← 返回 Skills 市场
Website Usability Test Nova Act
作者
zouchaoqun
· GitHub ↗
· v1.0.5
630
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install nova-act-usability
功能描述
AI-orchestrated usability testing using Amazon Nova Act. The agent generates personas, runs tests to collect raw data, interprets responses to determine goal...
安全使用建议
This skill appears to do what it says: run automated browser tests via Amazon Nova Act and produce reports. Before installing or running it:
- Provide the Nova Act API key only in the designated config file (~/.openclaw/config/nova-act.json) and verify that path is correct for your system.
- Run tests only against non-production/test environments — the scripts capture full page HTML and screenshots which may contain PII or sensitive data.
- Review the shipped Python scripts yourself (or run them in an isolated container/VM) if you are concerned about data flow; look for any network calls beyond Nova Act and your local file writes.
- Confirm you trust the upstream nova-act package (pip package) and review its provenance before installing.
- If you need stronger containment, run the skill inside a disposable VM or container, and delete the generated trace directories after review.
If you want, I can scan the included Python files for specific network calls or suspicious I/O patterns and point out any lines that warrant more scrutiny.
功能分析
Type: OpenClaw Skill
Name: nova-act-usability
Version: 1.0.5
The OpenClaw AgentSkills skill bundle is designed for AI-orchestrated usability testing using Amazon Nova Act. It transparently discloses its data access (reading `~/.openclaw/config/nova-act.json` for an API key and writing local trace/report files) and explicitly warns about potential PII capture in trace files. Crucially, the skill implements robust safety guardrails, defining `MATERIAL_IMPACT_KEYWORDS` in `scripts/dynamic_exploration.py` and instructing the AI agent in `SKILL.md` and `references/nova-act-cookbook.md` to 'ALWAYS stop testing before actions that cause monetary impact, external communication, account creation, or data modification'. The Python scripts and markdown instructions consistently guide the AI agent to perform its stated purpose safely, without evidence of intentional harmful behavior, data exfiltration to unauthorized endpoints, or malicious prompt injection objectives. The use of external APIs (Nova Act, Anthropic Claude for persona generation) is aligned with its functionality.
能力评估
Purpose & Capability
Name/description match the packaged scripts and instructions. The skill needs Python and the Nova Act + Playwright libraries to perform browser automation and generate reports — these are proportional to a usability-testing tool. The only declared external credential surface is a local config file for the Nova Act API key, which is consistent with the described integration.
Instruction Scope
SKILL.md clearly instructs the agent to run collection scripts that capture page HTML, screenshots, and browser traces and then requires the agent to interpret results and generate reports. The skill intentionally writes local trace files that can include PII and full page contents — the README and SKILL.md warn about this. There are no obvious instructions that read or exfiltrate unrelated system secrets, but the agent will need to access the config path (~/.openclaw/config/nova-act.json) to read the API key.
Install Mechanism
There is no automatic install spec included; dependencies are installed via pip and Playwright per the README (pip3 install nova-act pydantic playwright; playwright install chromium). This is a typical/manual install flow and does not pull arbitrary binaries from unknown URLs. The included Python scripts are shipped with the skill (so code will run locally).
Credentials
The only sensitive credential the skill needs is the Nova Act API key, which the skill expects to find in a local config file (/home/ubuntu/.openclaw/config/nova-act.json). No other environment variables or unrelated credentials are requested. Storing the API key in a local config file (instead of an env var) is a design choice and is consistent with the skill's needs, but you should confirm the config file's path is correct for your environment and protect that file.
Persistence & Privilege
The skill is not always:true and does not request elevated system privileges or modification of other skills. It creates local log/report files and may create a skill directory under ~/.openclaw/skills; this is normal for a local testing tool. No evidence of attempts to persist beyond its own files.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nova-act-usability - 安装完成后，直接呼叫该 Skill 的名称或使用
/nova-act-usability触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.5
Reverting name to nova-act-usability while keeping security fixes
v1.0.4
Security refactor: removed eval/risky keywords to clear VirusTotal flags; added basic interpretation layer
元数据
常见问题
Website Usability Test Nova Act 是什么？
AI-orchestrated usability testing using Amazon Nova Act. The agent generates personas, runs tests to collect raw data, interprets responses to determine goal... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 630 次。
如何安装 Website Usability Test Nova Act？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nova-act-usability」即可一键安装，无需额外配置。
Website Usability Test Nova Act 是免费的吗？
是的，Website Usability Test Nova Act 完全免费（开源免费），可自由下载、安装和使用。
Website Usability Test Nova Act 支持哪些平台？
Website Usability Test Nova Act 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Website Usability Test Nova Act？
由 zouchaoqun（@zouchaoqun）开发并维护，当前版本 v1.0.5。
推荐 Skills