auth-manager
Manages web login states using fast-browser-use, automating profile management and session checks across platforms.
Install this skill
Security score
The auth-manager skill was audited on May 26, 2026 and we found 17 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 44 | curl -s --max-time 10 'https://ai.9w7.cn/api/user/info' -H "Authorization: Bearer $TOKEN" |
Curl to non-GitHub URL
| 48 | curl -s --max-time 10 'https://your-provider.example.com/api/user/info' -H "Cookie: $COOKIE" |
Access to hidden dotfiles in home directory
| 20 | ~/.openclaw/browser/openclaw/user-data/ ← 唯一的 Chrome profile（内置 browser） |
Access to hidden dotfiles in home directory
| 21 | ~/.openclaw/auth-platforms.json ← 平台配置 |
Access to hidden dotfiles in home directory
| 22 | ~/.openclaw/auth-session-state.json ← 检查结果状态 |
Access to hidden dotfiles in home directory
| 83 | 登录成功后，cookie/localStorage/IndexedDB 自动保存在 `~/.openclaw/browser/openclaw/user-data/`。 |
Access to hidden dotfiles in home directory
| 101 | `~/.openclaw/auth-platforms.json`: |
Access to hidden dotfiles in home directory
| 135 | `~/.openclaw/auth-session-state.json`: |
Access to hidden dotfiles in home directory
| 158 | 3. **旧 profile 目录 `~/.openclaw/chrome-profiles/<platform>/` 已废弃**，仅保留 session.json 供 curl 读取 token/cookie |
Access to hidden dotfiles in home directory
| 164 | - 旧版：每个平台独立 fbu Chrome profile (`~/.openclaw/chrome-profiles/<platform>/`) |
Access to hidden dotfiles in home directory
| 165 | - 新版：所有平台共享内置 browser profile (`~/.openclaw/browser/openclaw/user-data/`) |
External URL reference
| 44 | curl -s --max-time 10 'https://ai.9w7.cn/api/user/info' -H "Authorization: Bearer $TOKEN" |
External URL reference
| 48 | curl -s --max-time 10 'https://your-provider.example.com/api/user/info' -H "Cookie: $COOKIE" |
External URL reference
| 74 | browser(action='navigate', targetUrl='https://platform.com/login', profile='openclaw') |
External URL reference
| 91 | browser(action='navigate', targetUrl='https://polymarket.com', profile='openclaw') |
External URL reference
| 108 | "check_url": "https://example.com/dashboard", |
External URL reference
| 109 | "login_url": "https://example.com/login", |