← Back to Skills Marketplace
349
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install pinchtab-helper
Description
控制并自动化操作浏览器，支持导航、快照、点击、输入、提交表单和截图，需预先安装并启动 PinchTab 服务。
Usage Guidance
This skill appears to do what it says (drive a browser via PinchTab) but take precautions before installing or running it: 1) Do not run curl | bash from an unfamiliar domain without auditing the script — prefer official package sources (npm, Docker images you inspect, or verified GitHub releases). 2) Run PinchTab in an isolated environment (dedicated profile, VM, or container) because browser automation can access sensitive pages and credentials. 3) Ensure the service binds only to localhost and avoid setting BRIDGE_TOKEN or exposing the service unless you fully trust and control the remote endpoint. 4) If you need to use this skill in production, verify the pinchtab binary source and the install script contents first. If you want, I can help inspect the install script or suggest safer installation alternatives.
Capability Analysis
Type: OpenClaw Skill
Name: pinchtab-helper
Version: 0.1.0
The skill bundle instructs the AI agent to install and execute an external browser automation tool using a high-risk 'curl | bash' command from pinchtab.com (SKILL.md). While the tool's stated purpose is efficient browser control, the promotion of unverified remote script execution and the broad capabilities granted (navigating, clicking, and capturing browser data) represent a significant security risk. There is no evidence of explicit malicious intent, but the installation pattern is a common vector for supply chain attacks.
Capability Assessment
Purpose & Capability
Name/description claim (control and automate a browser via PinchTab) matches the SKILL.md: all commands and HTTP endpoints are about launching instances, navigation, snapshots, clicks, fills, and screenshots. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions are narrowly scoped to running the PinchTab CLI or calling its local HTTP API (http://localhost:9867). They do not instruct reading arbitrary host files or exporting data to third parties. However, the doc suggests using BRIDGE_TOKEN for remote access (not declared as a required env var) and instructs launching a network service — which if misconfigured could expose browser sessions and their data.
Install Mechanism
Although the skill itself has no install spec, SKILL.md explicitly suggests installing via curl -fsSL https://pinchtab.com/install.sh | bash (and alternatives like npm or Docker). Curl|bash from an unverified domain is high risk because it downloads and executes remote code. The npm and Docker alternatives are reasonable, but the guidance to run the remote install script should be treated as a red flag unless the domain and script are audited.
Credentials
The skill declares no required env vars or secrets (which is appropriate). SKILL.md mentions an optional BRIDGE_TOKEN for remote access; this token is not declared in metadata and would grant broad access if used. Users should not set or expose such tokens unless they understand the security implications.
Persistence & Privilege
always is false, no install artifacts are declared, and the skill does not request modifying other skills or system-wide configs. Autonomous invocation is allowed (default) but that is expected for skills and not flagged alone.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pinchtab-helper - After installation, invoke the skill by name or use
/pinchtab-helper - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of pinchtab-helper.
- Introduces browser automation using PinchTab for efficient and stable control.
- Provides setup instructions for macOS, Linux, npm, and Docker.
- Documents core PinchTab commands for navigation, clicking, form filling, screenshots, and snapshots.
- Includes HTTP API endpoint details.
- Lists common trigger phrases for skill activation.
- Highlights security and usage best practices.
Metadata
Frequently Asked Questions
What is Pinchtab Helper?
控制并自动化操作浏览器，支持导航、快照、点击、输入、提交表单和截图，需预先安装并启动 PinchTab 服务。 It is an AI Agent Skill for Claude Code / OpenClaw, with 349 downloads so far.
How do I install Pinchtab Helper?
Run "/install pinchtab-helper" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pinchtab Helper free?
Yes, Pinchtab Helper is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pinchtab Helper support?
Pinchtab Helper is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pinchtab Helper?
It is built and maintained by Anonymous (@adminlove520); the current version is v0.1.0.
More Skills