📦 Seo Scout Pro — 网站表单探测
v1.0.0一键扫描任意网站，自动发现提交表单、识别登录验证、检测验证码，为SEO与自动化填表提供精准入口。
0· 96·1 当前·1 累计
by 下载技能包
最后更新
2026/3/24
安全扫描
OpenClaw
可疑
medium confidenceThe skill's functionality (form discovery and automated submissions) generally matches its description, but it contains evasive 'anti-detect' automation guidance and references runtime tools (Node/Playwright, python3, curl, browsers) without declaring dependencies or install steps — these mismatches and the evasion guidance are concerning.
评估建议
This skill appears to do what it says (find and analyze submission forms and provide automation templates), but there are important caveats: 1) It expects runtime tools (node, Playwright/rebrowser, python3, curl, a browser) that are not declared — verify and install these from trusted sources before running. 2) The SKILL.md contains explicit 'anti-detect' and automation guidance that can be used to evade protections; consider the legal and terms-of-service implications of automating submissions ...详细分析 ▾
⚠ 用途与能力
The SKILL.md and script.sh focus on discovering submission pages and automating form submissions (including adapter templates that use a headless browser). That matches the name/description. However, the skill does not declare required binaries or dependencies even though it repeatedly references node, python3, curl, and browser-based automation (Playwright/rebrowser). The absence of declared runtime requirements is an incoherence: someone building this would legitimately need those dependencies.
⚠ 指令范围
Runtime instructions include automatic crawling, form filling, OAuth automation strategies, CAPTCHA detection, Cloudflare challenge heuristics, and an explicit 'anti-detect' (browser stealth) guide. While these fall under the stated purpose (automating submissions), the guidance for stealth/anti-detection and automated handling of auth flows increases misuse risk (spam/abuse/credential automation). The instructions also advise storing credentials in config.yaml and discuss automating OAuth flows — the skill does not constrain or clarify how credentials are handled or protected.
ℹ 安装机制
No install specification is provided (instruction-only), which minimizes direct install risk. However, the provided files and templates assume additional tooling (Node, Playwright/rebrowser, python3, curl). The skill ships a script.sh (documentation/usage) but has no install steps to obtain Playwright/browser binaries; this mismatch is noteworthy because runtime will fail or prompt arbitrary installs if the agent attempts to execute those commands.
ℹ 凭证需求
The skill declares no required environment variables or credentials. The SKILL.md, however, instructs storing account credentials in config files and discusses OAuth and magic links — which implies the operator will supply sensitive data. The skill does not request or document how to store or protect such secrets, nor does it provide environment variable usage, creating a gap between expected secret handling and declared requirements.
✓ 持久化与权限
The skill is not force-enabled (always: false) and uses normal autonomous invocation settings. It does not request persistent system-wide configuration or attempt to modify other skills. No privilege escalation indicators were found in metadata.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
Initial release - website submit page discovery tool
● 无害
安装命令
点击复制官方npx clawhub@latest install seo-scout-pro
镜像加速npx clawhub@latest install seo-scout-pro --registry https://cn.longxiaskill.com