📦 Open Chrome Tabs — 读取浏览器标签
v1.1.1一键读取 Chrome 及 Arc、Brave、Edge 等 Chromium 系浏览器当前打开的标签页，快速获取用户已访问的 URL 列表，方便后续跳转、整理或分析。
0· 722·1 当前·1 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceThe skill's actions (reading Chrome/Chromium profile and session/sync files) match its description; the main risk is that it instructs the agent to run an external npm package (npx/@mindsocket/chrome-open-tabs) which will access local browser data and should be vetted before use.
评估建议
This skill appears internally consistent: it needs to read browser profile files to list tabs and instructs you to run an npm package that does that work. Before installing or running it, verify the npm package's source (review its GitHub repo, publisher identity, and recent releases), consider running it in a sandbox or limited environment, and be aware it will access potentially sensitive URLs (including synced devices). If you don't trust the package or cannot review its code, avoid running `...详细分析 ▾
✓ 用途与能力
Name and description (listing currently open Chrome/Chromium tabs, including synced devices) align with the instructions: the SKILL.md shows exactly how to read Chrome user-data, session files, or sync LevelDB to enumerate tabs.
✓ 指令范围
Instructions are limited to installing/running @mindsocket/chrome-open-tabs and reading browser User Data directories, session files, or Chrome sync LevelDB. These file accesses are expected for the declared purpose, but they do involve reading potentially sensitive browsing history and synced-device data.
ℹ 安装机制
No install spec in registry, but SKILL.md tells the agent to run `npm install -g` or `npx @mindsocket/chrome-open-tabs`. Running an npm package via npx is a moderate-risk install mechanism because it executes third-party code fetched from the npm registry; users should verify the package source before running.
✓ 凭证需求
The skill declares no environment variables, credentials, or unrelated config paths. The accesses requested in the instructions (browser user-data and session/sync files) are proportionate to the stated function of enumerating open tabs, though they expose sensitive personal data.
✓ 持久化与权限
The skill does not request persistent presence (always: false) nor system-wide changes. It does not attempt to modify other skills or agent configs in the provided instructions.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.12026/2/22
- Improved documentation for usage with Chrome and Chromium-based browsers (Arc, Brave, Edge, etc.) - Clarified command options and typical workflows, including device and profile selection - Provided detailed instructions and examples for retrieving open tabs and working with synced devices - Documented fallback behavior when sync data isn’t available or browser is running
● 可疑
安装命令
点击复制官方npx clawhub@latest install open-chrome-tabs
镜像加速npx clawhub@latest install open-chrome-tabs --registry https://cn.longxiaskill.com