← 返回 Skills 市场
418
总下载
0
收藏
1
当前安装
6
版本数
在 OpenClaw 中安装
/install uimap
功能描述
Provides the accurate URL and step-by-step click operation path for completing tasks on websites. If the task involves operations on a web app, use this skil...
安全使用建议
This skill's behavior largely depends on an external CLI and an OAuth login. Before installing or using it: (1) Do NOT run the curl | bash installer from s.dwimg.top; treat that as high-risk. (2) Prefer to install only from the official npm package after verifying the package owner, source repository, and recent publish history on npmjs.com. Inspect the package source or GitHub repo for postinstall scripts and what the CLI does. (3) When you run uimap login, check the OAuth provider and requested scopes — avoid granting broad permissions you don't understand. (4) If you must try it, run the CLI in a sandboxed environment (VM/container) first and monitor network activity. (5) Ask the publisher for an official homepage, repository link, and a copy of the install script for review; lack of those increases risk. Providing those artifacts would increase confidence and could change this assessment to benign.
功能分析
Type: OpenClaw Skill
Name: uimap
Version: 0.1.9
The skill bundle documentation in SKILL.md promotes a high-risk installation method using 'curl | bash' from a non-standard domain (s.dwimg.top), which is a common vector for executing unverified remote payloads. While the tool's stated purpose of UI mapping is plausible, the combination of remote script execution and interactive OAuth login (uimap login) warrants caution as it could be used to compromise the agent's environment or capture credentials.
能力评估
Purpose & Capability
The skill claims to provide URLs and step-by-step UI operation paths and the SKILL.md describes a CLI (uimap) and search/login commands that match that purpose. However, the registry metadata contains no install spec even though the runtime instructions explicitly require installing an external CLI; the disconnect is noteworthy but not necessarily malicious.
Instruction Scope
Instructions do not ask the agent to read local files or unrelated environment variables. They do instruct the user to run a CLI and authenticate via browser OAuth — which implies transmitting user queries and possibly site-specific data to a remote service. The SKILL.md does not document what data is sent or what OAuth scopes are requested.
Install Mechanism
Although an npm package is referenced (reasonable), the SKILL.md also recommends installing via a curl|bash script hosted at https://s.dwimg.top — a short/unfamiliar domain and a curl|bash install pattern are high-risk (arbitrary code execution). A global npm install can also run postinstall scripts; neither install path is captured in the registry metadata for review.
Credentials
The skill declares no required environment variables or credentials in the registry metadata. However, the runtime flow requires OAuth login to a remote service and will create persistent tokens/credentials in the user's environment or browser. The lack of declared primary credentials or explanation of required OAuth scopes is a gap.
Persistence & Privilege
The skill itself is instruction-only and not always-enabled. Installing the recommended CLI (npm global install or curl script) and performing OAuth login will create persistent artifacts (binaries, tokens) on the user's system — normal for a CLI but not disclosed in the registry metadata. The skill does not request elevated platform-wide privileges in its metadata.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install uimap - 安装完成后，直接呼叫该 Skill 的名称或使用
/uimap触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.9
- Updated to version 0.1.9.
- Shortened the skill description for clarity and removed redundant instructions about when to use the skill.
v0.1.8
- Updated skill name casing and version to 0.1.8.
- Expanded description to emphasize using this skill for guessing URLs and opening websites in the browser.
- Updated CDN installation command with a new URL.
- Simplified the login instructions; region is now optional and set during installation if needed.
- Clarified usage guidance for when and how to use this skill.
v0.1.5
- Added CDN installation option alongside npm in installation instructions.
- Updated login instructions to require explicit server region selection using --region <World|China>.
- Removed interactive region selection; the user must now specify the region in the command.
- Included a note to always prompt users for their server region before running the login command.
- Improved clarity and formatting throughout the SKILL.md.
v0.1.4
- Reorganized and clarified documentation structure.
- Added clear sections for prerequisites, installation, and login instructions.
- Moved the search usage instructions and examples to a more prominent position.
- Improved readability and streamlined guidance for installing and using the CLI.
v0.1.3
- Updated skill description for improved clarity and focus on step-by-step operation paths and accurate URLs.
- Bumped version to 0.1.3.
v0.1.2
UIMap v0.1.2 Changelog
- Added SKILL.md with detailed usage instructions and CLI commands.
- Improved documentation for installation, login, and search functionality.
- Included examples for searching step-by-step website operation guides.
- Clarified available command-line options and expected outputs.
元数据
常见问题
Uimap 是什么？
Provides the accurate URL and step-by-step click operation path for completing tasks on websites. If the task involves operations on a web app, use this skil... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 418 次。
如何安装 Uimap？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install uimap」即可一键安装，无需额外配置。
Uimap 是免费的吗？
是的，Uimap 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Uimap 支持哪些平台？
Uimap 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Uimap？
由 delai（@delai）开发并维护，当前版本 v0.1.9。
推荐 Skills