Agent skill · Audited from source

opencli-usage

skill · jackwener/opencliApache-2.0 licenceAudited 28 Oct 2026 · source 9ac5bcd6a062

★ 30,718pushed 2 days ago
✓SAFEGrade B · 89/100 · 28 Oct 2026 · 9ac5bcd
30,718repo stars · whole jackwener/opencli

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 9ac5bcd6a062 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Discover and invoke OpenCLI capabilities for websites and Chrome. Find commands, inspect schemas, interpret results and choose browser or adapter tools.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “opencli-usage (jackwener/opencli)”. Retrieved 28 Oct 2026. https://modelsatlas.com/skills/jackwener/opencli-usage

Trust audit

Audit 0.4.1 · source read 28 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium0 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (0)

No findings at any severity. We re-audit when the source changes.

Audit 0.4.1 · source sha 9ac5bcd6a062 · 28 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherjackwener GitHub userOwner of the repository this skill is read from
  • Source folderjackwener/opencli/skills/opencli-usageThe exact folder we audited
  • LicenceApache-2.0As the repository states it
  • Commit pinned for this verdict9ac5bcd6a062A new audit runs when the source changes
  • Repository statusNot archivedLast push 2 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Discover and invoke OpenCLI capabilities for websites and Chrome. Find commands, inspect schemas, interpret results and choose browser or adapter tools.

---
name: opencli-usage
description: Discover and invoke OpenCLI capabilities for websites and Chrome. Find commands, inspect schemas, interpret results and choose browser or adapter tools.
allowed-tools: Bash(opencli:*), Read
---

# OpenCLI

OpenCLI exposes reusable website adapters and direct Chrome tools to agents.

```sh
opencli list search
opencli list --site github --limit 20
opencli github search --help -f json
```

`list [query]` searches command names and descriptions across built-ins and adapters.
Results are compact and paginated: `{ok:true,data:{commands,total,nextOffset?}}`.
Pass `--offset <nextOffset>` to continue. Inspect exact inputs using command help.
Do not hard-code the adapter catalog or dump all commands into context.

## Results

Commands default to JSON: `{ok:true,data:...}`. Failures produce a nonzero exit
code and `{ok:false,error:{code,message,hint?,...}}` on stdout. Logs use stderr.
Explicit `-f table|yaml|csv|md|plain` exports are available where command help lists
them. Help, version, completion and explicit plain exports retain their own formats.
Browser follow modes stream one JSON envelope per line.

Use error codes and supplied candidates/keys to recover. Unknown write outcomes
require inspecting state before repeating an action. An empty successful result
is distinct from an execution failure.

## Browser

```sh
opencli browser open https://example.com --session research
opencli browser state --session research
opencli browser close --session research
opencli browser chrome describe
```

Page commands use `--session`; native Chrome methods need no session. `--profile`
selects a connected Chrome profile. `profile list` discovers profiles and
`profile use <name>` selects the default. Use `doctor` for connection diagnosis.
See `opencli-browser` for interaction, API evidence and tab/group management.

## Adapters and installation

```sh
opencli adapter init example/search
opencli adapter check example/search
opencli adapter test example/search --args '{"query":"hello"}'
opencli adapter status
```

See `opencli-adapter-author` for implementation. `adapter eject` makes an official
site editable locally; `adapter reset` removes that local override. Adapter tests
execute real commands and can perform writes.

`plugin list|install|update|uninstall|create` manages plugin packages. `auth status`
reports website login facts; `auth refresh` touches sessions. `daemon status|restart|stop`
manages the bridge process. Read help for the selected capability.

Bundled skill content is available through `skills list` and
`skills read opencli-browser -f plain` (omit `-f plain` for JSON).

Excerpt, first 2,647 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 9ac5bcd

Download folder ↗
git clone https://github.com/jackwener/opencli
git -C opencli checkout 9ac5bcd6a062

The author documents no install command, so this uses the repository directly. Our verdict covers commit 9ac5bcd6a062 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 9ac5bcd6a062

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/jackwener/opencli-usage/badge.svg)](https://modelsatlas.com/skills/jackwener/opencli-usage/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

smart-search✓SAFE

jackwener/opencli

基于 opencli 命令的智能搜索路由器。当用户想要使用 OpenCLI、CLI 或 API 搜索、查询、查找或研究信息时,尤其是涉及指定网站、社交媒体、技术资料、新闻、购物、旅游、求职、金融或中文内容时,务必使用此 skill

★ 31kGrade B
opencli-browser✓SAFE

jackwener/opencli

Drive Chrome with OpenCLI to inspect pages, interact with logged-in sites, capture API evidence, and manage native tabs, groups and windows. For reusable adapters, see opencli-adapter-author.

★ 31kGrade B
opencli-autofix✓SAFE

jackwener/opencli

Automatically fix broken OpenCLI adapters when commands fail. Load this skill when an opencli command fails — it guides you through collecting a trace artifact, patching the adapter, retrying, and filing an upstream…

★ 31kGrade B
opencli-adapter-author✓SAFE

jackwener/opencli

Build or improve an OpenCLI JS adapter using observed site behavior, existing adapters and browser API evidence. For ad-hoc browser interaction, see opencli-browser.

★ 30kGrade B
opencli-oneshot✕BLOCK

jackwener/opencli

Build or improve an OpenCLI JS adapter using observed site behavior, existing adapters and browser API evidence. For ad-hoc browser interaction, see opencli-browser.

★ 31kGrade F
opencli-explorer✕BLOCK

jackwener/opencli

Build or improve an OpenCLI JS adapter using observed site behavior, existing adapters and browser API evidence. For ad-hoc browser interaction, see opencli-browser.

★ 31kGrade F

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/jackwener/opencli-usage/badge.svg)](https://modelsatlas.com/skills/jackwener/opencli-usage/)

Questions about opencli-usage

What does the opencli-usage skill do?
Make Any Website into CLI & Use your logged-in browser by AI agent.
Is opencli-usage safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can opencli-usage access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (9ac5bcd6a062), read on 2026-10-28. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.