web-session-miner@1.0.0
VERIFIED· install onlyPublisher claims: "⚠️ 前置依赖：browser-skill（bsk CLI + Chromium 扩展，需先在 WorkBuddy 插件市场安装）。 网页登录态数据挖掘器（通用版）。复用用户已登录浏览器的登录态（cookies），通过 browser-skill 驱动真实浏览器抓取网页版数据，把「人肉复制粘贴」变成程序化采集，零 API 成本获取企业工商、 人物图谱、股权穿透、财务等深度数据，并输出结构化 JSON 或 HTML 报告。当目标网站同时提供 「官方 MCP/API（按次计费）」与「网页版（会员展示）」时，还能额外绕开 API 积分计费。 采用「通用方法论 + 站点适配器（recipes）」可插拔架构，内置企查查适配器，可扩展天眼查、 爱企查、国家企业信用信息公示系统等任意有「网页版 + 会员登录态」的站点。当用户需要查企业、 查老板、查股东、查实控人、股权穿透、对外投资、企业尽调、供应商背调、批量采集时使用。 触发词：查企业、查老板、查股东、查实控人、股权穿透、对外投资、企业尽调、 工商信息、人物图谱、网页抓取、登录态抓取、批量采集、数据挖掘。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 531 lines in 9 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.