Xpersona
Claim this agent
agentCLAWHUBUnverified

ziniao-assistant

Control Ziniao Browser via the local Ziniao bridge. On skill load or before first invoke, GET /zclaw/tools and treat returned name list as the only allowed t... Skill: ziniao-assistant Owner: ziniao-open Summary: Control Ziniao Browser via the local Ziniao bridge. On skill load or before first invoke, GET /zclaw/tools and treat returned name list as the only allowed t... Tags: latest:1.0.1 Version history: v1.0.1 | 2026-03-26T13:00:40.032Z | user **Ziniao Assistant 1.0.1 introduces dynamic tool discovery for safer, more reliable browser control.** - On skill load or before f

OpenClaw
View on ClawHubHomepage

Rank

62

Safety

84

Downloads

4.1k

Updated

Oct 9, 2026

Version

1.0.1

Source

CLAWHUB

About

What it does, and when to use it.

Capability contract not published. No trust telemetry is available yet. 4.1K downloads reported by the source. Last updated 10/9/2026.

Avoid when

  • Contract metadata is missing or unavailable for deterministic execution.

Risk flags: missing_or_unavailable_contract, trust_data_unavailable, schema_references_missing

Public facts

Every fact links back to the source it came from.

Vendor
Clawhubvendor · observed Oct 9, 2026
Protocol compatibility
OpenClawcompatibility · observed Oct 9, 2026
Adoption signal
4.1K downloadsadoption · observed Oct 9, 2026
Latest release
1.0.1release · observed Mar 26, 2026
Handshake status
UNKNOWNsecurity

Install and run

Setup complexity: low.

clawhub skill install s17daw69gp84x2gww3hnm0tsqh83nv19:ziniao-assistant
  1. Setup complexity is LOW. This package is likely designed for quick installation with minimal external side-effects.
  2. Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.

Contract: missing

curl -s "https://www.xpersona.co/api/v1/agents/clawhub-ziniao-open-ziniao-assistant/snapshot"

Documentation

CLAWHUB

44,070 characters of source documentation, loaded on request.

Extracted files

3 files captured from the source.

SKILL.md

---
name: ziniao-assistant
description: Control Ziniao Browser via the local Ziniao bridge. On skill load or before first invoke, GET /zclaw/tools and treat returned name list as the only allowed tool strings; then POST /zclaw/tools/invoke. API key for invoke via ~/.zclaw/config.json or ZCLAW_API_KEY. On bridge failure stop the turn per skill.
---
# Ziniao Assistant

## Session tool allowlist (Mandatory — fetch first)

**Goal:** Put the **authoritative** tool names into context before any `invoke`, so every `tool` field is chosen from that set only (reduces hallucinated names).

1. **First HTTP call** when handling a ZClaw task (or immediately after this skill is loaded):  
   **`GET {baseUrl}/zclaw/tools`**  
   Same `baseUrl` as invoke (`ZCLAW_BASE_URL` / `ZINIAO_ZCLAW_BASE_URL`, default `http://127.0.0.1:9481`).  
   **No `X-ZClaw-Api-Key` and no Ziniao login are required** for this GET (public registry on the bridge).

2. **Parse the response:** JSON shape `{ ret, data }` where `data` is an array of `{ name, description, inputSchema }`. Build  
   **`allowedTools = data.map((t) => t.name)`**  
   and **retain it in working memory** for the session. Optionally keep `description` / `inputSchema` next to each name when choosing args.

3. **Before every `POST {baseUrl}/zclaw/tools/invoke`:** ensure **`allowedTools.includes(tool)`**. If the name you intend is not in `allowedTools`, **do not send the request**—map the user’s intent to a real name from `allowedTools` (e.g. open URL → `visit_page` or `open_store` + `launchUrl`).

4. **If `invoke` returns an error** like unsupported / unknown tool: re-run **`GET /zclaw/tools`**, refresh `allowedTools`, and retry with a valid `name`.

5. **If `GET /zclaw/tools` fails** (connection refused, timeout): follow **Stop on Blocker** for unreachable bridge; if you must proceed with static knowledge only, use the **Static fallback allowlist** below—still **no** invented names.

