Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Actionbook

v0.1.1

Activate when the user needs to interact with any website — browser automation, web scraping, screenshots, form filling, UI testing, monitoring, or building AI agents. Provides pre-verified page actions with step-by-step instructions and tested selectors.

0· 2.1k·16 current·17 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for adcentury/actionbook.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Actionbook" (adcentury/actionbook) from ClawHub.
Skill page: https://clawhub.ai/adcentury/actionbook
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install actionbook

ClawHub CLI

Package manager switcher

npx clawhub@latest install actionbook
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (website interaction, scraping, form-filling, UI testing) align with the SKILL.md content: it is a manual for an 'actionbook' CLI that performs browser automation. However, the skill is instruction-only and provides many CLI commands that imply a separate 'actionbook' binary and local profile storage even though the registry metadata lists no required binaries or config paths — a usability/information-gap rather than a direct functionality mismatch.
!
Instruction Scope
The instructions explicitly teach how to log in to sites (including OAuth/SSO), fill credentials from environment variables (e.g., $APP_USERNAME, $GOOGLE_PASSWORD, $SESSION_TOKEN), set cookies, snapshot pages, eval JS, and persist profiles to disk. Those actions access and persist sensitive data and can reach arbitrary page content via eval; while expected for browser automation, the SKILL.md grants broad capability to read/manipulate credentials, cookies, and page data — and it references env vars and disk paths that are not declared in the skill metadata.
Install Mechanism
No install specification or code is included (instruction-only), so nothing is written to disk by the skill itself. This lowers supply-chain risk. Note: the instructions depend on an external 'actionbook' CLI whose provenance is unknown; the skill does not install it.
!
Credentials
The documentation routinely uses sensitive environment variables and tokens (APP_USERNAME, APP_PASSWORD, GOOGLE_PASSWORD, SESSION_TOKEN, ACTIONBOOK_API_KEY) and describes persistent profile directories and cookies, yet the skill metadata declares no required env vars or config paths. That mismatch obscures the fact that using this skill will involve handling secrets and persistent local session data — more sensitive than the metadata implies.
!
Persistence & Privilege
The docs instruct creating and reusing browser profiles (stored under a config path like ~/.config/actionbook/), persisting cookies and sessions, and recommend file-permission changes. The skill metadata does not declare these config paths or persistence behaviors. Persistent sessions increase the blast radius if misused; users should be aware that running the described commands will create long-lived artifacts on disk.
What to consider before installing
This appears to be a coherent manual for a browser-automation CLI, not executable code — but there are important caveats: - Origin: the skill is instruction-only and references an external 'actionbook' CLI with no install provided. Verify the source and obtain the CLI from a trusted publisher before following commands. - Secrets: the docs show using environment variables for usernames, passwords, tokens, and cookies. Do not paste real credentials into example commands; prefer ephemeral credentials or test accounts. Confirm which env vars the agent or host will actually expose before running automation. - Persistence: profiles and cookies are stored on disk (e.g., ~/.config/actionbook/). If you use this, restrict directory permissions, delete profiles when finished, and avoid reusing profiles that contain unrelated account sessions. - Privileged operations: commands like browser eval and cookies set can access arbitrary page data and session tokens — run in an isolated environment or sandbox, especially for unfamiliar sites. - Metadata mismatch: the skill metadata declares no required binaries/credentials/config paths, but the instructions clearly use them. Treat that as a red flag: ask the publisher for clarification about expected local tooling, config locations, and what secrets (if any) you must supply. If you decide to use it: test against non-production/test accounts, run the CLI in a disposable container or VM, and wipe profiles/cookies after use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b4e98t6kgs6dnshazkfdze1812d1c
2.1kdownloads
0stars
2versions
Updated 15h ago
v0.1.1
MIT-0

When to Use This Skill

Activate when the user's request involves interacting with a website:

Activate when the user:

  • Needs to do anything on a website ("Send a LinkedIn message", "Book an Airbnb", "Search Google for...")
  • Asks how to interact with a site ("How do I post a tweet?", "How to apply on LinkedIn?")
  • Wants to fill out forms, click buttons, navigate, search, filter, or browse on a specific site
  • Wants to take a screenshot of a web page or monitor changes
  • Builds browser-based AI agents, web scrapers, or E2E tests for external websites
  • Automates repetitive web tasks (data entry, form submission, content posting)
  • Wants to control their existing Chrome browser (Extension mode)

What Actionbook Provides

Actionbook is a library of pre-verified page interaction data. actionbook search finds actions matching a task description; actionbook get "<ID>" returns a structured document describing a page's purpose, functional capabilities, and DOM structure with inline CSS selectors — eliminating the need for runtime page structure discovery.

search and get

search — Find actions by task description

actionbook search "<query>"                      # Search by task intent
actionbook search "<query>" --domain site.com    # Filter by domain
actionbook search "<query>" --url <url>          # Filter by URL
actionbook search "<query>" -p 2 -s 20           # Pagination

Returns for each result:

  • ID — use with actionbook get "<ID>" to retrieve full details
  • Typepage (full page) or area (page section)
  • Description — page overview and function summary
  • URL — page where this action applies
  • Health Score — selector reliability percentage (0–100%)
  • Updated — last verified date

Constructing an effective search query

The query string is the primary signal for finding the right action. Pack it with the user's full intent — not just a site name or a vague keyword.

