urlgo

浏览器控制 CLI

Security Scan

The SKILL.md expects a 'urlgo' CLI and access to a browser CDP/websocket, but the skill metadata does not declare any required binaries or install steps — that mismatch and the implicit ability to control a local browser are concerning.

Purpose & Capability

The skill claims to be a browser-control CLI helper and its instructions call the 'urlgo' executable and a browser CDP, which is consistent with the stated purpose — but the registry metadata lists no required binaries or install steps even though SKILL.md lists dependencies (curl, websockets(Python)) and repeatedly instructs running 'urlgo'. That omission is an incoherence: the skill assumes a binary/environment that is not declared.

Instruction Scope

Instructions are narrowly scoped to connecting to CDP, opening pages, taking screenshots, evaluating JS and interacting with page elements. They do not ask for unrelated files or credentials. However, the runtime actions permit executing arbitrary JS and accessing any page the agent opens, which can expose local browser data (cookies, auth) if the CDP is attached to a real profile.

Install Mechanism

This is an instruction-only skill with no install spec (low direct install risk). But SKILL.md lists external dependencies (curl, Python websockets) and assumes a 'urlgo' CLI — there is no guidance on how to obtain/install urlgo, which is an operational gap and increases the risk of confusion or accidental execution of missing/nonstandard binaries.

Credentials

The skill declares no environment variables, which is fine, but it implicitly requires access to the browser CDP endpoint and local websockets. Controlling a browser via CDP grants access to browsing context and stored data; this privileged access is not articulated in the metadata and is therefore disproportionate to the declared requirements.

Persistence & Privilege

The skill does not request persistent/always-on presence and uses normal autonomous-invocation defaults. It does not declare changes to other skills or system settings. Still, autonomous invocation combined with the ability to control a browser increases potential impact and should be considered by the user.

What to consider before installing

Do not install or enable this skill unless you understand and control the 'urlgo' CLI and the browser/CDP it will talk to. Ask the publisher for an explicit install/readme that: (1) states where to get the urlgo binary and how it should be installed, (2) documents required dependencies (curl, Python websockets) and platforms, and (3) explains whether CDP connections will attach to a real browser profile (and thus expose cookies/auth). If you proceed, ensure the CDP endpoint is isolated (no sensitive profiles) and consider disabling autonomous invocation until you verify the binary and behavior.

Domain keywords: https://, http://, www., 浏览器, CDP, 截图, 网页, mp.weixin

Summary: 连 CDP，开网页，截图，执行 JS。

Strategy:

1. urlgo status → CDP 开了没？没开就 urlgo start
2. urlgo open <url> → 打开页面
3. 截图/读取/点击/输入/执行 JS
4. 返回结果

AVOID:

• AVOID 不检查 CDP 就操作，先 status/start
• AVOID 忘装 websockets，截图和 JS 要用它
• AVOID 用 WebFetch 读网页，应该用 urlgo snapshot 代替

---

命令

命令	说明
urlgo status	检查 CDP
urlgo start	启动浏览器
urlgo list	查看页面
urlgo open <url>	打开网页
urlgo screenshot <id> <file>	截图
urlgo snapshot <id>	读取内容
urlgo eval <id> "<js>"	执行 JS
urlgo click <id> "<sel>"	点击
urlgo type <id> "<sel>" "<text>"	输入

示例

urlgo start
urlgo open https://example.com
urlgo snapshot 1
urlgo screenshot 1 /tmp/a.png

依赖

curl, websockets(Python)