Kongfz Ankang Search
PassAudited by ClawScan on May 10, 2026.
Overview
The skill appears focused on searching Kongfz auction listings as described, with the main thing to notice being its use of local browser automation.
This appears safe for its stated purpose of searching Kongfz auction results. Before installing, make sure you trust the local xbrowser setup it invokes, and consider using a logged-out or separate browser profile if you do not want it to use any existing Kongfz session.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or invoking the skill can run a local browser-automation command and open Kongfz search pages.
The skill runs a local Node-based xbrowser helper to automate the browser. This is expected for the stated browser-search purpose and does not use shell=True, but it is still local command execution users should notice.
cmd = ["node", XB_PATH] + args ... subprocess.run(cmd, capture_output=True, text=True, timeout=120, encoding='utf-8')
Use it only if you trust the installed xbrowser helper and are comfortable with browser automation for this search task.
The skill may fail or behave differently depending on the local xbrowser installation, which is outside the provided skill files.
The skill relies on an external local xbrowser script at a hard-coded path, while the registry shows no install spec or required binaries. This appears purpose-aligned but under-declared.
node "C:\Program Files\QClaw\resources\openclaw\config\skills\xbrowser\scripts\xb.cjs" init
Confirm that xbrowser and Node are installed from a trusted source before using the skill.
If you are logged into Kongfz in the automated browser, searches may occur under that session, though the artifacts do not show bidding, purchasing, or account changes.
The reference material notes that some functionality may use a logged-in Kongfz session. The provided script only performs public search, but browser automation could run in a browser profile that has existing site cookies.
Cookie/登录：某些功能可能需要登录，建议先手动登录
Use a separate or logged-out browser profile if you do not want the skill operating with your Kongfz session.