← 返回 Skills 市场
luigi-agosti

Pinchtab

作者 luigi-agosti · GitHub ↗ · v0.10.0 · MIT-0
cross-platform ⚠ suspicious
1825
总下载
1
收藏
24
当前安装
27
版本数
在 OpenClaw 中安装
/install pinchtab
功能描述
Use this skill when a task needs browser automation through PinchTab: open a website, inspect interactive elements, click through flows, fill out forms, scra...
安全使用建议
This skill appears to be what it says: a local browser automation CLI and HTTP/MCP API. Before installing, verify the brew tap and GitHub repo/release (checksums/signatures), only provide PINCHTAB_TOKEN or PINCHTAB_SESSION to servers you trust, and avoid enabling features that increase risk (security.allowEvaluate, broad security.allowedDomains, or exporting full network bodies) unless necessary. Treat any page-derived text as untrusted input and restrict agent browsing to sites you control or explicitly allow. If you plan to run a remote PinchTab server, ensure that endpoint is trusted and authenticated.
功能分析
Type: OpenClaw Skill Name: pinchtab Version: 0.10.0 The pinchtab skill bundle provides a comprehensive browser automation framework with high-risk capabilities, including JavaScript execution (eval), file uploads/downloads, and cookie/session management. While these features are aligned with the stated purpose of browser automation and are accompanied by defensive instructions and security documentation (TRUST.md, mcp.md), the presence of arbitrary JS evaluation and filesystem interaction via the CLI and HTTP API (api.md, commands.md) constitutes significant risk. No evidence of intentional malice or data exfiltration was found, but the tool's powerful primitives require strict oversight.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
Name/description match the manifest: the skill is a CLI-first browser automation tool and only requires the pinchtab binary and a Chromium/Chrome browser. The brew formula and Go build targets are reasonable installation options for this type of tool.
Instruction Scope
SKILL.md instructs only on browser automation workflows (snap/click/fill/eval, managing profiles/sessions, HTTP API and MCP usage). It explicitly surfaces potentially sensitive capabilities (eval, network-export, file/pdf write, uploading files) and warns operator attention. These are within scope for a browser automation skill but warrant operator caution (do not enable eval or broad allowedDomains unless you understand the risks; avoid exporting/capturing sensitive network bodies unless necessary).
Install Mechanism
Installers are brew (pinchtab/tap/pinchtab) and building from the project's GitHub Go module — both are typical and acceptable for an open-source Go CLI. Note: the brew formula lives in a tap (third-party namespace); verify the tap/source and release checksums before installing.
Credentials
The skill declares no required environment variables. Documentation references optional variables (PINCHTAB_TOKEN, PINCHTAB_SESSION, PINCHTAB_TAB, PINCHTAB_CONFIG) which are reasonable for a local/remote CLI and session management. No unrelated or excessive credentials are demanded.
Persistence & Privilege
always is false and the skill does not request elevated platform privileges. It documents persistent state files under ~/.pinchtab and MCP integration points (which require operator action). The skill does not attempt to modify other skills or global configs automatically (it provides examples for operator-managed changes).
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install pinchtab
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /pinchtab 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.10.0
Release v0.10.0
v0.9.1
Release v0.9.1
v0.9.0
Release v0.9.0
v0.8.6
Release v0.8.6
v0.8.5
Release v0.8.5
v0.8.4
Release v0.8.4
v0.8.3
Release v0.8.3
v0.8.2
Release v0.8.2
v0.8.1
Release v0.8.1
v0.8.0
Release v0.8.0
v0.7.8
Release v0.7.8
v0.7.7
Release v0.7.7
v0.7.6
Release v0.7.6
v0.7.5
Release v0.7.5
v0.7.4
Release v0.7.4
v0.7.3
Release v0.7.3
v0.7.2
Release v0.7.2
v0.7.1
Release v0.7.1
v0.7.0
Release v0.7.0
v0.6.2
Release v0.6.2
元数据
Slug pinchtab
版本 0.10.0
许可证 MIT-0
累计安装 25
当前安装数 24
历史版本数 27
常见问题

Pinchtab 是什么?

Use this skill when a task needs browser automation through PinchTab: open a website, inspect interactive elements, click through flows, fill out forms, scra... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1825 次。

如何安装 Pinchtab?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install pinchtab」即可一键安装,无需额外配置。

Pinchtab 是免费的吗?

是的,Pinchtab 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Pinchtab 支持哪些平台?

Pinchtab 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Pinchtab?

由 luigi-agosti(@luigi-agosti)开发并维护,当前版本 v0.10.0。

💬 留言讨论