Playwright Scraper CN

Playwright-based web scraping OpenClaw Skill with anti-bot protection. Successfully tested on complex sites like Discuss.com.hk.

This package appears to be what it says: Playwright scripts for normal and stealth scraping. Before installing or running it, take these precautions: - Inspect and remove or parameterize the hardcoded phone number in scripts/xianyu-login.js (it contains PII and is unnecessary for most uses). - Review all scripts you plan to run (especially xianyu-*.js) — they can automate logins and will print page contents and save screenshots/HTML locally. - Run npm install and Playwright installation in an isolated environment (container or VM). Playwright will download browser binaries (substantial disk/network activity). - If you plan to use stealth/anti-bot features, understand they purposely mask automation (navigator overrides, function toString tampering); only use these where legally and ethically appropriate and consistent with site terms of service. - Check package-lock.json integrity and your npm registry settings (the lockfile references a registry mirror) and prefer official registries if you have policy concerns. - Avoid running the skill with elevated privileges or exposing sensitive accounts; if you need login automation, prefer manual credential injection and avoid storing credentials in code. - If you will allow the agent to invoke the skill autonomously, restrict or monitor that behavior — scraping+evasion can have legal/abuse consequences and increases blast radius if misused. If you want, I can point out the exact lines that set navigator overrides and the hardcoded phone number so you can edit them, or suggest a minimal sandboxed command to test the skill safely.

Type: OpenClaw Skill Name: playwright-scraper-cn Version: 1.2.0 The skill bundle contains undocumented scripts specifically targeting the Xianyu (Goofish) platform, most notably `scripts/xianyu-login.js`, which includes a hardcoded Chinese phone number ('15982192571') and automates a login sequence to trigger SMS verification codes. While the core functionality in `scripts/playwright-stealth.js` appears to be a legitimate anti-bot scraping tool, the inclusion of targeted, undocumented login automation with hardcoded identifiers is highly irregular. This behavior suggests the skill may have been repurposed from a specific botting operation or contains artifacts intended for unauthorized account access, though no direct data exfiltration to external domains was observed.