osm-ai-bridge

OSM AI Bridge - OpenClaw多AI协作桥接器。通过CDP连接浏览器，支持自动启动、反检测脚本注入、Cookie/LocalStorage访问。实现Ask/Discuss/Verify三种协作模式。

This skill appears to do what it says, but it has sensitive capabilities: it injects anti-detection JS and reads cookies/localStorage from your browser. Before installing or running it, consider: (1) only run it if you trust the author and source code; (2) do not use it against sites where automation or anti-detection bypassing would violate terms of service; (3) run it against a separate/testing browser profile (or VM) rather than your primary logged-in profile to avoid leaking session tokens; (4) inspect the scripts yourself (they are included) and consider instrumenting network monitoring to ensure no data is exfiltrated; (5) ensure playwright and dependencies are installed from official sources. If you need higher assurance, run the skill in a sandbox or ephemeral environment and/or request the skill author to provide reproducible builds and code provenance.

Type: OpenClaw Skill Name: osm-ai-bridge Version: 1.0.4 The skill bundle contains functionality to programmatically extract all browser cookies and local storage data (found in `scripts/osm_ai_bridge.py`). It also launches a browser instance with remote debugging enabled and injects anti-detection scripts to bypass bot security. While these features are documented in `SKILL.md` as part of an 'AI bridge' for automating web-based AI chats, the collection of sensitive session data is a high-risk capability that could be used for session hijacking, even though no active exfiltration to a remote server was found in the provided code.