Agent Browser CLI
PassAudited by ClawScan on May 10, 2026.
Overview
This is a disclosed browser-automation instruction skill, but users should be careful because it can control websites, use account credentials, install an external CLI, and optionally run scheduled actions.
Install only if you trust the external agent-browser package and need browser automation. Before use, confirm the target website and actions, be cautious with passwords and logged-in sessions, and do not enable the cron check-in example unless you truly want recurring automated browser activity.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used on the wrong page or without review, the agent could click buttons, submit forms, or change data in a website session.
The skill documents broad browser-control commands, including clicking, filling fields, and submitting forms. This is central to the stated browser-automation purpose, but can perform actions on real websites.
agent-browser click <sel> ... agent-browser fill <sel> "text" ... agent-browser find role button click --name "提交"
Use this skill only for websites and actions you explicitly approve, and require confirmation before submissions, purchases, account changes, or other irreversible actions.
Using the skill on logged-in sites or with passwords gives the automation the ability to act as the user on those sites.
The form-filling workflow shows the agent entering account credentials. No hardcoded real credential or credential theft behavior is shown, but the skill may operate with the user's website identity.
agent-browser find label "用户名" fill "myuser" agent-browser find label "密码" fill "mypassword"
Avoid sharing sensitive credentials unless necessary, prefer temporary or low-privilege accounts where possible, and review the page before submitting login or account forms.
Installing the external package will run code that was not included in this skill review.
The skill instructs users to install and run an external npm CLI globally, without a pinned version in the artifact. This is expected for a CLI-based skill, but the package source is outside the reviewed artifacts.
npm install -g agent-browser agent-browser install
Verify the npm package name, publisher, source repository, and version before installing; consider pinning a known-good version and using a constrained environment.
If the user adds this script to cron, the browser automation could keep acting on a schedule after the initial setup.
The skill provides a scheduled check-in script pattern. It does not install persistence automatically, but it guides the user toward recurring browser automation.
### 3. 定时签到（配合cron） 创建脚本 `~/.openclaw/scripts/daily-checkin.sh`
Only create scheduled jobs intentionally, document where they are installed, and remove or disable them when no longer needed.