Security audit
Security checks for vulnerabilities and agentic risk
This skill automates adding a user-requested book to Douban's wishlist using a clearly disclosed logged-in browser profile.
Install only if you want an agent to make Douban wishlist changes for you. Treat the saved Playwright profile as logged-in session data; delete or rotate ~/.openclaw/browser-profiles/douban-playwright if you no longer want the skill to reuse your Douban login.
The skill performs networked actions and browser automation against Douban but declares no explicit tool scope or permissions boundary. That increases the chance an agent can invoke network-capable behavior without clear policy gating, making unintended outbound requests or account actions easier in a real deployment.
The skill description says it will add books to a Douban wishlist, but it does not clearly warn that it performs state-changing actions on the user's account using a persisted browser profile. Because the profile is long-lived and reusable, a user or calling agent may underestimate that this can silently modify account state in future runs without a fresh login or explicit confirmation.
The Playwright browser context is created with locale set explicitly to "zh-CN", which enforces a specific locale for all users of this skill. This is a natural-language policy concern because the file does not offer an opt-in or configuration path for language/locale selection, nor does it document a justified region-specific constraint.
No suspicious patterns detected.
