End-to-end DataDome bypass orchestration for authorized targets by chaining probe, cookie harvest fallback, cookie injection, retest, and optional CapSolver...

This skill orchestrates bypassing an anti-bot system and implements that behavior in the included script. Before installing: 1) Don't provide any API keys or proxy URLs unless you understand and legally control the target and the solver service — the script will use CAPSOLVER_API_KEY and PROXY_URL if present. 2) Inspect the referenced scripts from other skills (solver-credentials-bootstrap, captcha-challenge-layer, datadome-session-unlock) because this orchestrator calls them and also sources $WORK/.secrets/credentials.env (which can contain many secrets). 3) Expect to need Python, Node, Playwright and a virtualenv at $WORK/.venv-stealth — the skill metadata does not declare these dependencies. 4) Run only in an isolated/testing environment; harvested cookies and session state are written to workspace/inbox and ~/.clawdbot and could leak credentials. 5) Consider legal/ethical implications of bypassing anti-bot protections; if you proceed, validate precisely which environment variables and secret files will be used and audit the other scripts the orchestrator invokes.

Type: OpenClaw Skill Name: datadome-super-bypass Version: 1.0.0 The skill is an orchestrator designed to bypass DataDome bot protection by chaining cookie harvesting, state injection, and third-party captcha solving via CapSolver. It is classified as suspicious because it performs high-risk security bypass operations and accesses sensitive credential files (`.secrets/credentials.env`) to retrieve API keys. While the behavior aligns with the stated purpose of bypassing anti-bot measures for the target 'propwire.com', the use of inline script execution (Python/Node.js) and automated browser manipulation represents a significant risk profile without evidence of direct malicious exfiltration in the provided files.