by 安全扫描
OpenClaw
可疑
medium confidenceThe skill is internally coherent as a browser-automation wrapper, but its runtime instructions direct use of a remote CLI (curl | sh installer) and the workflows/templates encourage extracting cookies, uploading local files, recording video, and sending page content — all of which can expose sensitive data to the remote service; those facts and the remote install step are disproportionate risks that users should understand before installing.
评估建议
This skill appears to be a legitimate browser-automation wrapper, but take these precautions before installing or using it:
- Understand remote execution: The instructions use the infsh CLI to run sessions on inference.sh — page content, cookies, screenshots, recorded video, and any files you upload will be sent to that service. Do not use it with accounts or pages that contain secrets you cannot share.
- Avoid piping unknown installers into sh: The Quick Start recommends curl | sh from cli.inf...详细分析 ▾
✓ 用途与能力
Name/description match the provided assets: the SKILL.md, command reference, and templates all implement a Playwright-style browser automation flow (open, snapshot, interact, screenshot, execute, close), proxies, file upload, video, and session management. The scripts and examples are consistent with a web-automation/scraping/browser-automation tool.
⚠ 指令范围
SKILL.md and the templates instruct callers to install and use the external infsh CLI and to run commands that will (by design) fetch page HTML/text, execute arbitrary JS, extract cookies, upload local files, and request session video. Those instructions do not restrict or warn strongly enough that page content, cookies, uploaded files, or recorded video will be transmitted to the inference.sh service. The templates show workflows that handle credentials, TOTP, and cookie extraction (including examples to put passwords into env vars and to extract cookies), which increases the chance of sensitive data being exposed to the remote service or being stored in its sessions.
⚠ 安装机制
There is no install spec in the skill bundle, but the Quick Start explicitly tells users/agents to run a remote installer: curl -fsSL https://cli.inference.sh | sh and to download binaries from dist.inference.sh. 'curl | sh' is a high-risk pattern because it executes a remote script. The domains used (cli.inference.sh, dist.inference.sh) are not standard well-known installer hosts like GitHub releases; while checksums are referenced, the installer pattern and remote binary download are notable risks and deserve manual verification before use.
ℹ 凭证需求
The registry metadata declares no required environment variables or credentials, which is accurate for the skill package itself. However the included templates and references routinely show using environment variables for APP_USERNAME, APP_PASSWORD, TOTP secrets, proxy usernames/passwords, and passing local file paths (for upload). Those examples imply the skill will accept and transmit sensitive secrets and local files to the remote inference.sh service if provided — this is proportionate to a remote browser automation service but users should be aware that sensitive env vars and local files may leave their machine.
ℹ 持久化与权限
The skill does not request 'always: true' and has no special platform privileges; autonomous invocation is allowed but that is the platform default. The real-world risk is that if the agent invokes this skill autonomously it could perform remote browser sessions and transmit data without the user noticing — combine autonomous invocation with the ability to capture cookies, page content, files, and video and the blast radius increases. There is no evidence the skill modifies other skills or system-level config.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.52026/2/6
- Initial release of agent-browser v0.1.5. - Provides browser automation for AI agents via inference.sh, with Playwright backend. - Supports navigation, web interaction (click, fill, upload, drag/drop), screenshots, and video recording. - Element referencing via simple `@e` system; elements must be re-snapshotted after navigation. - Features include proxy support, JavaScript execution, cursor highlights, file upload, and session management.
● 可疑
安装命令
点击复制官方npx clawhub@latest install agentic-browser
镜像加速npx clawhub@latest install agentic-browser --registry https://cn.longxiaskill.com