📦 HTML-to-Selenium — 网页自动化
v2.0.7将任意网页一键解析为可运行的 Python Selenium 脚本，自动识别元素并生成完整自动化代码，支持点击、输入、滚动等操作，零门槛实现网页任务自动化。
0· 135·0 当前·0 累计
by 下载技能包
最后更新
2026/3/26
安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill appears to do what it says (capture a page and generate Selenium scripts), but there are a few things to check before installing or running it:
- Metadata mismatch: the registry claims no env vars required, but the skill and its scripts read ROUTER_USERNAME / ROUTER_PASSWORD (and aliases). Treat that as a warning — verify which env vars the deployed skill will actually read.
- Credentials: do not provide high-privilege or production credentials. If you must test auto-login, use a ...详细分析 ▾
⚠ 用途与能力
The skill's stated purpose (fetch a URL with Playwright, analyze DOM, and generate Selenium code) is coherent with the included code and docs. However the registry metadata at the top claims 'Required env vars: none' / 'Primary credential: none' while SKILL.md, MANIFEST.md and fetch_page.py explicitly reference environment variables (ROUTER_USERNAME / ROUTER_PASSWORD / ROUTER_USER / ROUTER_PASS) and support auto-login. That metadata mismatch is an incoherence that can mislead users about what secrets the skill will access.
⚠ 指令范围
Runtime instructions direct Playwright to capture full page HTML and screenshots and instruct the AI to analyze DOM and extract 'key info' including 'Session Token' if visible. The skill also supports automated login flows (using credentials from CLI, env, or chat) and will attempt to click/submit forms. Those behaviors are consistent with the purpose but broaden the data the agent will touch (rendered HTML, possibly cookies/embedded tokens). The SKILL.md claims 'fetch_page.py does not actively extract or transmit cookies/session' but the AI analysis is allowed to extract data present in the DOM — this is a sensitive-data handling area and the instructions give the agent discretion to extract credentials-like values from page content.
ℹ 安装机制
No install spec in the registry (skill is instruction-only) and all code is bundled locally (no remote downloads). The documentation instructs users to 'pip install playwright selenium' and run 'playwright install chromium' — installing Playwright will download browser binaries. There are no obfuscated or remote download URLs in the bundle, but the skill will require installing packages that themselves download runtime artifacts (Playwright browsers).
⚠ 凭证需求
The code and SKILL.md accept credentials via CLI, chat, or environment variables (ROUTER_USERNAME/ROUTER_PASSWORD and aliases). These env vars are reasonable for an auto-login feature, but the registry claims none are required — a mismatch. The skill's credential-handling behavior is under-specified: it may read env vars automatically (fetch_page.py does so) and will accept credentials provided in chat, which increases risk of accidental exposure of real credentials. The number and naming of env vars is modest and relevant to the stated function, but the metadata inconsistency is a red flag.
✓ 持久化与权限
The skill does not request 'always: true' and does not modify other skills or system-wide settings. It runs locally (Playwright/Selenium) and reads environment variables and writes files (screenshots, html.html, meta.json) into the chosen output directory — these are appropriate for its purpose and properly scoped.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.72026/3/25
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install html-element-to-selenium-automation
镜像加速npx clawhub@latest install html-element-to-selenium-automation --registry https://cn.longxiaskill.com