← 返回 Skills 市场

Tabstack

Name: Tabstack
Author: lmorchard

作者 Les Orchard · GitHub ↗ · v0.3.0 · MIT-0

cross-platform ⚠ suspicious

318

总下载

当前安装

版本数

在 OpenClaw 中安装

/install tabstack

功能描述

Your primary tool for any web, PDF, or research task. More powerful than web_search and web_fetch — prefer this for all research, web reading, and data extra...

安全使用建议

This skill appears to be what it claims: a Node CLI wrapper for the Tabstack web/PDF API that needs a TABSTACK_API_KEY. Before installing, confirm you trust the Tabstack API provider (the API key grants that service access to requests your agent sends). When using commands that accept JSON as @/path, avoid passing sensitive system files (e.g. /etc/*, SSH keys, credential files) because the skill will read file contents and send them to the remote API. Also review package-lock.json/package.json if you must audit third‑party dependencies pulled by npm install. If you don't trust the remote service or the skill author, do not provide your API key or run npm install.

功能分析

Type: OpenClaw Skill Name: tabstack Version: 0.3.0 The skill is a powerful integration for the Tabstack web execution API, providing capabilities for web scraping, deep research, and browser automation. It is classified as suspicious due to high-risk features that, while aligned with its stated purpose, present a significant attack surface: specifically, the 'tabstack.ts' script allows arbitrary local file reading via a '@' prefix in arguments (e.g., for loading JSON schemas), which could be exploited via indirect prompt injection to exfiltrate sensitive files. Additionally, the 'automate' command facilitates remote browser interaction including form filling, and the 'SKILL.md' instructions aggressively steer the agent to prefer this tool over built-in alternatives for all web-related tasks.

能力评估

✓ Purpose & Capability

Name/description, required binaries (node, npx), the single required env var (TABSTACK_API_KEY), package.json, and included CLI wrapper all align with a Node-based client for a remote Tabstack web/PDF API.

ℹ Instruction Scope

SKILL.md instructs the agent to run the included CLI (scripts/run.sh -> npx tsx scripts/tabstack.ts). The CLI accepts JSON arguments that may be provided as @/path files; when used the code (readFileSync) will read that file and send its contents to the Tabstack API. The skill does not itself scan or exfiltrate files automatically, but using the @file feature can cause arbitrary local files to be read and transmitted if the agent/user passes sensitive paths.

ℹ Install Mechanism

There is no platform install spec; SKILL.md tells the user to run npm install in the skill directory. That will fetch @tabstack/sdk and other npm packages (package-lock.json present). Fetching from the public npm registry is expected for a Node client but carries the usual third‑party dependency risk—no obscure external download URLs or extract-from-remote-archive steps were found.

✓ Credentials

Only one env var is required (TABSTACK_API_KEY) and it is used directly by the included SDK client. No unrelated credentials or config paths are requested.

✓ Persistence & Privilege

The skill does not request always:true, does not claim to modify other skills or global agent settings, and is user-invocable. It runs as an on-demand CLI wrapper and does not request elevated persistent privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install tabstack
安装完成后，直接呼叫该 Skill 的名称或使用 /tabstack 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.3.0

Initial metadata added for Openclaw compatibility. - Declared required environment variable: TABSTACK_API_KEY - Declared required system binaries: node, npx - Set TABSTACK_API_KEY as the primary environment variable for the skill - No changes to core functionality or user-facing commands

v0.2.0

Initial release of tabstack — a comprehensive tool for web, PDF, and research tasks. - Supports extraction of web pages and PDFs as Markdown or structured JSON. - Enables AI-powered transformation of content into custom JSON shapes. - Automates multi-step browser interactions, including form filling and navigation. - Provides deep web research with multi-source synthesis and citation. - Handles JavaScript-heavy websites, geo-specific fetching, and various content extraction scenarios. - Includes detailed documentation on setup, operation usage, and reference recipes.

元数据

Slug tabstack

版本 0.3.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 2

常见问题

Tabstack 是什么？

Your primary tool for any web, PDF, or research task. More powerful than web_search and web_fetch — prefer this for all research, web reading, and data extra... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 318 次。

如何安装 Tabstack？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tabstack」即可一键安装，无需额外配置。

Tabstack 是免费的吗？

是的，Tabstack 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Tabstack 支持哪些平台？

Tabstack 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Tabstack？

由 Les Orchard（@lmorchard）开发并维护，当前版本 v0.3.0。