Include in the query:

  1. Target site — the website name or domain
  2. Task verb — what the user wants to do (search, book, post, filter, login, compose, etc.)
  3. Object / context — what they're acting on (listings, messages, flights, repositories, etc.)
  4. Specific details — any constraints, filters, or parameters the user mentioned (dates, location, category, language, etc.)

Rule of thumb: Rewrite the user's request as a single descriptive sentence and use that as the query.

User saysBad queryGood query
"Book an Airbnb in Tokyo for next week""airbnb""airbnb search listings Tokyo dates check-in check-out guests"
"Search arXiv for recent NLP papers""arxiv search""arxiv advanced search papers NLP natural language processing recent"
"Send a LinkedIn connection request""linkedin""linkedin send connection request invite someone"
"Post a tweet with an image""twitter post""twitter compose new tweet post with image media attachment"
"Filter GitHub issues by label""github issues""github repository issues filter by label search issues"

When the user provides extra context (e.g., specific dates, a city name, a topic), fold it into the query even if it won't match a stored action literally — it helps the search engine rank relevant pages higher.

# User: "Help me apply for a software engineer job on LinkedIn"
actionbook search "linkedin job search apply software engineer application form"

# User: "I need to search for machine learning papers on arXiv"
actionbook search "arxiv advanced search papers machine learning subject category"

If --domain or --url is known, always add them — they narrow results and improve precision.

get — Retrieve full action details by ID

# Use the ID from search results directly
actionbook get "arxiv.org:/search/advanced:default"

Returns a structured document with:

  1. Page URL — exact URL and query/path parameters
  2. Page Overview — what the page does
  3. Page Function Summary — interactive capabilities (e.g., "Search Term Input", "Subject Classification Filtering")
  4. Page Structure Summary — DOM hierarchy with CSS selectors inline

Selectors appear embedded in the structure description, e.g.:

Search Term Form Section: Contains search term input field (input[type="text"]),
field selector dropdown (select[name="searchtype"]), and submit button (button.Search)

Extract CSS selectors from the structure summary for use with browser commands.

Browser Commands

Quick reference. Full details with all flags and options: command-reference.md.

Navigation

actionbook browser open <url>           # Open URL in new tab
actionbook browser goto <url>           # Navigate current page
actionbook browser back / forward       # History navigation
actionbook browser reload               # Reload page
actionbook browser pages                # List open tabs
actionbook browser switch <page_id>     # Switch tab
actionbook browser close                # Close browser

Interactions

actionbook browser click "<selector>"          # Click element
actionbook browser fill "<selector>" "text"    # Clear and type
actionbook browser type "<selector>" "text"    # Append text
actionbook browser select "<selector>" "value" # Select dropdown option
actionbook browser hover "<selector>"          # Hover
actionbook browser press Enter                 # Press key

Observation

actionbook browser text                        # Full page text
actionbook browser text "<selector>"           # Element text
actionbook browser snapshot                    # Accessibility tree (live page structure)
actionbook browser screenshot                  # Save screenshot
actionbook browser screenshot --full-page      # Full page screenshot
actionbook browser wait "<selector>"           # Wait for element
actionbook browser wait-nav                    # Wait for navigation

actionbook browser close cleans up the browser session. Skip if the user requests the browser remain open.

Examples

User request: "Search arXiv for papers about Neural Networks, search in titles only"

# 1. Search — include the full intent: site + task + subject + filter preference
actionbook search "arxiv advanced search papers neural network title field" --domain arxiv.org

# 2. Get details — read Page Structure Summary for selectors
actionbook get "arxiv.org:/search/advanced:default"
# Response includes: input[type="text"], select[name="searchtype"], button.Search, etc.

# 3. Automate using selectors from the response
actionbook browser open "https://arxiv.org/search/advanced"
actionbook browser fill "input[type='text']" "Neural Network"
actionbook browser select "select[name='searchtype']" "title"
actionbook browser click "button.Search"
actionbook browser wait-nav
actionbook browser text
actionbook browser close

Fallback

Actionbook stores page data captured at indexing time. Websites evolve, so selectors may become outdated.

When a selector from actionbook get fails at runtime, actionbook browser snapshot provides the live accessibility tree with current selectors. Use selectors from the snapshot output to retry the interaction.

Selectors used in browser commands should come from actionbook get or actionbook browser snapshot output in the current session — not from prior knowledge or memory.

If actionbook search returns no results for a page, use snapshot as the primary source, or fall back to other available tools.

References

ReferenceDescription
command-reference.mdComplete command reference with all flags and options
authentication.mdLogin flows, OAuth, 2FA handling, session persistence

Comments

Loading comments...