使用 Chrome Session Attach 功能控制用户的浏览器标签页。包括安装 Chrome 扩展、配置连接、Attach/Detach 标签页、截图、导航、填表等操作。

This skill will instruct you (or the agent) to read files under ~/.openclaw and to copy/load a local Chrome extension that uses a Gateway token from ~/.openclaw/openclaw.json. The registry metadata did not declare those config paths or credentials — that's the primary inconsistency. Before installing or using: (1) Verify the origin and contents of the Chrome extension being loaded; only load unpacked extensions you trust. (2) Confirm the Gateway is intended to run on 127.0.0.1 and that exposing its token to a browser extension is acceptable for your threat model. (3) Inspect ~/.openclaw/openclaw.json yourself rather than running untrusted commands that cat it; avoid pasting the token into third-party sites. (4) Consider not copying sensitive files to a public Desktop folder; use a secure location with strict permissions. (5) Ask the publisher to update the skill metadata to explicitly declare required config paths/credentials (e.g., required config path: ~/.openclaw/openclaw.json) so you can make an informed decision. The mismatch between instructions and declared requirements is why this is flagged as suspicious.

Type: OpenClaw Skill Name: chrome-attach Version: 1.0.0 The skill bundle provides instructions for a 'chrome-attach' feature that allows the OpenClaw agent to interact with a user's existing Chrome browser tabs. The process requires manual user intervention, including loading a local extension and configuring it with a gateway token retrieved via standard CLI commands. The instructions in SKILL.md are transparent, and the listed commands (e.g., snapshot, navigate, click) are standard browser automation functions without evidence of malicious intent or automated exfiltration.