Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Abby Browser

基于 OpenClaw 的浏览器工具,支持自然语言控制网页打开、截图、点击、输入、表单填写、数据提取和页面操作。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 426 · 2 current installs · 2 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill's name/description state it wraps the OpenClaw browser for actions like open, click, screenshot and extract — the included scripts invoke the 'openclaw browser' CLI exactly as expected. Minor mismatch: registry metadata lists no required binaries while both SKILL.md and the scripts require the 'openclaw' CLI and a Chrome/Chromium browser; that should be declared but is not malicious.
Instruction Scope
SKILL.md and the scripts instruct only to run OpenClaw browser commands and to operate on web pages. The scripts do execute arbitrary page JS via evaluate and return page content (expected for a browser skill). The SKILL.md claims confirmation, logging, and not auto-executing dangerous operations, but the provided scripts do not implement explicit user confirmation or logging — this documentation/implementation gap is a behavioral mismatch to be aware of.
Install Mechanism
No install spec or external downloads; the skill is instruction + local Python scripts that invoke an existing CLI. No remote code fetch, archive extraction, or third-party package installs are present in the package.
Credentials
The package requires no environment variables or credentials. It expects the local 'openclaw' CLI and a browser to be present (declared in SKILL.md). There are no requests for unrelated secrets or system credentials in code or docs.
Persistence & Privilege
always:false and no modifications to other skills or system-wide settings. The skill does not request permanent platform privileges; autonomous invocation is allowed by default but not excessive here. No self-enabling or config changes detected.
Assessment
This skill is a straightforward wrapper around the OpenClaw browser CLI and appears to do what it says. Before installing, verify you trust the source (homepage is missing and source is 'unknown'), and confirm you have the official openclaw CLI and Chrome/Chromium installed. Be aware: the scripts can execute page JavaScript and return page contents (normal for a browser tool), so do not allow use on pages containing sensitive data unless you trust the agent's actions. Also note the SKILL.md promises confirmation/logging but the shipped scripts do not implement explicit user confirmation or persistent logs — if you need those safety guarantees, ask the author for implementation or avoid using the skill for destructive or sensitive tasks.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk972600g1wrhc9sx17saqxd3cn81krf3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Abby Browser Skill

基于 OpenClaw 内置浏览器工具封装


解决的问题

让爸爸可以用自然语言控制浏览器,不需要记住复杂命令。


核心功能

功能命令示例
打开网页open打开 Google
截图screenshot截取当前页面
点击click点击按钮
输入type输入文字
填表单fill填写表单
提取数据snapshot获取页面内容
等待wait等待加载
滚动scroll滚动页面

使用方法

在对话中

爸爸:帮我打开 Google
Abby:好的爸爸!让我打开 Google...
[执行 openclaw browser open https://google.com]
✅ 已打开 Google

爸爸:帮我截图
Abby:好的,截个图...
[执行 openclaw browser screenshot]
📸 截图已保存

爸爸:帮我点击登录按钮
Abby:好的...
[执行 openclaw browser click 12]
✅ 已点击

常用命令

# 打开网页
openclaw browser open https://example.com

# 截图
openclaw browser screenshot
openclaw browser screenshot --full-page

# 点击元素 (需要先 snapshot 获取 ref)
openclaw browser click 12
openclaw browser click 12 --double

# 输入文字
openclaw browser type 12 "hello world"

# 填写表单
openclaw browser fill --fields '[{"ref":"1","value":"xxx"}]'

# 获取页面快照
openclaw browser snapshot
openclaw browser snapshot --format aria

# 等待
openclaw browser wait --text "Done"
openclaw browser wait --selector ".content"

# 滚动
openclaw browser evaluate --fn 'window.scrollTo(0, document.body.scrollHeight)'

封装脚本

scripts/open.py

打开网页的封装脚本。

scripts/screenshot.py

截图的封装脚本。

scripts/click.py

点击元素的封装脚本。

scripts/form.py

表单填写的封装脚本。

scripts/extract.py

数据提取的封装脚本。


重要概念

1. Element Reference (ref)

每次执行 snapshot 后,元素会有一个编号 (ref):

<button ref="12">登录</button>
<input ref="23" />

点击 ref=12:openclaw browser click 12

2. Snapshot 格式

  • --format ai (默认) - AI 理解
  • --format aria - 辅助功能树

3. 等待加载

操作前最好等待:

openclaw browser wait --text "加载完成"

安全考虑

  • ❌ 不自动执行危险操作
  • ✅ 执行前确认
  • ✅ 记录操作日志
  • ✅ 异常处理

依赖

  • OpenClaw browser 工具
  • Chrome/Chromium 浏览器

相关文档


创建于 2026-02-15

Files

7 total
Select a file
Select a file to preview.

Comments

Loading comments…