by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill is mostly coherent but exercise caution before running it. Things to consider:
- Playwright will download and run a browser on your machine; ensure you trust the environment where you run it.
- The script opens a browser and requires you to manually log into your ChatGPT account; contrary to the README, logins will not persist unless you modify the script to use a persistent user data directory (launchPersistentContext or userDataDir). If you want persistent sessions, add that intenti...详细分析 ▾
ℹ 用途与能力
The code and SKILL.md align: both automate a browser with Playwright, send prompts, and save images. However, SKILL.md claims the login session is saved for future runs while the script launches Chromium without a persistent user data directory (so logins will not persist by default). The script also navigates to https://chatgpt.com/ rather than the commonly used chat.openai.com — this could be benign but is worth verifying.
✓ 指令范围
Instructions and code stay within the stated purpose: they read a prompts file, open a browser, interact with the ChatGPT web UI, extract or fetch generated images, write numbered PNGs and a results.jsonl log, and prompt the user to press Enter after a manual login. The code does not reference unrelated files or extra environment variables.
✓ 安装机制
No install spec in the registry; SKILL.md asks you to run 'npm install playwright' and 'npx playwright install chromium', which is normal for a Playwright-based script. That will download browser binaries to the machine — expected but noteworthy.
✓ 凭证需求
The skill requests no environment variables or credentials. It performs browser automation and network requests only, which are proportionate to the stated functionality.
ℹ 持久化与权限
The skill is not always-enabled and does not request elevated privileges. However, the SKILL.md's claim that the session is saved across runs contradicts the code (no userDataDir/persistent profile is used). If you expect persistent login, the script must be changed to launch a persistent context or provide a user data directory.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/3/4
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install chatgpt-image-generation
镜像加速npx clawhub@latest install chatgpt-image-generation --registry https://cn.longxiaskill.com