← 返回 Skills 市场
236
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install web-auto-analyzer
功能描述
Automatically analyze websites for performance metrics and audit issues using Lighthouse.
安全使用建议
What to check before installing or running this skill:
1. Confirm metadata mismatch: the registry said no required binaries, but SKILL.md expects node/npm and Lighthouse packages — ensure your environment meets the SKILL.md prerequisites.
2. Inspect automation-script.js for any code that writes out sensitive files or auto-sends data off-host (search for network calls, fetch/http libraries, or hard-coded endpoints). The provided snippet looks normal (lighthouse + chrome-launcher) but some parts were truncated; verify saveResults and memory-write behavior to ensure the skill asks before saving any data.
3. Run it in a safe environment first (local container or VM) and use non-authenticated public URLs to validate behavior. Avoid running against internal or authenticated endpoints until you’ve reviewed the code and confirmed you control credentials.
4. Run npm audit on the dependencies and review package.json versions. Keep Node up-to-date and use a recent Chrome/Chromium.
5. If you need stronger assurance, validate the GitHub repository and publisher identity (homepage is github.com/user/..., which could be a placeholder). Prefer installing from a verified repo or your own copy of the script.
I flagged this skill as suspicious (not clearly malicious) because of the metadata inconsistency and the truncated files that prevent full verification; resolving those points would raise confidence.
功能分析
Type: OpenClaw Skill
Name: web-auto-analyzer
Version: 1.1.1
The skill bundle is a legitimate automated website analyzer using the Lighthouse library. The core logic in `automation-script.js` wraps standard Lighthouse functionality to perform performance, accessibility, and SEO audits locally. It includes comprehensive documentation and templates for tracking results. No evidence of data exfiltration, malicious execution, or prompt injection was found; the script's behavior is entirely consistent with its stated purpose of web auditing.
能力评估
Purpose & Capability
Name/description match the included files: the package contains a Node script (automation-script.js), package.json, and documentation for running Lighthouse/Chrome. However the registry metadata earlier reported no required binaries/env, while SKILL.md metadata explicitly requires node, npm and npm packages (lighthouse, chrome-launcher). That mismatch is an incoherence you should confirm with the publisher.
Instruction Scope
SKILL.md instructs running the local Node script and saving JSON/HTML reports to ./results; it warns about authenticated URLs and says to ask before saving to memory. The runtime instructions only reference local Node/npm, Lighthouse, and Chrome; they do not ask to read unrelated host files or environment variables. Note: running an audit fetches the target URL (normal) and may trigger third-party trackers on the audited site — avoid auditing authenticated/internal URLs unless you understand the implications.
Install Mechanism
No install spec is included (instruction-only style) and the package files are provided directly. package.json lists lighthouse and chrome-launcher as dependencies — expected for purpose. There are no downloads from obscure URLs in the install docs; example Chrome install uses Google-hosted deb, and Puppeteer is suggested as an option. Overall install risk is typical for a Node-based Lighthouse tool.
Credentials
The skill requests no secrets or environment variables in the registry metadata, which is appropriate. But SKILL.md metadata requires node/npm and npm packages — the registry-level 'required binaries: none' contradicts that. Also the skill will access the network to fetch audited URLs (expected) and writes reports to disk. Confirm there are no hidden env/credential reads in the rest of the code (some files truncated).
Persistence & Privilege
always is false and user-invocable is true. Autonomous invocation is allowed (platform default) but not combined here with broad credential access. SKILL.md states the skill will ask before saving to memory; verify automation-script.js actually prompts or requires confirmation before persisting any user-tracking memory.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install web-auto-analyzer - 安装完成后，直接呼叫该 Skill 的名称或使用
/web-auto-analyzer触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.1
- Bumped version to 1.1.1.
- Updated metadata in SKILL.md and package files to reflect version change.
- No functional changes to features or documentation content.
v1.1.0
Chrome DevTools Auto Analyzer 1.1.0
- Adds detailed usage instructions and core rules for automating Lighthouse audits, including prerequisite checks, metric extraction, and error handling.
- Introduces explicit tables and quick references for commands, metrics, reports, and troubleshooting steps.
- Clarifies storage and privacy policies, now requiring user confirmation before saving analysis data to memory.
- Improves actionable reporting by linking specific fixes and checklists for each audit issue.
- Expands error troubleshooting guidance for common setup and runtime problems.
元数据
常见问题
Web Auto Analyzer 是什么？
Automatically analyze websites for performance metrics and audit issues using Lighthouse. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 236 次。
如何安装 Web Auto Analyzer？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install web-auto-analyzer」即可一键安装，无需额外配置。
Web Auto Analyzer 是免费的吗？
是的，Web Auto Analyzer 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Web Auto Analyzer 支持哪些平台？
Web Auto Analyzer 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Web Auto Analyzer？
由 jiahaoli（@lj-hao）开发并维护，当前版本 v1.1.1。
推荐 Skills