opencli

Fetch data from social, video, and news websites using OpenCLI by reusing Chrome login sessions without API keys.

This skill is coherent with its stated goal (scraping sites by reusing your Chrome session) but that same mechanism gives it potential access to all data in any logged-in browser session. Before installing: (1) verify the npm package and author (@jackwener/opencli) — review the package source/release on npm/GitHub; (2) review the Browser Bridge extension's permissions and provenance; (3) avoid using this with highly sensitive accounts or run it in a dedicated browser profile with only the accounts you intend to expose; (4) be aware some commands perform write actions (send messages, downloads) and additional tools (yt-dlp) may be required; (5) prefer read-only usage and test in a controlled environment. If the publisher or upstream project is unknown or you cannot audit the code and extension, consider this higher risk and treat it accordingly.

Type: OpenClaw Skill Name: opencli-skills Version: 1.0.1 The skill bundle provides a wrapper for 'opencli', a tool designed to automate data extraction and interaction across over 30 platforms (including WeChat, Twitter, Discord, and Boss Zhipin) by leveraging a 'Browser Bridge' extension to reuse active Chrome login sessions. While the functionality aligns with the stated purpose, the skill grants the agent broad, high-risk capabilities such as reading private messages, sending posts, and accessing sensitive financial or recruitment data without API restrictions. This extensive access to authenticated user sessions across multiple services represents a significant risk for data exfiltration or unauthorized account activity if the agent is misdirected. (Files: SKILL.md, _meta.json; Dependency: @jackwener/opencli)