Tool Connector

This skill is coherent with its purpose (it needs tokens and Playwright to capture SSO), but it carries notable risks you should evaluate before installing: - Review the included scripts (especially scripts/shared_utils/playwright_sso.py and scripts/openclaw_sync.py) yourself. The SKILL.md explicitly tells you to do this — do it. Look for any network calls to external hosts, telemetry, or hidden uploads. - Minimize privileges: use short-lived or scoped tokens where possible. Avoid giving long-lived admin tokens; create tokens with read-only scopes needed for the agent's tasks. - Isolate runtime: consider running this skill in an isolated environment (throwaway VM, container, or separate user account) rather than your primary workstation, since it captures browser session data and writes plaintext files. - Protect stored secrets: if you proceed, ensure ~/.openclaw/openclaw.json and ~/.openclaw/tool-connector.env have strict filesystem permissions (owner-only) and are not backed up to cloud services or included in repos. - Confirm 'everything stays local': search the scripts for any network POST/PUT targets that are not the expected tool endpoints. If you see any calls to unexpected URLs, do not run the skill. - Consider alternatives: prefer built-in OAuth or short-lived app tokens if your organization permits them, or use ephemeral credentials created specifically for agent use that can be revoked quickly. If you want, paste the contents of scripts/shared_utils/playwright_sso.py and scripts/openclaw_sync.py here and I will inspect them for external endpoints, obfuscated behavior, or obvious exfiltration.