by 安全扫描
OpenClaw
安全
medium confidenceThe skill's requested capabilities align with its stated purpose (auto-filling web forms), but it requires access to the user's browser session and references saved profiles without describing storage/protection — a privacy-sensitive capability you should treat carefully.
评估建议
This skill appears to do what it says (automatically fill web forms) but it needs access to your browser session and may store form profiles. Before installing or using it: 1) Only use it on trusted sites — autofill will operate with your logged-in session and could submit sensitive data. 2) Ask the publisher (or inspect the full SKILL.md) how saved profiles are stored, encrypted, and deleted; avoid saving highly sensitive items (passwords, SSNs) in profiles. 3) Prefer invoking it manually rathe...详细分析 ▾
ℹ 用途与能力
The skill is a universal form autofill and the SKILL.md uses browser automation and simple field-matching logic; these requirements are coherent with the description. It declares python3 and needsBrowser: true in metadata (python3 plausibly used for the matching helper function, and browser access is required to operate). The only mismatch is marketing wording like "Works with any web form" (overbroad claim) but nothing else appears unrelated to the stated purpose.
⚠ 指令范围
The instructions explicitly state the skill will access the browser session / existing login state and run injected JS in arbitrary pages to detect and fill fields — this is necessary for autofill but is high-risk because it implicitly has access to cookies, auth tokens, and other sensitive page DOM. The SKILL.md also says "use saved profile from previous sessions" but does not specify where/how profiles are stored or protected, which raises concerns about persistent storage of user data. The provided runtime steps do not show any explicit external exfiltration, but a full review of the truncated portion is needed to ensure no hidden external endpoints or uploads are present.
✓ 安装机制
Instruction-only skill with no install spec and no code files beyond SKILL.md — lowest install risk. Nothing is downloaded or written to disk by an installer in the manifest.
ℹ 凭证需求
The skill requests no environment variables or external credentials, which is proportionate. However, it requires access to the browser session (declared via needsBrowser), which is a legitimate need for a form-filling tool but is sensitive: browser profiles can contain cookies and tokens for unrelated services. The skill's use of saved profiles is not justified with storage details.
ℹ 持久化与权限
The skill is not always-enabled and is user-invocable; model invocation is allowed (platform default). It does not request elevated platform privileges in the manifest. Still, because it interacts with the browser session and mentions saved profiles, check how/where any persisted profile data would be stored and who can access it.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
通用表单自动填写工具：利用OpenClaw v2026.3.22浏览器自动化，支持求职表、报名表、问卷等
● 无害
安装命令
点击复制官方npx clawhub@latest install form-auto
镜像加速npx clawhub@latest install form-auto --registry https://cn.longxiaskill.com