← 返回 Skills 市场
69
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mtop-devtools-socket
功能描述
通过本地 socket 调用 Mtop DevTools 浏览器插件能力（获取请求/日志/埋点、设置 mock、获取 API schema、代理 HTTP 请求、浏览器操作与页面感知）
安全使用建议
This skill appears to do what it says: control a browser DevTools extension via a local native host. Before installing or using it, be aware that it deliberately accesses sensitive browser state and local files: it can read cookies (used for signing/auth), capture page contents and screenshots, run arbitrary JS in pages, proxy requests with browser cookies, add redirect/modify rules, and upload local files. Only install the npm packages if you trust their publisher; registering a native messaging host may require sudo and writes system config. Avoid using this on accounts or pages containing sensitive data unless you trust the extension and CLI source; review the @mtop-devtools packages on npm/GitHub and the browser extension source if possible. If you will grant agent autonomy, consider restricting its scope because these capabilities could be misused to exfiltrate data or redirect traffic.
功能分析
Type: OpenClaw Skill
Name: mtop-devtools-socket
Version: 1.0.0
The skill provides high-risk browser automation capabilities, including arbitrary JavaScript execution (page_eval), access to browser cookies for authenticated requests (proxy_request, send_mtop_request), and local file uploads (page_upload). While these features are aligned with the stated purpose of a developer tool for debugging 'Mtop' APIs (associated with alibaba-inc.com), they grant an AI agent significant control over the user's browser session and local files. The requirement to install external global npm packages (@mtop-devtools/native-host) and a specific browser extension further increases the potential attack surface.
能力评估
Purpose & Capability
Name/description state a local-socket interface to the Mtop DevTools extension; the SKILL.md and README describe Native Messaging, a CLI, and browser control features (requests, logs, mocks, proxy, page ops) that align with that purpose.
Instruction Scope
SKILL.md instructs installation of a native host and CLI and gives commands that will: execute arbitrary JS in page context (page_eval), read page DOM/accessible snapshot, capture screenshots, read and use browser cookies for signing/proxying, upload local files, and add declarativeNetRequest rules (redirect/modify/block). These are expected for a DevTools control tool but are powerful and enable data access/exfiltration if misused.
Install Mechanism
This is an instruction-only skill (no install spec). It tells users to run npm -g install of @mtop-devtools/native-host and @mtop-devtools/client. That is a reasonable install approach for a native messaging host but implies installing third-party global packages and registering a native host manifest (may require elevated privileges and writing system dirs). The skill does not auto-download or execute code itself.
Credentials
The skill requires no environment variables or external credentials in metadata. However runtime behavior explicitly depends on sensitive browser state: it reads cookies (_m_h5_tk, m_tk, _tb_token_) to sign/send mtop requests, automatically attaches browser cookies to proxied requests, and can be directed to read local file paths for uploads or payload files. These sensitive accesses are coherent with the skill's purpose but should be treated as high-privilege operations.
Persistence & Privilege
The skill is not always:true and does not request permanent platform-level presence. It recommends installing a native host and CLI which will register a native messaging host and a global command via npm -g; that is appropriate for the stated functionality and is performed by the user during setup.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mtop-devtools-socket - 安装完成后，直接呼叫该 Skill 的名称或使用
/mtop-devtools-socket触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of mtop-devtools-socket skill.
- Enables local socket integration with Mtop DevTools browser extension: fetch requests/logs/events, set mocks, manage API schemas, proxy HTTP requests, and perform browser interactions.
- Provides detailed usage guidance, supported commands, and example operations for API debugging, mocking, request rules, page actions, and browser context awareness.
- Includes references for usage examples, API parameters, and troubleshooting.
元数据
常见问题
mtop-devtools-socket 是什么？
通过本地 socket 调用 Mtop DevTools 浏览器插件能力（获取请求/日志/埋点、设置 mock、获取 API schema、代理 HTTP 请求、浏览器操作与页面感知）. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 69 次。
如何安装 mtop-devtools-socket？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mtop-devtools-socket」即可一键安装，无需额外配置。
mtop-devtools-socket 是免费的吗？
是的，mtop-devtools-socket 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
mtop-devtools-socket 支持哪些平台？
mtop-devtools-socket 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 mtop-devtools-socket？
由 徒言（@f-loat）开发并维护，当前版本 v1.0.0。
推荐 Skills