← 返回 Skills 市场
Super Lobster
作者
MrHeroJack
· GitHub ↗
· v1.0.0
· MIT-0
104
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install super-lobster
功能描述
Performs aggressive web research and data extraction via local scripts, browser rendering, crawling, and command execution on a China-networked gateway.
安全使用建议
This skill provides useful scraping tools, but it also tells the agent to write and run arbitrary code as root and to invoke host Chrome without declaring that dependency. Before installing: 1) Verify the host has /usr/bin/google-chrome-stable and the required Python packages (requests, bs4, trafilatura) or run in an isolated sandbox. 2) Audit the bundled scripts line-by-line (they are short) and fix any bugs; note fetch_url.py contains a likely string/newline bug. 3) Restrict where the agent can write and execute code (avoid /root if possible) and limit outbound network access to only needed endpoints. 4) If you don't fully trust the skill author or the gateway environment, do not enable this skill on production or sensitive hosts.
功能分析
Type: OpenClaw Skill
Name: super-lobster
Version: 1.0.0
The skill bundle provides powerful web research and local execution capabilities, including a headless browser and a site crawler. It is classified as suspicious due to high-risk configurations such as the '--no-sandbox' flag in chrome_dump_dom.sh and render_url.py, which significantly increases the host's attack surface if the browser encounters malicious web content. Additionally, the scripts (fetch_url.py, render_url.py) lack input validation on the URL parameter, creating a risk for Server-Side Request Forgery (SSRF) or local file access via file:// schemes.
能力评估
Purpose & Capability
Name/description match the included tools: fetch, render, extract, and crawl scripts for aggressive web research. However, the skill invokes /usr/bin/google-chrome-stable and requires Python libraries (requests, BeautifulSoup, trafilatura) but declares no required binaries or dependencies — a mismatch between claimed needs and actual files.
Instruction Scope
SKILL.md explicitly allows writing and executing arbitrary Python/shell programs under /root/.openclaw/workspace/memory/tmp and running local commands (including headless Chrome). That grants the agent broad ability to run arbitrary code and make network requests beyond narrowly-scoped scraping, which could be used to exfiltrate data or perform other actions outside the stated task.
Install Mechanism
No install spec (instruction-only) and code files are included in the skill bundle. This minimizes remote-download risk, but the runtime depends on host-provisioned binaries (chrome) and Python packages that may not exist — the skill assumes host tooling that isn't declared.
Credentials
The skill requests no credentials or env vars, yet the tools will perform arbitrary outbound network requests and require host executables and Python packages. The lack of declared required binaries/deps and the instruction to write code as root are disproportionate to a simple scraper and reduce transparency about needed privileges.
Persistence & Privilege
always is false (good), but the SKILL.md directs creating and executing scripts under /root paths. That effectively grants persistent local execution capability on the gateway for this skill's user context, increasing blast radius if the skill or its outputs are malicious or flawed.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install super-lobster - 安装完成后，直接呼叫该 Skill 的名称或使用
/super-lobster触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release with aggressive web research and automation capabilities:
- Provides tools for direct URL fetching, main content extraction, browser DOM rendering, and site crawling.
- Designed for operation in a China network environment—does not assume western search engines or APIs are reachable.
- Prefers local execution for scripting, scraping, parsing, and automation tasks.
- Includes clear default workflows and tool usage guidelines for efficient information retrieval and processing.
- Outlines specific rules for browser usage, coding, and network practices to optimize reliability and resource management.
元数据
常见问题
Super Lobster 是什么？
Performs aggressive web research and data extraction via local scripts, browser rendering, crawling, and command execution on a China-networked gateway. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 104 次。
如何安装 Super Lobster？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install super-lobster」即可一键安装，无需额外配置。
Super Lobster 是免费的吗？
是的，Super Lobster 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Super Lobster 支持哪些平台？
Super Lobster 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Super Lobster？
由 MrHeroJack（@mrherojack）开发并维护，当前版本 v1.0.0。
推荐 Skills