by 安全扫描
OpenClaw
安全
high confidenceThis skill is internally consistent: it instructs the agent to call a local browser service at 127.0.0.1:3088 to fetch page text/HTML and requires no extra credentials or installs.
评估建议
This skill expects a trusted local browser service listening at http://127.0.0.1:3088; if you don't run such a service the skill won't work. Before enabling: (1) confirm you actually run and trust a local service on port 3088, (2) verify that service enforces URL restrictions and doesn't allow arbitrary internal-network requests (to avoid SSRF/internal data exposure), and (3) be cautious about allowing autonomous agent invocation — the agent could be instructed to make requests to internal endpo...详细分析 ▾
✓ 用途与能力
The name/description (browse and extract webpage content) match the runtime instructions (POST to a local browser service and extract the 'text' field). No unrelated binaries, env vars, or installs are requested.
ℹ 指令范围
Instructions are narrowly scoped to POSTing a target URL to http://127.0.0.1:3088/browse and extracting the returned text/title/partial HTML. Note: because the skill allows arbitrary target URLs, an agent could be directed to fetch internal/private URLs via the local service (SSRF/internal network access risk) if the local service permits it — this is an operational risk rather than an incoherence with the skill's stated purpose.
✓ 安装机制
No install spec or code is present (instruction-only), so nothing is written to disk or fetched during install.
✓ 凭证需求
The skill declares no environment variables, credentials, or config paths — consistent with its described use of a local HTTP service.
✓ 持久化与权限
always:false and default autonomy settings are present. The skill does not request permanent presence or elevated privileges beyond normal agent invocation.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/11
Initial release of the web browser skill. - Browse and extract content from webpages using a local browser service. - Supports retrieving page title, text, partial HTML, and optional screenshot. - Includes usage instructions with example curl command. - Designed for agents to open webpages, extract text, and browse websites.
● 无害
安装命令 点击复制
官方npx clawhub@latest install pingagi-web
镜像加速npx clawhub@latest install pingagi-web --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制