Atlas / Skills / epiral / Bb Browser Openclaw

Bb Browser OpenclawCAUTION

skills/epiral/bb-browser-openclaw

Your browser is the API. CLI + MCP server for AI agents to control Chrome with your login state.

Verdict
CAUTION
Grade
B
Trust score
89 /100
Version
—
Hosts
1 documented
License
MIT
Stars
6,246
01

Overview

Your browser is the API. CLI + MCP server for AI agents to control Chrome with your login state.

Read from source at commit 951a52c2880dOBSERVED · 2026-10-21
Advertisement
02

Host compatibility

What the documentation claims. We have not run a compatibility test.

HostStatusNotes
openclawmentioned
03

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: bb-browser-openclaw
description: Turn any website into a CLI command. 36 platforms, 103 commands — Twitter, Reddit, GitHub, YouTube, Zhihu, Bilibili, Weibo, and more. Uses OpenClaw's browser directly, no extra extension needed.
requires:
  bins: bb-browser
allowed-tools: Bash(bb-browser:*)
---

# bb-browser sites — The web as CLI

36 platforms, 103 commands. One-liner structured data from any website using your login state.

**All commands use `--openclaw` to run through OpenClaw's browser. No Chrome extension or daemon needed.**

## Quick Start

```bash
# First time: pull community adapters
bb-browser site update

# See what's available
bb-browser site list

# See which adapters match your browsing habits
bb-browser site recommend

# Run any adapter via OpenClaw's browser
bb-browser site reddit/hot --openclaw
bb-browser site hackernews/top 5 --openclaw
bb-browser site v2ex/hot --openclaw
```

## IMPORTANT: Always use --openclaw

Every `bb-browser site` command MUST include `--openclaw` to use OpenClaw's browser:

```bash
# Correct
bb-browser site twitter/search "AI agent" --openclaw
bb-browser site zhihu/hot 10 --openclaw --json
bb-browser site xueqiu/hot-stock 5 --openclaw --jq '.items[] | {name, changePercent}'

# Wrong (requires separate Chrome extension)
bb-browser site twitter/search "AI agent"
```

## Data Extraction (most common use)

```bash
# Social media
bb-browser site twitter/search "OpenClaw" --openclaw
bb-browser site twitter/thread <tweet-url> --openclaw
bb-browser site reddit/thread <post-url> --openclaw
bb-browser site weibo/hot --openclaw
bb-browser site xiaohongshu/search "query" --openclaw

# Developer
bb-browser site github/repo owner/repo --openclaw
bb-browser site github/issues owner/repo --openclaw
bb-browser site hackernews/top 10 --openclaw
bb-browser site stackoverflow/search "async await" --openclaw
bb-browser site arxiv/search "transformer" --openclaw

# Finance
bb-browser site xueqiu/stock SH600519 --openclaw
bb-browser site xueqiu/hot-stock 5 --openclaw
bb-browser site eastmoney/stock "茅台" --openclaw

# News & Knowledge
bb-browser site zhihu/hot --openclaw
bb-browser site 36kr/newsflash --openclaw
bb-browser site wikipedia/summary "Python" --openclaw

# Video
bb-browser site youtube/transcript VIDEO_ID --openclaw
bb-browser site bilibili/search "query" --openclaw
```

## Filtering with --jq

Use `--jq` to extract specific fields (no need for `--json`, it's implied):

```bash
# Just stock names
bb-browser site xueqiu/hot-stock 5 --openclaw --jq '.items[].name'

# Specific fields as objects
bb-browser site xueqiu/hot-stock 5 --openclaw --jq '.items[] | {name, changePercent, heat}'

# Filter results
bb-browser site reddit/hot --openclaw --jq '.posts[] | {title, score}'
```

## View adapter details

```bash
# Check what args an adapter takes
bb-browser site info xueqiu/stock

# Search adapters by keyword
bb-browser site search reddit
```

## Login State

Adapters run inside OpenClaw's browser tabs. If a site requires login:

1. The adapter will return an error like `{"error": "HTTP 401", "hint": "Not logged in?"}`
2. Log in to the site in OpenClaw's browser:
   ```bash
   openclaw browser open https://twitter.com
   ```
3. Complete login manually in the browser window
4. Retry the command

## Creating New Adapters

Turn any website into a CLI command:

```bash
# Read the guide
bb-browser guide

# Or just tell me: "turn notion.so into a bb-browser adapter"
# I'll reverse-engineer the API, write the adapter, test it, and submit a PR.
```

## All 36 Platforms

| Category | Platforms |
|----------|-----------|
| Search | Google, Baidu, Bing, DuckDuckGo, Sogou WeChat |
| Social | Twitter/X, Reddit, Weibo, Xiaohongshu, Jike, LinkedIn, Hupu |
| News | BBC, Reuters, 36kr, Toutiao, Eastmoney |
| Dev | GitHub, StackOverflow, HackerNews, CSDN, cnblogs, V2EX, Dev.to, npm, PyPI, arXiv |
| Video | YouTube, Bilibili |
| Entertainment | Douban, IMDb, Genius, Qidian |
| Finance | Xueqiu, Eastmoney, Yahoo Finance |
| Jobs | BOSS Zhipin, LinkedIn |
| Knowledge | Wikipedia, Zhihu, Open Library |
| Shopping | SMZDM |
| Tools | Youdao, GSMArena, Product Hunt, Ctrip |
04

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)WARN
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (1)

MEDIUMPrivilege escalation / persistence · review.unsafe_action · CWE-269, CWE-250
SKILL.md
# Or just tell me: "turn notion.so into a bb-browser adapter" # I'll reverse-engineer the API, write the adapter, test it, and submit a PR.
Why it matters. Directs the agent to autonomously write code and open pull requests against upstream repositories without the user's explicit approval.
Fix. rewrite it so the instruction says plainly what it does, and asks the user before it acts

Gates applied: no_behavioural_pass.

Audited 2026-10-21 · audit v0.4.1 · source sha 951a52c2880dfull audit observations/trust-audit/skill/epiral__bb-browser-openclaw.json · Report an issue / request a re-scan
05

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-21951a52c2880dCAUTIONB89first audit
06

Questions

What does the bb-browser-openclaw — epiral/bb-browser skill do?

Your browser is the API. CLI + MCP server for AI agents to control Chrome with your login state.

Is bb-browser-openclaw — epiral/bb-browser safe to install?

With care. The audit graded it B (89/100) and found 1 thing worth knowing before you trust this skill, listed below with the exact line each was found on.

What can bb-browser-openclaw — epiral/bb-browser access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

Which assistants does bb-browser-openclaw — epiral/bb-browser work with?

Its documentation mentions openclaw. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (951a52c2880d), read on 2026-10-21. The repository is watched, and a new audit runs when it changes — this is the first audit.

Add this badge to your README

Shows this page's audit result and links back to it. It updates when the audit does.

ModelsAtlas audit badge

Markdown
[![ModelsAtlas audit: Bb Browser Openclaw](https://modelsatlas.com/skills/epiral/bb-browser-openclaw/badge.svg)](https://modelsatlas.com/skills/epiral/bb-browser-openclaw/)

Not your listing, or something out of date? Claim or update your listing.

Advertisement