Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Edge Browser

Control Microsoft Edge browser to fetch web pages and extract content. Use when the user wants to access a specific URL using Edge browser instead of Chrome,...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 302 · 2 current installs · 2 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill's name/description (Edge browser fetcher) align with the included script and SKILL.md: the script uses Playwright to launch Edge or Chromium and returns page content. Minor inconsistency: the registry metadata lists no required binaries, but the SKILL.md requires installing Playwright (pip) and browser runtimes — this is documented in SKILL.md but not reflected in metadata.
Instruction Scope
SKILL.md and scripts instruct only to install Playwright and run the provided fetch.py with a URL and optional wait/output flags. The script fetches the page, waits, extracts title/content/text, and returns JSON. It does not read other files, env vars, or contact any hidden endpoints.
Install Mechanism
There is no automated install spec (instruction-only). Installation is manual via pip/playwright CLI per SKILL.md. This is a lower-risk pattern, but be aware Playwright will download browser binaries (chromium) during installation and the script attempts to launch Edge by absolute Windows paths (fallback to Chromium).
Credentials
The skill requests no environment variables or credentials. The script does not access secrets or configuration outside its purpose.
Persistence & Privilege
The skill is not always-enabled and does not modify other skills or system-wide settings. It runs only when invoked.
Assessment
This skill appears coherent and implements exactly what it claims: using Playwright to control Edge/Chromium and return rendered page content as JSON. Before installing, note: (1) SKILL.md requires you to run 'pip install playwright' and 'playwright install chromium' — Playwright will download browser binaries to disk. (2) The script executes pages' JavaScript (headless browser), so visiting untrusted or internal URLs can cause network requests or trigger side effects on the target site; do not use it to fetch internal-only or sensitive endpoints (localhost, internal APIs) unless you understand the risks. (3) The code does not exfiltrate data to external servers beyond returning the page content in stdout/file, but that content could itself contain sensitive data; consider running the skill in a sandboxed environment or with limited network access. (4) The skill source is listed as unknown — if provenance matters, verify the publisher before installing. If you want stronger assurance, ask the publisher for signed releases or run the script in an isolated container and inspect outputs during test runs.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
browservk97392wvyz4cdx69zq9790wve1823hjhchrome-alternativevk97392wvyz4cdx69zq9790wve1823hjhedgevk97392wvyz4cdx69zq9790wve1823hjhlatestvk97392wvyz4cdx69zq9790wve1823hjhplaywrightvk97392wvyz4cdx69zq9790wve1823hjhweb-fetchvk97392wvyz4cdx69zq9790wve1823hjh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Edge Browser Controller

使用 Microsoft Edge 浏览器访问指定 URL 并提取页面内容。

适用场景

  • 用户明确要求使用 Edge 浏览器访问链接
  • Chrome 浏览器工具不可用或连接失败
  • 网页有反爬虫保护,常规抓取工具无法获取内容
  • 页面需要 JavaScript 渲染才能显示完整内容

前置要求

需要安装 Playwright:

pip install playwright
playwright install chromium

使用方法

基本用法

python ~/.openclaw/skills/edge-browser/scripts/fetch.py <URL>

带等待时间(用于动态加载页面)

python ~/.openclaw/skills/edge-browser/scripts/fetch.py <URL> --wait 5

保存到文件

python ~/.openclaw/skills/edge-browser/scripts/fetch.py <URL> --wait 5 --output result.json

输出格式

{
  "url": "https://example.com",
  "title": "Page Title",
  "content": "<html>...</html>",
  "text": "Extracted text content...",
  "status": "success"
}

故障排除

Edge 未找到

如果 Edge 浏览器未在默认位置安装,脚本会自动回退到 Chromium。

页面内容不完整

增加 --wait 时间,等待动态内容加载完成:

python scripts/fetch.py <URL> --wait 10

反爬虫检测

脚本已配置 Edge User-Agent,大多数网站应能正常访问。如遇问题,可能需要额外配置代理或验证码处理。

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…