← 返回 Skills 市场
19326
总下载
14
收藏
296
当前安装
1
版本数
在 OpenClaw 中安装
/install ai-web-automation
功能描述
Automate web tasks like form filling, data scraping, testing, monitoring, and scheduled jobs with multi-browser support and retry mechanisms.
安全使用建议
Install only if you need a basic webpage scraper. Use it only on sites you are authorized to access, avoid internal or sensitive network addresses, and do not rely on the advertised cron, proxy, browser automation, form submission, or notification features unless a future version provides reviewed code for them.
功能分析
Type: OpenClaw Skill
Name: ai-web-automation
Version: 1.0.0
The skill bundle is classified as suspicious due to a Server-Side Request Forgery (SSRF) vulnerability in `main.py`. The script directly uses user-provided URLs from `sys.argv` in `requests.get()` without validation, potentially allowing an attacker to force the agent to make requests to internal network resources or sensitive endpoints. While the `SKILL.md` describes high-risk capabilities like scheduled tasks and proxy support, the immediate and concrete vulnerability lies in the `main.py`'s handling of the `url` parameter for web scraping.
能力评估
Purpose & Capability
The implemented code fetches a user-provided URL and writes a local markdown scraping report, which fits the scraping purpose, but the documentation advertises form filling, cron jobs, Selenium/Puppeteer, proxy pools, and notifications that are not implemented.
Instruction Scope
The examples are user-directed, but the skill gives little safety guidance around authorization, rate limits, privacy, or avoiding internal and sensitive URLs.
Install Mechanism
No install-time scripts or automatic setup behavior are present; package metadata only defines a scrape command, while the Python script imports requests without declaring or pinning that dependency.
Credentials
Outbound HTTP to a user-supplied URL and local report writing are proportionate for a web scraping skill, though arbitrary URL fetching can be risky in privileged network environments.
Persistence & Privilege
The artifact does not install scheduled jobs, run background workers, request elevated privileges, or access credential/session stores.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install ai-web-automation - 安装完成后，直接呼叫该 Skill 的名称或使用
/ai-web-automation触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
AI Web Automation 是什么？
Automate web tasks like form filling, data scraping, testing, monitoring, and scheduled jobs with multi-browser support and retry mechanisms. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 19326 次。
如何安装 AI Web Automation？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ai-web-automation」即可一键安装，无需额外配置。
AI Web Automation 是免费的吗？
是的，AI Web Automation 完全免费（开源免费），可自由下载、安装和使用。
AI Web Automation 支持哪些平台？
AI Web Automation 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 AI Web Automation？
由 ZhangYang（@arthasking123）开发并维护，当前版本 v1.0.0。
推荐 Skills