Page Agent Claw Controller

v0.1.1

通过本地 page-agent 服务(运行在 http://localhost:4222)执行浏览器自动化任务。当用户指令中包含 "page-agent" 或需要调用本地浏览器时使用,该服务可以打开网页、执行页面操作、提取信息等。

1· 348·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name and description match the behavior in SKILL.md: it expects a local page-agent service at http://localhost:4222 and instructs using npm/node to install/run it and curl to call its HTTP API. Requested binaries (node, npm, curl) and the Chrome extension requirement are reasonable for a browser-automation controller.
Instruction Scope
Instructions are narrowly scoped to checking a local HTTP health/status endpoint, starting a local 'page-agent-claw' binary, and POSTing tasks to /api/task. They do not instruct reading system files, environment secrets, or contacting third-party endpoints from the agent itself. However, submitted tasks will cause the local agent/browser to load external web pages (user-provided URLs), which may lead to network activity from the browser; avoid including sensitive secrets in task payloads.
Install Mechanism
This is an instruction-only skill with no automated install spec (lowest platform risk). The SKILL.md recommends 'npm install -g page-agent-claw' and installing a Chrome extension; installing third-party npm packages or browser extensions is an external action with its own risk. The skill does not itself download or execute code automatically, but users should verify the npm package and extension provenance before installing.
Credentials
The skill declares no environment variables, no credentials, and no config paths. That aligns with its purpose of controlling a local service via HTTP; it does not request unnecessary secrets or system configuration.
Persistence & Privilege
always is false and the skill is user-invocable with normal autonomous invocation allowed. This is the platform default and appropriate for a skill that may be called when browser automation is needed. There is no indication it tries to modify other skills or persist beyond normal use.
Assessment
This skill appears internally consistent for controlling a local page-agent service, but before installing or running anything you should: 1) verify the npm package 'page-agent-claw' and the Chrome extension come from a trusted source (review the GitHub repo and package publisher), 2) avoid sending any passwords, API keys, or other secrets in task text because the agent/browser will open remote pages, 3) install the npm package and extension in a controlled environment (or inspect their code) if you are concerned, and 4) be aware that allowing autonomous invocation lets the agent call the local service without an extra prompt—disable autonomous use if you want manual control.

Like a lobster shell, security has layers — review code before you run it.

latestvk976z8rvzpxq7zn4q4tk6eys1582z7rs

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🕸️ Clawdis
OSLinux · macOS · Windows
Binsnpm, node, curl

Comments