by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears internally consistent and focused on Selenium-based browser automation, but take these precautions before installing or using it: 1) Review any Python script the agent generates before granting permission to run it — the SKILL.md correctly requires explicit approval. 2) Do not provide site credentials, API keys, or other secrets to the agent unless you trust the execution environment; automated scripts can access any page content and could capture sensitive data. 3) Ensure Chr...详细分析 ▾
✓ 用途与能力
The name and description match the instructions: SKILL.md teaches Python + Selenium usage and lists the expected system/python dependencies (python3, chromedriver, google-chrome, selenium). The frontmatter permission requirements (exec, write) align with a skill that writes scripts and may run them after user approval.
ℹ 指令范围
The runtime instructions stay on-topic (creating scripts, navigation, screenshots, JS execution, closing the browser). The SKILL.md explicitly instructs the agent NOT to run scripts without user approval and to only use exec after explicit consent — a deliberate safety measure. One notable capability: examples include driver.execute_script (JavaScript injection) which is a normal automation tool but can be used to read/modify page DOM and could be misused to collect or exfiltrate sensitive page data if a generated script sends that data elsewhere; the skill itself does not instruct exfiltration.
✓ 安装机制
This is an instruction-only skill; the only install guidance inside the frontmatter is a pip install selenium line. There are no downloads from arbitrary URLs or archive extraction. The skill assumes the user or environment supplies Chrome/ChromeDriver; it does not attempt to fetch them itself.
✓ 凭证需求
The skill requests no environment variables or external credentials. It does request exec and write permissions (to create and optionally run scripts), which are proportionate for a tool that generates and executes automation scripts.
✓ 持久化与权限
always is false and the skill is user-invocable. The skill's required capabilities (exec, write) allow writing and running scripts but it does not request elevated persistent presence or modify other skills or system-wide configuration. Autonomous invocation is possible per platform defaults, but there are no additional privileges requested that would materially increase risk.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.12026/3/3
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install selenium-browser-skill
镜像加速npx clawhub@latest install selenium-browser-skill --registry https://cn.longxiaskill.com