Web Automation Helper

浏览器自动化助手。通过Chrome远程调试模式，自动化执行网页操作，包括数据抓取、表单填写、内容发布、截图等。

This package is not malicious, but it is inconsistent: it advertises full browser automation (Playwright, scraping, screenshots) while the only code only discovers the Chrome debug WebSocket URL and prints it. Before installing or using: (1) ask the publisher for the complete implementation or a changelog explaining why advertised features are missing; (2) inspect any future or updated code that implements automation — browser automation can be used to exfiltrate data if a skill issues CDP commands; (3) when testing, run Chrome with a disposable profile and ensure --remote-debugging-port is bound to localhost only (do not expose it to networks); (4) prefer a version that includes explicit dependencies and code implementing claimed features (or remove the skill if the mismatch is unacceptable). If you need real automation, request or verify an implementation that performs navigation/actions and lists required dependencies (e.g., Playwright) so you can review those files too.

Type: OpenClaw Skill Name: web-automation-helper Version: 1.0.1 The skill is a legitimate utility for web automation using the Chrome DevTools Protocol (CDP). The script `scripts/cdp-helper.js` performs a local check to verify if Chrome is running in remote debugging mode on port 9222 and retrieves the WebSocket URL. No evidence of data exfiltration, malicious execution, or prompt injection was found in the code or documentation.