Opencli Rs

基于Rust的通用命令行枢纽 - 将任何网站、桌面应用、本地CLI工具转变为命令行接口，专为AI Agent和自动化工作流设计。支持55+网站、Electron应用控制和外部CLI集成，单二进制文件4.7MB，性能提升12倍。

This package is inconsistent: it advertises a Rust single-binary project but the shipped installer uses npm and references different GitHub repos. Before installing, verify the official upstream repository and the exact installation steps (prefer an official release page). Do not run curl | sh or npm install -g unless you trust the exact repository/maintainer. Understand that the tool expects to reuse your Chrome login/session and can perform authenticated actions on many sites (posting, downloading, following, deleting) — only install in an environment where you are comfortable with that. If you need caution: 1) Inspect the npm package contents (npm pack) or the GitHub release archive before running; 2) run installs in an isolated environment (VM/container) first; 3) avoid connecting browser profiles containing sensitive accounts; 4) prefer an actual Rust binary release (verify checksum/signature) if you want the claimed 'opencli-rs' behavior; 5) confirm which upstream (nashsu, jackwener, smallnest) is authoritative and that the maintainers are reputable.

Type: OpenClaw Skill Name: opencli-rs Version: 1.0.0 The skill bundle provides an interface for an AI agent to control over 55 websites and desktop applications (e.g., Cursor, Notion, Discord) via a tool called 'opencli'. It exhibits high-risk behaviors, including the ability to register and execute arbitrary local CLI tools, control browser sessions via a Chrome extension, and modify shell startup files (~/.bashrc). There is a notable discrepancy between the SKILL.md documentation, which promotes a Rust-based version (opencli-rs), and the included install.sh script, which installs a Node.js package (@jackwener/opencli) from NPM. These broad capabilities, combined with the inconsistent documentation, create a significant attack surface for prompt injection and unauthorized system access.