pingagi-web
v0.1.0Browse and extract text content, titles, and partial HTML from webpages using a local browser service.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (browse and extract webpage content) match the runtime instructions (POST to a local browser service and extract the 'text' field). No unrelated binaries, env vars, or installs are requested.
Instruction Scope
Instructions are narrowly scoped to POSTing a target URL to http://127.0.0.1:3088/browse and extracting the returned text/title/partial HTML. Note: because the skill allows arbitrary target URLs, an agent could be directed to fetch internal/private URLs via the local service (SSRF/internal network access risk) if the local service permits it — this is an operational risk rather than an incoherence with the skill's stated purpose.
Install Mechanism
No install spec or code is present (instruction-only), so nothing is written to disk or fetched during install.
Credentials
The skill declares no environment variables, credentials, or config paths — consistent with its described use of a local HTTP service.
Persistence & Privilege
always:false and default autonomy settings are present. The skill does not request permanent presence or elevated privileges beyond normal agent invocation.
Assessment
This skill expects a trusted local browser service listening at http://127.0.0.1:3088; if you don't run such a service the skill won't work. Before enabling: (1) confirm you actually run and trust a local service on port 3088, (2) verify that service enforces URL restrictions and doesn't allow arbitrary internal-network requests (to avoid SSRF/internal data exposure), and (3) be cautious about allowing autonomous agent invocation — the agent could be instructed to make requests to internal endpoints through the local service. If you can't verify the local service's behavior, don't enable or use this skill.Like a lobster shell, security has layers — review code before you run it.
latest
name: web description: Browse and extract content from webpages using the local browser service. version: 0.1.0 author: PingAGI metadata: { "openclaw": { "emoji": "🌐" } }
Web Browser Skill
Use this skill when the agent needs to:
- open a webpage
- extract webpage text
- browse websites
- retrieve webpage content
The agent can call the local browser service: Example command (replace URL with the target webpage):
curl -s -X POST http://127.0.0.1:3088/browse \
-H "Content-Type: application/json" \
-d '{"url":"https://example.com"}'
The response returns JSON containing:
- page title
- page text
- partial HTML
- optional screenshot (base64)
The agent should extract useful information from the "text" field.
Comments
Loading comments...
