OpenWeb

Typed JSON access to 90+ real websites — Google, Amazon, Reddit, YouTube, GitHub, Instagram, Bloomberg, Zillow, and more — across search, shopping, travel, f...

This skill is coherent with its stated purpose (a CLI that drives a browser to read and interact with many websites), but it operates at a high privilege level: it expects to control a managed Chrome session, read cookies/localStorage/window globals, and can perform write actions on sites as your logged-in user. Before installing or enabling: - Inspect the npm package and upstream repository (https://github.com/openweb-org/openweb and https://getopenweb.com). Confirm the publisher and review recent code or package contents if possible. - Review $OPENWEB_HOME/config.json after installation before running: check for any surprising settings or embedded secrets, and keep this directory isolated (use a directory dedicated to openweb). - Consider running the CLI in a disposable environment or with an isolated browser profile (not your primary browser or profile) so captures and token reads don't touch your main sessions. - Treat write operations with caution: the docs say writes should prompt; keep an eye out for prompts and audit any agent actions that perform mutations. Avoid giving the agent blanket consent to run writes autonomously. - If you cannot audit the npm package source, avoid installing it on sensitive systems or provide it only to low-privilege test environments. If you want, I can: (1) list concrete checks to run on the npm package before install, (2) suggest a safe runtime setup (isolated Chrome profile, limited OPENWEB_HOME), or (3) help craft a minimal config.json template that avoids storing secrets.

Type: OpenClaw Skill Name: openweb Version: 0.1.5 The `openweb` skill bundle is a comprehensive web automation framework designed to allow AI agents to interact with over 90 websites using a user's local authenticated browser session. It provides a structured environment for site discovery, traffic capture, and API curation, utilizing a clear permission model (`read`, `write`, `delete`, `transact`) to manage risks associated with state-changing actions. While the skill possesses broad capabilities to access sensitive data (such as DMs or profile information), these are strictly aligned with its stated purpose of bridging CLI and web interfaces, and the documentation includes explicit privacy assurances (no telemetry/exfiltration) and safety guidelines for developers (e.g., in `references/cli.md` and `add-site/guide.md`).