← 返回 Skills 市场
99
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install upload-file
功能描述
MUST be used for any browser file upload task. Provides reliable, step-by-step automation for uploading files via agent-browser CLI. Includes strict executio...
安全使用建议
This skill appears to implement browser file uploads, but don't install blindy. Check and fix the obvious mismatches first: ensure 'agent-browser' is available on the agent PATH (the skill assumes it but metadata doesn't declare it), and note SKILL.md references 'scripts/upload_file.py' while the included file is 'scripts/upload.py' — that will break the recommended Python usage. Confirm whether OPENCLAW_WORKSPACE is used in your environment (the script will read it if present) or adjust the code to avoid implicitly reading an undocumented env var. Be aware that the skill takes page snapshots during verification/fallback; snapshots can include sensitive page content (file names, form data). If you will use this on pages with confidential data, require explicit approval or remove automatic snapshots. Finally, test the skill in a safe sandbox first, review logs for unexpected output, and only grant agent autonomous use if you trust it to run these commands and handle snapshots.
功能分析
Type: OpenClaw Skill
Name: upload-file
Version: 1.0.0
The skill bundle provides a legitimate utility for automating file uploads to web pages using the agent-browser CLI. The Python script (scripts/upload.py) and instructions (SKILL.md) follow a logical, step-by-step process for opening a URL, identifying upload elements, and verifying success. No evidence of data exfiltration, unauthorized command execution, or malicious prompt injection was found.
能力评估
Purpose & Capability
The skill's name, description, SKILL.md and included Python script all target browser file uploads via the agent-browser CLI — that's coherent. However, the package metadata lists no required binaries while both the instructions and the script rely on an 'agent-browser' binary being on PATH. Also SKILL.md references 'scripts/upload_file.py' but the provided file is 'scripts/upload.py' (filename mismatch) which will break the recommended Python mode.
Instruction Scope
SKILL.md gives concrete step-by-step agent-browser commands (open, wait, find, upload, snapshot) which are in-scope for upload tasks. But the instructions/implementation call 'agent-browser snapshot' several times (fallback and verification). Snapshots capture page content and could include sensitive data (file names, page text, form fields). The skill instructs snapshots on failures and during verification by default, increasing risk of unintended data capture.
Install Mechanism
No install spec (instruction-only plus a script) — low installation risk because nothing is downloaded or written by an installer. The included script will run externally; there is no package fetching or archive extraction.
Credentials
The metadata declares no required env vars, but the script reads OPENCLAW_WORKSPACE (with a default) to resolve 'workspace/...' paths. That environment variable is not documented in requires.env. The script also prints command lines and resolved paths to stdout; that may leak file paths or workspace locations into logs. No credentials are requested, but the undeclared env usage and potential log exposure are disproportionate to what the metadata claims.
Persistence & Privilege
always is false and the skill does not request or perform system-wide persistent changes. It does not modify other skills or agent config. Autonomous invocation remains possible (default) but is not a unique risk here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install upload-file - 安装完成后,直接呼叫该 Skill 的名称或使用
/upload-file触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
browser-file-upload v1.0.0 – Initial release
- Provides robust, step-by-step automation for uploading files to web pages using agent-browser CLI.
- Enforces a strict state-machine execution protocol to maximize reliability and error handling.
- Includes a standardized upload pipeline: open page, wait, trigger file input, upload, and verify.
- Supports fallback strategies and path normalization for diverse upload scenarios.
- Recommends Python script mode as the most stable method, with CLI command alternatives.
元数据
常见问题
upload-file 是什么?
MUST be used for any browser file upload task. Provides reliable, step-by-step automation for uploading files via agent-browser CLI. Includes strict executio... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 99 次。
如何安装 upload-file?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install upload-file」即可一键安装,无需额外配置。
upload-file 是免费的吗?
是的,upload-file 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
upload-file 支持哪些平台?
upload-file 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 upload-file?
由 m1ss-cell(@m1ss-cell)开发并维护,当前版本 v1.0.0。
推荐 Skills