← Back to Skills Marketplace
skill test
by
zhaoweilong
· GitHub ↗
· v1.0.0
· MIT-0
110
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wskill
Description
A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured co...
Usage Guidance
This skill appears to be a legitimate browser-automation CLI, but there are a few red flags and high-capability behaviors you should consider before installing or letting an agent use it autonomously:
- Mismatched metadata: the description mentions Rust but the instructions show only Node/npm/pnpm; the SKILL.md references git and pnpm yet the skill's required-bins list omits them. Verify the real upstream project (inspect https://github.com/vercel-labs/agent-browser) before running install commands.
- High privileges within web context: the CLI can read cookies/localStorage, take screenshots, record video, upload local files, and intercept/mock network requests. These are normal for browser automation but also let the tool access or exfiltrate sensitive session data if misused.
- Installation risk: npm -g and building from source execute code on your machine. Only install from a trusted repository and review the package source (especially preinstall/build scripts) before running global installs.
- Operational controls: avoid running this skill with sensitive accounts or files unless you sandbox it; do not provide secrets or local files unless necessary; prefer to run installs in a disposable environment (container/VM) and limit autonomous invocation if you are unsure.
If you can, ask the publisher for a canonical homepage/release URL and verify the repository and package contents; if you plan to use it, validate the exact binary requirements (git, pnpm, node) and inspect build scripts before installing.
Capability Analysis
Type: OpenClaw Skill
Name: wskill
Version: 1.0.0
The skill provides a comprehensive browser automation toolkit via the `agent-browser` CLI, which includes high-risk capabilities such as reading all browser cookies (`agent-browser cookies`), executing arbitrary JavaScript (`agent-browser eval`), and saving/loading full session states (`agent-browser state save`). While these features are aligned with the stated purpose of web automation and navigation, they represent a significant attack surface for session hijacking and data exfiltration. No evidence of intentional malice, obfuscation, or prompt injection was found in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
The SKILL.md describes a browser automation CLI (navigate, snapshot, click, fill, network routing, cookies/storage, screenshots, uploads), which aligns with the skill name and description. However, the description claims a Rust-based CLI with a Node fallback while the instructions only show Node/npm/pnpm installation paths; the declared required binaries list only node and npm but the text references git and pnpm (and a GitHub repo). The mismatch between 'Rust-based' and the entirely Node/npm-based install instructions and the omission of git/pnpm from the required-bins list is an inconsistency.
Instruction Scope
The SKILL.md instructs the agent to run CLI commands that will read and manipulate web pages, cookies, localStorage, upload files, take screenshots (to stdout or files), record video, and intercept/mock network requests. Those actions are consistent with browser automation, but they are high-privilege within that domain: the tool can access session cookies, page DOM, and local files (via uploads), and can intercept or mock network traffic — all of which may expose sensitive data if misused. The instructions do not ask the agent to read unrelated local system configuration or environment variables, which is good, but they give broad discretion to interact with arbitrary pages and data.
Install Mechanism
There is no formal install spec in the skill bundle (instruction-only), so the SKILL.md's install instructions are the only guidance. Those recommend npm -g install, a git clone from github.com/vercel-labs/agent-browser, and pnpm build. GitHub is a common source, but the skill omits declaring git and pnpm as required binaries. Because installation is manual (no packaged install spec), the risk depends on whether you actually run those commands — installing global npm packages and building from source can execute arbitrary code, so inspect the upstream repository before installing.
Credentials
The skill declares no required environment variables or credentials, which is proportionate for a CLI that operates via interactive commands. However, the CLI exposes commands to set HTTP basic auth credentials, headers, and to upload files — these are functional needs but may prompt you to supply secrets at runtime. The main proportionality issue is missing declared binaries (pnpm, git) relative to the install instructions, not the presence of unexplained credential requests.
Persistence & Privilege
always:false and no install spec means the skill does not request forced permanent inclusion or elevated platform privileges. The skill does not attempt to modify other skills or agent-wide settings in the provided instructions.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wskill - After installation, invoke the skill by name or use
/wskill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Agent Browser 1.0.0 – Initial Release
- Fast Rust-based headless browser CLI for navigation, interaction, and automation, with Node.js fallback.
- Supports structured web navigation, element interaction (click, fill, type), screenshots, PDF export, and video recording.
- Extensive command set for UI testing, data extraction, form filling, and automation.
- Includes features for cookies, storage, network control, state management, and sessions.
- Semantic selectors and JSON output for advanced automation and integration.
Metadata
Frequently Asked Questions
What is skill test?
A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured co... It is an AI Agent Skill for Claude Code / OpenClaw, with 110 downloads so far.
How do I install skill test?
Run "/install wskill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is skill test free?
Yes, skill test is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does skill test support?
skill test is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created skill test?
It is built and maintained by zhaoweilong (@zhaowl1023); the current version is v1.0.0.
More Skills