Oto Sessions

Manage authenticated browser sessions for any website with Oto, enabling saving, listing, deleting, and automating multiple accounts without re-authenticating.

This skill is coherent: it wraps an external Oto framework to manage local browser sessions and includes small CLI wrappers that call into that framework. Before installing, review and trust the referenced Oto repository (https://github.com/mbahar/oto) and its package.json/dependencies because npm install will download Playwright and other packages that run native code. Confirm session files will be stored locally and protected (SKILL.md claims chmod 600 and local-only storage). If you share a machine, be aware that a running browser session can access any accounts you have logged into in that browser. If you need higher assurance, inspect ~/oto/lib/session-manager and the npm dependency tree (npm audit) before use.

Type: OpenClaw Skill Name: oto-sessions Version: 1.0.1 The skill provides high-risk browser automation and session management capabilities, including the ability to launch authenticated browsers and expose WebSocket debugging endpoints (launch-session.js). It relies on an external framework installed via git clone from a GitHub repository (https://github.com/mbahar/oto.git), which introduces a supply chain risk. While the documentation (SKILL.md, SETUP.md) emphasizes local storage and security measures like chmod 600, the inherent risk of handling sensitive authentication sessions and providing remote browser control warrants a suspicious classification.