← 返回 Skills 市场
349
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install pinchtab-helper
功能描述
控制并自动化操作浏览器，支持导航、快照、点击、输入、提交表单和截图，需预先安装并启动 PinchTab 服务。
安全使用建议
This skill appears to do what it says (drive a browser via PinchTab) but take precautions before installing or running it: 1) Do not run curl | bash from an unfamiliar domain without auditing the script — prefer official package sources (npm, Docker images you inspect, or verified GitHub releases). 2) Run PinchTab in an isolated environment (dedicated profile, VM, or container) because browser automation can access sensitive pages and credentials. 3) Ensure the service binds only to localhost and avoid setting BRIDGE_TOKEN or exposing the service unless you fully trust and control the remote endpoint. 4) If you need to use this skill in production, verify the pinchtab binary source and the install script contents first. If you want, I can help inspect the install script or suggest safer installation alternatives.
功能分析
Type: OpenClaw Skill
Name: pinchtab-helper
Version: 0.1.0
The skill bundle instructs the AI agent to install and execute an external browser automation tool using a high-risk 'curl | bash' command from pinchtab.com (SKILL.md). While the tool's stated purpose is efficient browser control, the promotion of unverified remote script execution and the broad capabilities granted (navigating, clicking, and capturing browser data) represent a significant security risk. There is no evidence of explicit malicious intent, but the installation pattern is a common vector for supply chain attacks.
能力评估
Purpose & Capability
Name/description claim (control and automate a browser via PinchTab) matches the SKILL.md: all commands and HTTP endpoints are about launching instances, navigation, snapshots, clicks, fills, and screenshots. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions are narrowly scoped to running the PinchTab CLI or calling its local HTTP API (http://localhost:9867). They do not instruct reading arbitrary host files or exporting data to third parties. However, the doc suggests using BRIDGE_TOKEN for remote access (not declared as a required env var) and instructs launching a network service — which if misconfigured could expose browser sessions and their data.
Install Mechanism
Although the skill itself has no install spec, SKILL.md explicitly suggests installing via curl -fsSL https://pinchtab.com/install.sh | bash (and alternatives like npm or Docker). Curl|bash from an unverified domain is high risk because it downloads and executes remote code. The npm and Docker alternatives are reasonable, but the guidance to run the remote install script should be treated as a red flag unless the domain and script are audited.
Credentials
The skill declares no required env vars or secrets (which is appropriate). SKILL.md mentions an optional BRIDGE_TOKEN for remote access; this token is not declared in metadata and would grant broad access if used. Users should not set or expose such tokens unless they understand the security implications.
Persistence & Privilege
always is false, no install artifacts are declared, and the skill does not request modifying other skills or system-wide configs. Autonomous invocation is allowed (default) but that is expected for skills and not flagged alone.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pinchtab-helper - 安装完成后，直接呼叫该 Skill 的名称或使用
/pinchtab-helper触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of pinchtab-helper.
- Introduces browser automation using PinchTab for efficient and stable control.
- Provides setup instructions for macOS, Linux, npm, and Docker.
- Documents core PinchTab commands for navigation, clicking, form filling, screenshots, and snapshots.
- Includes HTTP API endpoint details.
- Lists common trigger phrases for skill activation.
- Highlights security and usage best practices.
元数据
常见问题
Pinchtab Helper 是什么？
控制并自动化操作浏览器，支持导航、快照、点击、输入、提交表单和截图，需预先安装并启动 PinchTab 服务。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 349 次。
如何安装 Pinchtab Helper？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pinchtab-helper」即可一键安装，无需额外配置。
Pinchtab Helper 是免费的吗？
是的，Pinchtab Helper 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pinchtab Helper 支持哪些平台？
Pinchtab Helper 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pinchtab Helper？
由 Anonymous（@adminlove520）开发并维护，当前版本 v0.1.0。
推荐 Skills