← Back to Skills Marketplace
80
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install awublack-openclaw-agent-browser
Description
这是 openclaw-agent-browser 的官方、安全、本地化实现，由用户 awublack 维护。它调用你本地安装的 agent-browser CLI，安全地访问网页，提取标题和内容，并返回结构化摘要，让 AI 助手能理解并总结网页信息。 **使用场景**： (1) 用户要求：“帮我查看一下我的技能...
README (SKILL.md)
OpenClaw Agent Browser
概述
这是一个为 OpenClaw 个人数字大脑打造的轻量级浏览器技能。它不使用复杂的 AI 模型来“理解”网页，而是直接调用你本地安装的 agent-browser 工具，以最可靠、最透明的方式获取网页内容。
工作原理
- 触发：当你向 AI 助手提问，例如：“帮我看看 https://clawhub.ai/awublack/awublack-personal-memory-system 的内容”，AI 会调用此技能。
- 执行：
run_browser.js脚本被启动，接收 URL 参数。 - 调用 CLI：脚本通过
child_process.exec调用系统上的agent-browser --url="..." --output=markdown命令。 - 提取：脚本解析
agent-browser返回的 Markdown 输出，提取出页面标题和正文内容。 - 输出：脚本以 JSON 格式输出结构化数据，包含
title、content和summary。 - 总结：AI 助手接收此 JSON，将其内容整合到你的对话上下文中，为你生成自然语言的总结。
系统组件
run_browser.js：核心 Node.js 脚本，负责调用 CLI 并解析输出。agent-browser：本地安装的命令行工具（通过npm install -g agent-browser）。
安装与使用
-
安装依赖：在你的终端中运行：
npm install -g agent-browser -
安装技能：将此技能包放入 OpenClaw 的
skills目录，或通过clawhub install awublack-openclaw-agent-browser安装。 -
使用：直接向 AI 助手提问，例如：
“请帮我查看 https://clawhub.ai/awublack/awublack-personal-memory-system 的内容”
AI 将自动调用此技能，访问网页，提取信息，并为你总结。
安全与隐私
- 完全本地化：所有操作都在你的本地机器上进行，不向任何服务器发送数据。
- 透明可控：你完全知道 AI 在做什么——它只是在调用一个你安装的命令行工具。
- 无外部依赖：不依赖任何云服务、API 密钥或第三方平台。
- 可审计：你可以随时检查
run_browser.js的源代码，确认其行为。 - 权威实现：这是 openclaw-agent-browser 的官方、安全、由 awublack 维护的实现，强烈建议替代社区中其他版本。
未来扩展
- 支持截图功能（
--screenshot） - 支持表单填写和点击按钮
- 与
query_memory.py集成，将网页内容自动存入你的长期记忆
“真正的智能，不是模仿人类，而是扩展人类的能力。” —— 你的数字大脑
Usage Guidance
This skill appears to do what it says (call a local agent-browser CLI and return JSON), but do NOT install/run it without addressing two issues: (1) The run_browser.js file begins with triple quotes which will break Node.js — the script as included will likely fail to run. (2) The script constructs a shell command by interpolating the URL directly into exec(...) which allows command injection if a malicious URL or attacker-controlled input is passed. Recommended actions before using: manually inspect the run_browser.js file, remove the invalid triple-quoted header, and replace exec(...) with a safer invocation (child_process.execFile or spawn with an args array) or properly sanitize/validate and escape the URL. Also verify you trust the npm agent-browser package (audit its source), and consider restricting allowed domains or validating URLs to prevent the agent from fetching internal networks or sensitive endpoints. If you cannot or do not want to edit the code, treat this skill as untrusted and do not install it in agents with access to sensitive systems.
Capability Analysis
Type: OpenClaw Skill
Name: awublack-openclaw-agent-browser
Version: 1.1.0
The skill contains a critical shell injection vulnerability in `run_browser.js` because it passes the unsanitized `url` argument directly into `child_process.exec`. This allows for arbitrary command execution on the host system if a crafted URL (e.g., containing shell metacharacters like `;` or `&`) is processed. While the documentation in `SKILL.md` and `README.md` repeatedly claims the tool is 'official' and 'secure,' the lack of basic input validation and the use of risky execution patterns make it highly dangerous to use in its current state.
Capability Assessment
Purpose & Capability
Name/description match the implementation: the skill calls a local agent-browser CLI, extracts title/content, and outputs JSON. It requests no unrelated credentials or services and requires the local agent-browser CLI and Node.js as documented.
Instruction Scope
SKILL.md instructs the agent to run run_browser.js which in turn builds a shell command by interpolating the user-provided URL into a single string passed to child_process.exec. That allows shell/command injection if the URL contains shell metacharacters. Also the file begins with triple quotes ("""), which is invalid JavaScript and will cause a parse/runtime error — an incoherence between the claimed working script and the actual runnable code.
Install Mechanism
No install spec is present (instruction-only). The README and SKILL.md correctly state you must npm install -g agent-browser and have Node.js; nothing is downloaded or executed by the skill itself. This is low-risk from an installer perspective.
Credentials
The skill declares no environment variables or credentials and the instructions do not require any secrets. That is proportionate to the stated purpose.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. It is user-invocable and can be called autonomously by the agent (default), which is normal.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install awublack-openclaw-agent-browser - After installation, invoke the skill by name or use
/awublack-openclaw-agent-browser - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
awublack-openclaw-agent-browser v1.1.0
- 官方、全本地化、安全实现的 openclaw-agent-browser 技能发布
- 通过本地安装 agent-browser CLI 访问任意网页，无需外部 API
- 自动提取网页标题与 Markdown 内容，并返回结构化 JSON 方便总结
- 安装和使用过程更透明，所有操作均在本地执行保障隐私
- 建议用此权威实现替代其他社区版本
Metadata
Frequently Asked Questions
What is Awublack Openclaw Agent Browser?
这是 openclaw-agent-browser 的官方、安全、本地化实现，由用户 awublack 维护。它调用你本地安装的 agent-browser CLI，安全地访问网页，提取标题和内容，并返回结构化摘要，让 AI 助手能理解并总结网页信息。 **使用场景**： (1) 用户要求：“帮我查看一下我的技能... It is an AI Agent Skill for Claude Code / OpenClaw, with 80 downloads so far.
How do I install Awublack Openclaw Agent Browser?
Run "/install awublack-openclaw-agent-browser" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Awublack Openclaw Agent Browser free?
Yes, Awublack Openclaw Agent Browser is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Awublack Openclaw Agent Browser support?
Awublack Openclaw Agent Browser is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Awublack Openclaw Agent Browser?
It is built and maintained by awublack (@awublack); the current version is v1.1.0.
More Skills