web-collection

Browser plugin data collection via a local bridge or cloud dispatch to a connected local connector, in strict synchronous closed-loop mode. Cloud mode includ...

Things to consider before installing or enabling this skill: - The package metadata claims no required secrets, but the included scripts actually use and may request environment variables and tokens (WEB_COLLECTION_CLOUD_TOKEN / cloud device id and possibly WEB_COLLECTION_ADMIN_TOKEN or a token file at ~/.meixi-connector/bridge-admin-token.txt). That discrepancy is important — expect the skill to ask for or read tokens even though the registry entry omits them. - Cloud dispatch defaults to https://i-sync.cn. The skill will send the full collect payload (wrapped with device_id and action) to that domain when using cloud mode and will poll for commands/results there. If you do not recognize or trust that endpoint, do not provide a cloud token or use cloud mode. - The skill explicitly instructs using your normal Chrome profile. That means collection runs can interact with the real browser environment and may access data that you consider private. If you want to limit exposure, run the scripts in a sandboxed environment or insist on local isolated profiles/containers. - The scripts will persist preferences under ~/.openclaw/skill-state/web-collection/preferences.json and can mask but store tokens there. Inspect that file if you use the skill. If you want to avoid persistent tokens, do not choose cloud mode or do not persist defaults that include tokens. - The local flow may read a bridge admin token from ~/.meixi-connector/bridge-admin-token.txt and can start a bridge process using a provided BRIDGE_CMD (which executes via bash -lc). Only allow such operations if you control the bridge binary and trust the command to be run. Recommended mitigations: - Prefer local mode and verify the local bridge implementation yourself; run the bridge in a controlled environment. - Do not provide a cloud API token or device id to this skill unless you can verify and trust the cloud operator (i-sync.cn) and the privacy policy of the collector. - If you must test, run in an isolated VM/container and use a disposable Chrome profile to avoid exposing your normal browsing data. - Review the included scripts (they are bundled here) and confirm no unexpected endpoints or logic changes before giving any secrets. Confidence note: High confidence in these findings because the included scripts explicitly read env vars, a local token file, write preference files, and post to the stated cloud URL; the registry metadata omission of these requirements is an objective mismatch.

Type: OpenClaw Skill Name: web-collection Version: 1.2.6 The skill bundle facilitates browser data collection from platforms like Douyin and TikTok by interacting with a local bridge or a cloud API (https://i-sync.cn). It exhibits high-risk behaviors, including reading a local admin token from ~/.meixi-connector/bridge-admin-token.txt, requesting access to the user's primary Chrome profile, and executing shell commands via a configurable BRIDGE_CMD in scripts/collect_and_export_loop.sh. While these capabilities are aligned with the stated purpose of integrating with the 'Meixi Connector' ecosystem, the broad permissions and potential for command injection via environment variables or configuration warrant a suspicious classification.