Browser Use - 网页自动化

通过 nodriver 驱动浏览器，支持信息检索、网页抓取、表单交互等；**作为搜索工具的补充**——内置搜索无结果、摘要不足或需登录/站内检索时再启用；适用于非 WPS 链接访问、落地页导航、Web 应用交互，以及股票/金价/期货/天气等强事实信息。

This skill implements a browser automation library, but there are gaps and assumptions you should resolve before use: 1) The Python code imports 'nodriver' and IPython but the skill metadata does not declare those dependencies — make sure the required packages are installed from trusted sources. 2) The code uses input() with a special marker (__BRWS_REQ__) to receive a JSON payload (CDP endpoint) from the execution frontend; ensure you trust the frontend that will provide that payload because it controls which CDP endpoint the skill will connect to. 3) The code references environment variables (MUSA_CDP_ENDPOINT, a browser executable env var) and a Jupyter helper (jupyter_cell_exec) not listed as required — ask the author to document all required env vars, the expected runtime (Jupyter vs non-interactive), and provide a clear install guide. 4) Because the skill connects to a Chromium CDP endpoint, running it gives it the ability to control a browser instance that may have access to local sessions/cookies; only run it in an isolated environment and after reviewing/validating the nodriver package source. If you cannot obtain clarifying information from the publisher, treat the skill as untrusted and test it in a sandboxed VM or container with no sensitive browser state.

Type: OpenClaw Skill Name: wps-browser-use Version: 1.0.0 The skill provides browser automation capabilities using the nodriver library, which includes high-risk features such as arbitrary JavaScript execution (execute_script), network access for web navigation, and file system writes (saving page snapshots to the workspace). While these capabilities are plausibly necessary for the stated purpose of web scraping and interaction, they represent a significant attack surface for potential exploitation. The code in browser.py also implements anti-detection measures (hiding the webdriver property) and uses a custom communication protocol (__BRWS_REQ__) to obtain CDP endpoints from the host environment.