国家税务总局 12366 纳税服务平台自动登录技能。支持图形验证码 OCR 识别、持久化会话、自动定位表单元素。当用户要求登录税务平台、12366、国家税务总局、国家税务局12366 、12366国家税务局 等登录场景时触发。关键判断：用户提供用户名、密码以及登录页面 URL（或已设置环境变量），希望自动完成登录流程。

This skill appears to do what it says (automate login + OCR), but it handles extremely sensitive credentials and persists browser session data. Before installing or running it: 1) Review the full script (complete file) yourself or have a trusted reviewer inspect the remainder of the code for any network calls, hard-coded endpoints, or subprocess/socket usage that could exfiltrate data. The prompt-provided file is truncated; confirm the rest contains no unexpected behavior. 2) Run it in an isolated environment (VM or disposable container) and do not use your real tax credentials until you are confident. 3) Use a fresh ephemeral chrome_profile directory (or set it to a path you control) and avoid reusing your main Chrome profile. 4) Avoid running with the default remote-debugging port 9222 if you have a Chrome instance already exposing CDP — change the port or run a dedicated browser instance to reduce cross-profile exposure. 5) Avoid --debug in production runs (it prints page element text which may include sensitive info). 6) Consider alternative official APIs or manual login if you have any doubt about storing credentials in scripts. If you want, provide the remainder of the script (full file) and I can re-check for network endpoints or covert behavior.

Type: OpenClaw Skill Name: gjsw Version: 1.0.5 The skill bundle is a legitimate browser automation tool designed to log into the Chinese 12366 tax service platform. It uses Playwright to control a Google Chrome instance and the ddddocr library for captcha recognition. The script (openclaw_login.py) handles credentials locally, implements standard bot-detection bypasses (e.g., disabling AutomationControlled), and maintains session persistence via a local directory. There is no evidence of data exfiltration, malicious command execution, or prompt injection.