opencli

Use opencli CLI to interact with social/content websites (Bilibili, Zhihu, Twitter/X, YouTube, Weibo, 小红书, V2EX, Reddit, HackerNews, 雪球, BOSS直聘 etc.) via the...

Before installing or running this skill: 1) Verify the opencli npm package and the GitHub repo linked in the README are the legitimate upstream project and maintained by a trusted author. 2) Review the Playwright MCP Bridge extension on the Chrome Web Store (permissions, publisher) before installing — the extension bridges the agent to your browser and can expose logged-in sessions. 3) Understand that the skill will read private pages (messages/notifications) and write local config files (~/.opencli/clis/...), so consider using a separate browser profile for sites you don't want exposed. 4) Be cautious running 'npx' commands or globally installing npm packages — these execute remote code; prefer auditing packages or installing from pinned releases. 5) Confirm the agent will always show you the content before performing write operations (the README says it will, but verify at runtime). If you cannot or do not want automated access to your logged-in accounts or private messages, do not install or enable the Playwright bridge/extension and run opencli only in a controlled environment.

Type: OpenClaw Skill Name: opencli-skill Version: 1.0.0 The skill bundle provides the agent with broad access to sensitive personal data (DMs, bookmarks, history) and the ability to perform write actions (posting, deleting) across 16 social platforms by reusing the user's Chrome session. SKILL.md includes 'self-iteration' instructions that direct the agent to write YAML configuration files to the local filesystem (~/.opencli/clis/) and use browser_evaluate to explore DOM structures. While these capabilities are aligned with the tool's stated purpose of being a CLI for web services, the combination of extensive account access and local file-writing permissions presents a high-risk profile.