Token Efficient Web Operations en

Operate web page elements via CDP and Page JS Extension, save 95% Token (for UI automation testing ONLY, NOT a web browsing tool)

This skill appears coherent for automated UI testing, but take these precautions before use: 1) Manually review the linked Page JS extension source code (https://github.com/TangJing/openclaw_access_web_page_js) before installing; 2) Only run the skill in controlled CI/test environments, never on banking, payment, healthcare, login or other sensitive pages; 3) Ensure your agent/LLM setup does not send raw DOM content or secrets to external services — prefer local LLMs or block outbound LLM calls during tests; 4) Audit the extension's sensitive-field filtering (covers non-INPUT or custom components?) and test edge cases; 5) If you need stronger guarantees, disable autonomous invocation for this skill or restrict it to manually triggered runs.

Type: OpenClaw Skill Name: page-js-operation-en Version: 1.0.1 The skill enables browser automation via the Chrome DevTools Protocol (CDP) and requires the manual installation of a third-party Chrome extension from GitHub (https://github.com/TangJing/openclaw_access_web_page_js). It utilizes high-privilege `Runtime.evaluate` calls to execute arbitrary JavaScript on web pages, which is a significant security risk. Although the documentation in SKILL.md includes extensive privacy warnings and claims to skip sensitive fields like passwords during data collection, the reliance on external, unverified code and the potential for data exfiltration to LLM services warrant a suspicious classification.