← 返回 Skills 市场
gwqwghksvq-sketch

tekin

作者 tekin · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
2319
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install tekin
功能描述
A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured commands.
安全使用建议
This skill appears to be an instruction-only wrapper for the 'agent-browser' CLI, but the registry entry name ('tekin') doesn't match the documented package ('agent-browser') and there is no source/homepage listed. Before installing or allowing the agent to use this skill: 1) Verify the exact npm package name and the upstream repository (confirm maintainer/ownership and check recent releases). 2) Inspect the npm package or GitHub source yourself (or review its SHA) before running npm install -g. 3) Be cautious: the CLI can upload local files, set HTTP headers/credentials, manipulate cookies/storage, and visit arbitrary websites — these capabilities can exfiltrate sensitive data if misused. 4) Run the tool in a sandboxed environment or VM when testing, and avoid granting the agent autonomous access to sensitive files or secrets. 5) If you need higher assurance, ask the publisher for the source URL and a reproducible install method (and prefer well-known package names or official project pages).
功能分析
Type: OpenClaw Skill Name: tekin Version: 1.0.0 The skill is classified as suspicious due to the broad range of powerful capabilities exposed through the `agent-browser` CLI, granted by `allowed-tools: Bash(agent-browser:*)` in `SKILL.md`. While these features are legitimate for browser automation, they present significant risk if abused. Key indicators include the ability to upload local files (`agent-browser upload`), execute arbitrary JavaScript within the browser context (`agent-browser eval`), access and manipulate browser cookies and local storage (`agent-browser cookies`, `agent-browser storage`), save browser session state to disk (`agent-browser state save`), and intercept/mock network requests (`agent-browser network route`). These capabilities, without explicit malicious instructions, make the skill highly susceptible to prompt injection or misuse by a compromised agent.
能力评估
Purpose & Capability
SKILL.md documents a wrapper around the 'agent-browser' CLI (npm/GitHub references) which fits the stated purpose of browser automation. However the registry entry calls the skill 'tekin' while the instructions and install examples refer to 'agent-browser' and a GitHub repo (vercel-labs/agent-browser). The mismatch between skill name/registry metadata and the documented upstream project, plus a missing source/homepage in the registry metadata, reduces traceability and is unexpected.
Instruction Scope
The instructions are narrowly focused on using agent-browser CLI commands (open, snapshot, click, fill, screenshot, record, upload, set headers/credentials, etc.) and do not instruct unrelated system reads. That said, the documented capabilities include uploading local files, setting arbitrary HTTP headers, setting HTTP basic auth credentials, and controlling geolocation and storage — all of which are legitimate for a browser automation tool but can be used to exfiltrate sensitive local data or forward credentials to remote sites. This is expected functionality but worth flagging to users as a privacy risk.
Install Mechanism
This is an instruction-only skill (no install spec in the registry), so nothing is written by the platform itself. SKILL.md recommends 'npm install -g agent-browser' or building from a GitHub repo. Recommending npm/GitHub is normal, but because the registry metadata lacks a source/homepage and the skill name doesn't match the package name, verify the exact npm package and upstream repo before running installs. Installing from npm/git will pull third‑party code onto your system.
Credentials
The skill only requires node and npm binaries (as documented). It does not request environment variables, credentials, or config paths in the registry metadata. That is proportionate for a wrapper around an npm CLI.
Persistence & Privilege
The skill does not request always:true and does not declare any persistent or cross-skill configuration changes. It is user-invocable and allows autonomous invocation by the agent by default (the platform default), which is expected for skills of this type.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install tekin
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /tekin 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Agent Browser 1.0.0 initial release - Introduces a fast Rust-based CLI tool for headless browser automation, with fallback to Node.js. - Enables navigation, form filling, clicking, typing, snapshots, screenshots, PDF export, and video recording through structured commands. - Provides commands for advanced browser automation: element refs, semantic locators, state management, network interception, cookies/storage handling, and JavaScript evaluation. - Features comprehensive workflow and quick start instructions for automating common web tasks. - Includes npm-based and from-source installation options.
元数据
Slug tekin
版本 1.0.0
许可证
累计安装 1
当前安装数 1
历史版本数 1
常见问题

tekin 是什么?

A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured commands. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2319 次。

如何安装 tekin?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tekin」即可一键安装,无需额外配置。

tekin 是免费的吗?

是的,tekin 完全免费(开源免费),可自由下载、安装和使用。

tekin 支持哪些平台?

tekin 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 tekin?

由 tekin(@gwqwghksvq-sketch)开发并维护,当前版本 v1.0.0。

💬 留言讨论