osm-ai-bridge

OSM AI Bridge - OpenClaw多AI协作桥接器。通过CDP连接浏览器，支持自动启动、反检测脚本注入、Cookie/LocalStorage访问。实现Ask/Discuss/Verify三种协作模式。

Security Scan

The code and runtime instructions match the description: it connects to a local browser via CDP, can start Edge on Windows, injects anti-detection scripts, and reads cookies/localStorage — these behaviors are coherent with the skill's stated purpose but are privacy-sensitive.

Purpose & Capability

Name/description (CDP connect, auto-start, anti-detection, storage access) align with the included Python scripts and SKILL.md. The skill creates ~/.openclaw/ai_bridge for logs/profile and targets doubao/gemini as advertised. No unrelated external credentials or services are requested.

Instruction Scope

SKILL.md tells the agent/user to run the provided python script and to install playwright/aiohttp; the scripts perform exactly what's described (connect_over_cdp, start Edge if needed, inject scripts, read cookies/localStorage, navigate pages, extract text). Note: the anti-detection scripts and storage access are explicit and therefore grant the skill the ability to access sensitive authentication data from the browser.

Install Mechanism

No installer or external downloads are specified; the skill is instruction+source-file only. Dependencies are standard Python packages (playwright, aiohttp). There is no opaque URL download or archive extraction in the manifest.

Credentials

No environment variables or external credentials are requested (proportionate), but the skill legitimately reads cookies and localStorage and may reuse a logged-in browser session. Access to these storage items can expose authentication tokens and session data — this is expected for the stated use but is high-risk for privacy and account security.

Persistence & Privilege

always is false and the skill does not modify other skills or global agent configs. It creates and writes logs and a debug profile under ~/.openclaw/ai_bridge and may create a browser user-data-dir there if it auto-launches Edge — this is self-contained and explained in the docs.

Assessment

This skill appears to do what it says, but it has sensitive capabilities: it injects anti-detection JS and reads cookies/localStorage from your browser. Before installing or running it, consider: (1) only run it if you trust the author and source code; (2) do not use it against sites where automation or anti-detection bypassing would violate terms of service; (3) run it against a separate/testing browser profile (or VM) rather than your primary logged-in profile to avoid leaking session tokens; (4) inspect the scripts yourself (they are included) and consider instrumenting network monitoring to ensure no data is exfiltrated; (5) ensure playwright and dependencies are installed from official sources. If you need higher assurance, run the skill in a sandbox or ephemeral environment and/or request the skill author to provide reproducible builds and code provenance.

功能

• CDP连接 - 通过Chrome DevTools Protocol连接浏览器
• 自动启动 - 浏览器未运行时自动启动带调试端口的实例
• 反检测 - 注入脚本隐藏webdriver特征
• Storage访问 - 访问Cookie和LocalStorage
• 生产级日志 - 完整日志记录到 ~/.openclaw/ai_bridge/ai_bridge.log

使用方法

python scripts/osm_ai_bridge.py "你的问题"

系统要求

• Windows (自动启动功能仅支持 Windows + Edge)
• Linux/Mac 需要手动启动浏览器: edge --remote-debugging-port=9222

技术实现

自动启动浏览器

# 检查CDP端口，如不可用则自动启动Edge
if not await self._check_cdp_available():
    await self._start_browser_with_debugging()

反检测脚本

// 隐藏webdriver
Object.defineProperty(navigator, 'webdriver', { get: () => undefined });

// 模拟插件
Object.defineProperty(navigator, 'plugins', { get: () => [...] });

Cookie/LocalStorage访问

cookies = await self.context.cookies()
local_storage = await self.page.evaluate('() => { ... }')

日志

日志文件位置：~/.openclaw/ai_bridge/ai_bridge.log

限制

• Windows 仅 - 自动启动功能仅支持 Windows + Edge
• 其他系统需手动启动浏览器并开启调试端口
• 需要 Playwright: pip install playwright aiohttp
• 首次使用需在浏览器中手动登录
• 需要依赖: pip install playwright aiohttp