by 安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and instructions are consistent with a simple webpage-screenshot helper that uses Puppeteer; nothing in the package or SKILL.md requests unrelated credentials or hidden behavior.
评估建议
This skill is coherent for taking webpage screenshots with Puppeteer, but before installing or running it: (1) correct and review the example code (it has syntax errors) and test in a safe environment; (2) be prepared for Puppeteer to download a Chromium binary (network download, disk usage, native code execution); (3) avoid passing sensitive pages or credentials to the tool unless you trust the runtime and code; and (4) only install packages from the official npm registry and verify they are th...详细分析 ▾
✓ 用途与能力
Name and description match the instructions: SKILL.md tells the agent to install and use Puppeteer to capture web page screenshots. The included package.json is minimal but not contradictory. The skill does not request unrelated tools or credentials.
ℹ 指令范围
Instructions stay on-topic (install Node/npm, npm install puppeteer, run Puppeteer to screenshot a URL). The example code in SKILL.md contains syntax errors (missing quotes and incorrect require usage) and is not parameterized; it should be corrected before execution. The instructions do not direct the agent to read unrelated files, environment variables, or post data to external endpoints beyond loading the target web page.
ℹ 安装机制
This is an instruction-only skill (no install spec). The SKILL.md recommends installing puppeteer via npm, which is an expected mechanism. Be aware Puppeteer normally downloads a Chromium binary at install/run time (large network download and native binary execution). No downloads from unusual or untrusted URLs are recommended in the SKILL.md.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. This is proportionate for a screenshot tool. Note: capturing authenticated pages would require credentials, but the skill does not request or handle any secrets.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated or persistent platform privileges. It does not modify other skills' configuration or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/18
Initial release for webpage screenshot functionality: - Provides instructions and sample code to capture screenshots of specified web pages. - Requires Node.js and Puppeteer for operation. - Includes setup steps and usage guidance in Chinese.
● 无害
安装命令 点击复制
官方npx clawhub@latest install webpage-screenshot-new
镜像加速npx clawhub@latest install webpage-screenshot-new --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制