by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is an instructions-only adapter for a BrowserWing Executor HTTP service — it is internally coherent. Before installing, verify: (1) what BROWSERWING_EXECUTOR_URL will point to (default is localhost:8080; if you set it to a remote server you are trusting that server with any page operations and data the skill sends), (2) whether an API key or bearer token is required and only provide it to a trusted executor, and (3) that the metadata mismatch (registry shows no required env, SKILL.md ...详细分析 ▾
✓ 用途与能力
The SKILL.md describes a browser automation HTTP API and all runtime instructions are about calling that API (navigate, click, extract, snapshot). The declared/used environment variable (BROWSERWING_EXECUTOR_URL) and optional auth headers are consistent with an HTTP executor integration.
✓ 指令范围
Instructions stay within the skill's scope: they tell the agent how to discover commands, take snapshots, run operations, and use a base URL. There are no instructions to read unrelated system files, other credentials, or to exfiltrate data to unexpected endpoints beyond the configured executor URL.
✓ 安装机制
No install spec or code files — instruction-only skill. Nothing is downloaded or written to disk by the skill itself.
ℹ 凭证需求
The SKILL.md uses/mentions one environment variable (BROWSERWING_EXECUTOR_URL) and optional API headers — proportionate to an HTTP API integration. Note: registry metadata in the package summary reported 'required env vars: none' while the SKILL.md metadata and instructions expect BROWSERWING_EXECUTOR_URL (with a localhost fallback). This is a minor metadata mismatch to be aware of.
✓ 持久化与权限
The skill does not request permanent presence (always=false) and contains no install or self-modifying behavior. It can be invoked by the model, which is the platform default.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/3
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install browserwing
镜像加速npx clawhub@latest install browserwing --registry https://cn.longxiaskill.com