtime instructions and scripts are narrowly scoped to the GHL API and related references; they do not attempt to read unrelated filesystem paths or contact unknown endpoints. Minor scope issues: references/troubleshooting.md shows example commands that echo $HIGHLEVEL_TOKEN (which would print the raw token), while SKILL.md's Safety Rules say 'Never print or echo raw tokens' — this contradiction could lead to accidental token exposure during debugging or by less-knowledgeable users.
✓ 安装机制
No install spec; this is an instruction-only skill with included Python scripts using only standard library modules (urllib, json, re, etc.). There are no external downloads, package installers, or executable creation steps — low installation risk.
⚠ 凭证需求
The skill legitimately needs a Private Integration token (HIGHLEVEL_TOKEN) and a location ID (HIGHLEVEL_LOCATION_ID) to operate. These are sensitive credentials and are appropriately the only secrets required. However, the registry metadata failing to declare these env vars is a red flag for transparency. Also, the troubleshooting docs include examples that would print the token, increasing accidental exposure risk if users follow them without caution.
✓ 持久化与权限
The skill does not request always:true or any elevated persistent platform privileges. It does not modify other skills or system-wide agent settings. It is user-invocable and allows autonomous invocation (platform default), which is expected for this kind of skill.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/17
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install ghl-crm-for-realtors
镜像加速npx clawhub@latest install ghl-crm-for-realtors --registry https://cn.longxiaskill.com