← 返回 Skills 市场
107
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pw-browser-setup
功能描述
浏览器自动化环境的一键安装、检查和验证工具。 安装 Playwright + Chromium，支持非头模式（模拟真实用户浏览器）和头模式。 包含系统兼容性检查（内存、CPU、磁盘）、依赖安装、Xvfb 虚拟显示器配置。 当用户要求：(1) 安装浏览器自动化环境 (2) 配置 Playwright (3) 检查系...
安全使用建议
This skill is coherent for setting up Playwright + Chromium. Before running it: (1) review and be comfortable with npm installing packages (it may install globally and download ~300MB of browser artifacts); (2) expect some steps require sudo to install system libs/Xvfb—the scripts try non-interactive sudo and will ask you to run commands manually if unavailable; (3) verification opens an external site (baidu.com) and performs outgoing downloads—run in an environment with network access you trust; (4) the SKILL.md shows an optional Feishu upload that would use a TENANT_TOKEN you provide—do not supply sensitive tokens unless you trust the destination; (5) if you need stricter isolation, run the install/verify scripts inside a disposable VM or container and inspect commands before granting sudo.
功能分析
Type: OpenClaw Skill
Name: pw-browser-setup
Version: 1.0.0
The skill bundle contains a code injection vulnerability in `scripts/verify-browser.sh`, where the `$SCREENSHOT_PATH` shell variable is unsafely interpolated into a `node -e` execution string, allowing for arbitrary JavaScript execution. Additionally, `scripts/install-browser.sh` uses `sudo -n` for silent package installation, and `SKILL.md` provides instructions/examples for exfiltrating data (screenshots) to the Feishu API (open.feishu.cn), which are high-risk capabilities even if intended for legitimate use.
能力评估
Purpose & Capability
Name/description match the included scripts: check system requirements, install Xvfb and Playwright/Chromium, and verify by opening a page and taking a screenshot. All required actions and resources in the scripts are coherent with browser setup.
Instruction Scope
Runtime instructions and scripts perform expected checks and operations (read /proc/meminfo, df, sysctl, install packages, run npm/npx and a Node/Playwright verification that visits https://www.baidu.com). SKILL.md includes an optional Feishu (open.feishu.cn) example that references a TENANT_TOKEN environment variable — the scripts do not themselves require or read that variable, but the example shows how a user could upload the screenshot to an external service. Be aware the verification step performs outgoing network requests (to download browsers and to visit baidu.com).
Install Mechanism
No formal install spec (instruction-only) but bundled scripts call npm/npx which will download Playwright and binaries (~hundreds of MB) from Playwright mirrors via the npm ecosystem. This is expected for this purpose but carries standard supply-chain and bandwidth implications (npm downloads, playwright browser artifacts). No arbitrary URL downloads or shorteners are used.
Credentials
The skill declares no required credentials and does not access unexpected env vars. The SKILL.md example shows using a TENANT_TOKEN for Feishu uploads but this is optional and not declared as required — if you supply such a token to send screenshots, that token would be sent to Feishu as shown. The scripts may also attempt to run package managers with sudo (non-interactive sudo -n) and will fall back to asking the user to run commands manually if sudo is unavailable.
Persistence & Privilege
always is false; the skill only creates/supports local helper scripts in its own scripts directory (start-xvfb.sh) and writes caches to the user's standard Playwright cache under $HOME/.cache. It does not modify other skills or system-wide agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pw-browser-setup - 安装完成后，直接呼叫该 Skill 的名称或使用
/pw-browser-setup触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: system compat check, Playwright+Chromium install with Xvfb, Baidu verification screenshot
元数据
常见问题
PW Browser Setup 是什么？
浏览器自动化环境的一键安装、检查和验证工具。 安装 Playwright + Chromium，支持非头模式（模拟真实用户浏览器）和头模式。 包含系统兼容性检查（内存、CPU、磁盘）、依赖安装、Xvfb 虚拟显示器配置。 当用户要求：(1) 安装浏览器自动化环境 (2) 配置 Playwright (3) 检查系... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 107 次。
如何安装 PW Browser Setup？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pw-browser-setup」即可一键安装，无需额外配置。
PW Browser Setup 是免费的吗？
是的，PW Browser Setup 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
PW Browser Setup 支持哪些平台？
PW Browser Setup 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 PW Browser Setup？
由 JerryXn（@jerryxn）开发并维护，当前版本 v1.0.0。
推荐 Skills