我的测试

登录外呼系统并调用 save_session.py 保存浏览器会话到 auth.json。用于首次登录、会话失效或开始任务前重新准备登录态。

Before installing or running this skill: - Do not run anything until you have the actual save_session.py script from a trusted source. The registry package does not include it. - Inspect save_session.py (and any code you obtain) carefully to ensure it does not send auth.json or credentials to external endpoints. - Prefer providing credentials via a secure secrets mechanism rather than a plaintext login_credentials.json file; if you must use a file, restrict filesystem permissions and remove it after use. - Treat auth.json as highly sensitive: store it securely, limit access, and rotate credentials if it may have been exposed. - If you cannot review the script, consider creating a throwaway/test account to run the process first so long-lived credentials are not exposed. - If you need the skill to be fully self-contained, request the publisher include save_session.py and a clear README describing exactly what the script does and any network endpoints it communicates with.

Type: OpenClaw Skill Name: test-outbound Version: 1.0.0 The skill is designed to handle sensitive authentication data, including plaintext credentials (login_credentials.json) and browser session tokens (auth.json), which are high-value targets for exfiltration. It relies on an external script, save_session.py (the content of which was not provided for review), to automate login via Playwright. While the documentation describes a legitimate automation use case for an 'outbound system,' the management of authentication secrets and the lack of visibility into the script's logic present a significant security risk.