← 返回 Skills 市场
22143
总下载
17
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install ai-web-automation
功能描述
Automate web tasks like form filling, data scraping, testing, monitoring, and scheduled jobs with multi-browser support and retry mechanisms.
安全使用建议
Install only if you are comfortable with the skill making outbound web requests from your agent environment. Use it only for authorized targets, avoid internal/private/metadata URLs, and review or add URL allowlisting, redirect validation, rate limits, and confirmation for any future scheduled, proxy, or submission features.
功能分析
Type: OpenClaw Skill
Name: ai-web-automation
Version: 1.0.0
The skill bundle is classified as suspicious due to a Server-Side Request Forgery (SSRF) vulnerability in `main.py`. The script directly uses user-provided URLs from `sys.argv` in `requests.get()` without validation, potentially allowing an attacker to force the agent to make requests to internal network resources or sensitive endpoints. While the `SKILL.md` describes high-risk capabilities like scheduled tasks and proxy support, the immediate and concrete vulnerability lies in the `main.py`'s handling of the `url` parameter for web scraping.
能力评估
Credentials
main.py accepts an arbitrary URL and calls requests.get with redirects enabled and no scheme, host, IP range, port, or redirect validation; that is broader network reach than a safely scoped scraper needs.
Install Mechanism
No install script, dependency installation, remote payload retrieval, or tool replacement behavior was found in the inspected package metadata.
Instruction Scope
The instructions advertise scraping, scheduled tasks, automated submissions, proxy pool support, and notifications without documented authorization, rate-limit, robots/ToS, privacy, or confirmation guardrails.
Persistence & Privilege
The code creates an artifact/output report directory and writes scrape reports, but no cross-session service, scheduled task, privilege escalation, memory modification, or background persistence was found in code.
Purpose & Capability
The stated purpose is web automation and scraping; the actual runtime implementation only supports a scrape action that fetches a URL, extracts limited page metadata, and writes a local Markdown report.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install ai-web-automation - 安装完成后，直接呼叫该 Skill 的名称或使用
/ai-web-automation触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
AI Web Automation 是什么？
Automate web tasks like form filling, data scraping, testing, monitoring, and scheduled jobs with multi-browser support and retry mechanisms. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 22143 次。
如何安装 AI Web Automation？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ai-web-automation」即可一键安装，无需额外配置。
AI Web Automation 是免费的吗？
是的，AI Web Automation 完全免费（开源免费），可自由下载、安装和使用。
AI Web Automation 支持哪些平台？
AI Web Automation 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 AI Web Automation？
由 ZhangYang（@arthasking123）开发并维护，当前版本 v1.0.0。
推荐 Skills