My Browser Agent

Automate browsing with Playwright to visit URLs, capture screenshots, retrieve page titles, and interact with elements (clicking coming soon).

This skill appears to do what it says: load pages with Playwright, return titles, and save screenshots to /tmp/screenshot.png. Before installing, be aware that: - npm install will download Playwright and browser binaries (large downloads and install scripts). - The skill will load arbitrary URLs you provide; those pages can run arbitrary JS inside the browser context—avoid visiting untrusted or attacker-controlled URLs or restrict inputs. - Screenshots are written to /tmp; the skill does not read other files or require secrets. If you want stricter safety, only allow the skill to run for trusted inputs, or disable autonomous invocation so it runs only when you explicitly call it.

Type: OpenClaw Skill Name: my-browser-agent Version: 1.0.0 The skill implements browser automation using Playwright, which involves high-risk capabilities such as arbitrary network access and filesystem writes (saving screenshots to /tmp/screenshot.png). While the code in index.js aligns with the stated purpose in SKILL.md, it lacks input validation for the 'url' parameter, potentially allowing the agent to access sensitive local files (file://) or internal network resources (SSRF). Furthermore, the package.json and package-lock.json files specify a non-existent version of the playwright dependency (1.58.2), which is an anomalous configuration.