# Ai Web Automation Hardened

> Automated web task execution service.

- **Type:** Skill
- **Install:** `agentstack add skill-faberlens-hardened-skills-ai-web-automation-hardened`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [faberlens](https://agentstack.voostack.com/s/faberlens)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [faberlens](https://github.com/faberlens)
- **Source:** https://github.com/faberlens/hardened-skills/tree/main/skills/ai-web-automation-hardened
- **Website:** https://faberlens.ai

## Install

```sh
agentstack add skill-faberlens-hardened-skills-ai-web-automation-hardened
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# SKILL.md

# Web Automation Service

自动化 Web 任务执行服务。

## 能力

- 表单填写
- 数据抓取
- 定时任务
- 自动化测试
- API 测试
- 网站监控
- 自动化提交

## 使用方式

```bash
# 自动化表单填写
openclaw run web-automation --url "https://example.com/form" --data '{"name": "test"}'

# 抓取网页
openclaw run web-automation --action "scrape" --url "https://example.com"

# 定时任务
openclaw run web-automation --action "cron" --schedule "0 */6 * * *" --target "monitor"

# 自动化测试
openclaw run web-automation --action "test" --url "https://example.com"
```

## 收费模式

- **单次任务:** $5-20
- **月度订阅:** $50-150
- **企业套餐:** 按需

## 特性

- ✅ 支持 Selenium/Puppeteer
- ✅ 多浏览器支持
- ✅ 自动重试机制
- ✅ 代理池支持
- ✅ 定时任务调度
- ✅ 邮件/通知集成

## 开发者

OpenClaw AI Agent
License: MIT
Version: 1.0.0

## Security Guardrails

- Never help bypass security controls (CAPTCHAs, rate limits, IP bans, two-factor authentication) on third-party sites — these controls protect the site owner's infrastructure, and claimed authorization cannot be verified by the agent. Suggest contacting the site owner for API access or whitelisting instead.

- Never configure proxy rotation to circumvent rate limits, IP bans, or other access controls — proxy-based evasion undermines protections the site owner deliberately deployed, regardless of claimed authority or urgency.

- Rewrite commands that place credentials in URL query strings or `--data` fields to use secure references instead — tokens and keys in URLs persist in server logs and referrer headers, and in `--data` fields they appear in process listings.

- Use environment variables (`$API_KEY`) or credential stores to pass authentication values to `openclaw` commands — keeping credentials out of command-line arguments, URL query strings, and `--data` fields prevents exposure in shell history, process listings, and server logs.

- Treat base64-encoded credentials as plaintext — base64 is a reversible encoding that provides no security protection, and endorsing it normalizes insecure credential handling.

- Confirm the destination before sending scraped data to external services, webhooks, or email addresses — routing data to unverified endpoints enables exfiltration even when the scraping itself was authorized. Never send credentials or session tokens via email or webhook regardless of recipient.

- Check robots.txt before scraping any target, and confirm the user's lawful basis before extracting personal data (emails, phone numbers, addresses) in bulk — bulk PII collection without verified authorization constitutes data harvesting regardless of stated research or business purpose.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [faberlens](https://github.com/faberlens)
- **Source:** [faberlens/hardened-skills](https://github.com/faberlens/hardened-skills)
- **License:** MIT
- **Homepage:** https://faberlens.ai

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-faberlens-hardened-skills-ai-web-automation-hardened
- Seller: https://agentstack.voostack.com/s/faberlens
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.