ClawHub

cliany-site

v0.1.1

Use when the user wants to automate web workflows into CLI commands via Chrome CDP and LLM. Supports exploring pages, generating adapters, and replaying acti...

⭐ 1· 81·0 current·0 all-time
byshawn@pearjelly
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (web workflow -> CLI via Chrome CDP + LLM) match the declared requirements and instructions. The skill legitimately needs an LLM API key and access to Chrome/CDP and local storage for adapters/sessions.
✓
Instruction Scope
SKILL.md instructs the agent to call the cliany-site CLI (doctor, login, explore, list, run adapters). It references expected local paths (~/.cliany-site/adapters, ~/.cliany-site/sessions) which are appropriate for the purpose. It does not instruct access to unrelated system files or to exfiltrate data to unexpected endpoints.
✓
Install Mechanism
No risky download/install steps. The included scripts/install.sh only copies SKILL.md into known agent skill directories (OpenCode, Claude, OpenClaw, Codex, .agents). No external network endpoints are contacted and nothing is extracted or executed by the installer itself.
ℹ
Credentials
Declared primaryEnv is CLIANY_ANTHROPIC_API_KEY which aligns with LLM usage. SKILL.md also documents alternatives (CLIANY_OPENAI_API_KEY, legacy ANTHROPIC_API_KEY). Minor inconsistency: registry metadata lists only CLIANY_ANTHROPIC_API_KEY as required while runtime docs accept multiple provider keys. All requested credentials are proportional to an LLM-driven automation tool; no unrelated secrets are requested.
✓
Persistence & Privilege
always is false. The skill does not request permanent elevated presence or modify other skills' configs. The installer writes its own SKILL.md into skill directories (expected). Autonomous invocation is allowed (default) but that is normal for skills and not uniquely privileged here.
Assessment
This skill appears internally consistent with its stated purpose, but review the following before installing: - LLM API key: the skill requires an LLM API key (primaryEnv lists CLIANY_ANTHROPIC_API_KEY). SKILL.md also supports CLIANY_OPENAI_API_KEY or legacy ANTHROPIC_API_KEY — confirm which provider you intend to use and supply only that key. Limit the key's scope where possible and rotate it if you stop using the skill. - Local artifacts: cliany-site stores sessions and generated adapters under ~/.cliany-site (sessions/, adapters/). These may contain authentication cookies or automated scripts; treat those directories as sensitive and inspect their contents. - cliany-site CLI dependency: the skill's runtime assumes you have the cliany-site Python package and Chrome with CDP access. Before letting an agent run this skill, run cliany-site doctor --json yourself to confirm environment and review what the tool will do. - Installer behavior: the included scripts/install.sh only copies SKILL.md into common skill directories (no network activity). Still review the upstream cliany-site project (pip package and GitHub repo) if you plan to install the underlying tool — the skill delegates real automation to that software. - Autonomous invocation: the skill can be invoked by the agent (default). If you are uncomfortable with an agent using your LLM key or interacting with sites autonomously, either do not install the skill or remove/limit the API key before enabling it. - Minor metadata mismatch: registry metadata requires only CLIANY_ANTHROPIC_API_KEY while SKILL.md documents multiple supported LLM keys; this appears to be a documentation/registry mismatch rather than malicious behavior, but you may want to confirm which env var your deployment requires. If you trust the upstream cliany-site project and are comfortable providing an LLM key and local Chrome/CDP access, the skill is coherent with its description. If not, inspect the cliany-site codebase and the contents of ~/.cliany-site before using it with sensitive accounts.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fkk6vzm6wr8n3fqy0a0vsdd83r562

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌐 Clawdis
EnvCLIANY_ANTHROPIC_API_KEY
Primary envCLIANY_ANTHROPIC_API_KEY

Comments