← Back to Skills Marketplace
22143
Downloads
17
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install ai-web-automation
Description
Automate web tasks like form filling, data scraping, testing, monitoring, and scheduled jobs with multi-browser support and retry mechanisms.
Usage Guidance
Install only if you are comfortable with the skill making outbound web requests from your agent environment. Use it only for authorized targets, avoid internal/private/metadata URLs, and review or add URL allowlisting, redirect validation, rate limits, and confirmation for any future scheduled, proxy, or submission features.
Capability Analysis
Type: OpenClaw Skill
Name: ai-web-automation
Version: 1.0.0
The skill bundle is classified as suspicious due to a Server-Side Request Forgery (SSRF) vulnerability in `main.py`. The script directly uses user-provided URLs from `sys.argv` in `requests.get()` without validation, potentially allowing an attacker to force the agent to make requests to internal network resources or sensitive endpoints. While the `SKILL.md` describes high-risk capabilities like scheduled tasks and proxy support, the immediate and concrete vulnerability lies in the `main.py`'s handling of the `url` parameter for web scraping.
Capability Assessment
Credentials
main.py accepts an arbitrary URL and calls requests.get with redirects enabled and no scheme, host, IP range, port, or redirect validation; that is broader network reach than a safely scoped scraper needs.
Install Mechanism
No install script, dependency installation, remote payload retrieval, or tool replacement behavior was found in the inspected package metadata.
Instruction Scope
The instructions advertise scraping, scheduled tasks, automated submissions, proxy pool support, and notifications without documented authorization, rate-limit, robots/ToS, privacy, or confirmation guardrails.
Persistence & Privilege
The code creates an artifact/output report directory and writes scrape reports, but no cross-session service, scheduled task, privilege escalation, memory modification, or background persistence was found in code.
Purpose & Capability
The stated purpose is web automation and scraping; the actual runtime implementation only supports a scrape action that fetches a URL, extracts limited page metadata, and writes a local Markdown report.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ai-web-automation - After installation, invoke the skill by name or use
/ai-web-automation - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is AI Web Automation?
Automate web tasks like form filling, data scraping, testing, monitoring, and scheduled jobs with multi-browser support and retry mechanisms. It is an AI Agent Skill for Claude Code / OpenClaw, with 22143 downloads so far.
How do I install AI Web Automation?
Run "/install ai-web-automation" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is AI Web Automation free?
Yes, AI Web Automation is completely free (open-source). You can download, install and use it at no cost.
Which platforms does AI Web Automation support?
AI Web Automation is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created AI Web Automation?
It is built and maintained by ZhangYang (@arthasking123); the current version is v1.0.0.
More Skills