### Static fallback allowlist (when GET is impossible)

Comma-separated `tool` names that match a healthy bridge (re-sync when GET works):

`list_stores`, `resolve_store`, `open_store`, `close_store`, `visit_page`, `get_page_content`, `query_elements`, `click_element`, `input_text`, `scroll_page`, `take_screenshot`, `wait_for_element`, `wait_for_navigation`, `execute_script`, `run_automation`, `extract_data`, `prepare_agent`, `get_logs`, `download_file`, `debug_compare_lists`

---

## Available Capabilities

All **`invoke`** operations use `POST {baseUrl}/zclaw/tools/invoke` with `tool` + `args`. **Authoritative names** come from **`GET /zclaw/tools`** (see above); the table below is documentation aligned with that registry.

| Category | Tool | Description |
|----------|------|-------------|
| **Store** | `list_stores` | List stores (storeId, storeName, platformName, ip). Call once; no loop. |
| | `resolve_store` | Resolve store by storeId or storeName. |
| | `open_store` | Open store (by storeId/storeName from list or resolve). Call on

_meta.json

{
  "ownerId": "kn71w0k7nr8gzjyvhtsqcy1dcd82t8pv",
  "slug": "ziniao-assistant",
  "version": "1.0.1",
  "publishedAt": 1774530040032
}

skill-card.md

## Description:

Controls Ziniao Browser through the local Ziniao bridge, discovers available ZClaw tools before invoking them, and requires an API key for browser actions.

This skill is ready for commercial/non-commercial use.

## Publisher:

[ziniao-open](https://clawhub.ai/user/ziniao-open)

### License/Terms of Use:

MIT-0

## Use Case:

Developers and operators use this skill to control Ziniao Browser stores, navigate pages, read content, interact with page elements, take screenshots, export files, and run supported browser automation through the ZClaw bridge.

### Deployment Geography for Use:

Global

## Known Risks and Mitigations:

Risk: The skill can operate authenticated browser sessions through the Ziniao/ZClaw bridge.

Mitigation: Install only when the bridge is trusted and limit use to intended browser stores and sessions.

Risk: The skill relies on a ZClaw API key for invoke requests.

Mitigation: Store the key in a protected secret manager or tightly permissioned environment/config file, avoid exposing it in chat or shell history, and rotate it if exposure is possible.

Risk: Changing the bridge base URL can route browser automation to an unintended or untrusted endpoint.

Mitigation: Keep the base URL on the intended local bridge unless a remote endpoint is explicitly trusted.

## Reference(s):

- [ClawHub skill page](https://clawhub.ai/ziniao-open/skills/ziniao-assistant)
- [Ziniao Ecosystem Center](https://open.ziniao.com/contactUs)

## Skill Output:

**Output Type(s):** [text, markdown, code, shell commands, configuration, guidance]

**Output Format:** [Markdown guidance with inline shell commands, JSON request bodies, and browser automation instructions.]

**Output Parameters:** [1D]

**Other Properties Related to Output:** [May produce page-content summaries, browser action guidance, screenshots, downloaded files, and configuration updates when supported by the bridge.]

## Skill Version(s):

1.0.1 (source: ClawHub release evidence)

## Ethical Considerations:

Users should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.

Related agents

Same protocol, similar job.

Github ReposUpdated 6mo agoRank 70

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

OPENCLAW
Github ReposUpdated 6mo agoRank 70

cherry-studio

AI productivity studio with smart chat, autonomous agents, and 300+ assistants.

MCPOPENCLAW
Github ReposUpdated 6mo agoRank 70

AionUi

Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!

MCPOPENCLAW
Github ReposUpdated 7mo agoRank 70

CopilotKit

The Frontend for Agents & Generative UI. React + Angular

OPENCLAW

Machine-readable data

The same record, as JSON, for agents and crawlers.

{
  "facts": [
    {
      "factKey": "vendor",
      "category": "vendor",
      "label": "Vendor",
      "value": "Clawhub",
      "href": "https://clawhub.ai/ziniao-open/skills/ziniao-assistant",
      "sourceUrl": "https://clawhub.ai/ziniao-open/skills/ziniao-assistant",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-09T05:58:06.415Z",
      "isPublic": true
    },
    {
      "factKey": "protocols",
      "category": "compatibility",
      "label": "Protocol compatibility",
      "value": "OpenClaw",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-ziniao-open-ziniao-assistant/contract",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-ziniao-open-ziniao-assistant/contract",
      "sourceType": "contract",
      "confidence": "medium",
      "observedAt": "2026-10-09T05:58:06.415Z",
      "isPublic": true
    },
    {
      "factKey": "traction",
      "category": "adoption",
      "label": "Adoption signal",
      "value": "4.1K downloads",
      "href": "https://clawhub.ai/ziniao-open/ziniao-assistant",
      "sourceUrl": "https://clawhub.ai/ziniao-open/ziniao-assistant",
      "sourceType": "profile",
      "confidence": "medium",
      "observedAt": "2026-10-09T05:58:06.415Z",
      "isPublic": true
    },
    {
      "factKey": "latest_release",
      "category": "release",
      "label": "Latest release",
      "value": "1.0.1",
      "href": "https://clawhub.ai/ziniao-open/ziniao-assistant",
      "sourceUrl": "https://clawhub.ai/ziniao-open/ziniao-assistant",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-03-26T13:00:40.032Z",
      "isPublic": true
    },
    {
      "factKey": "handshake_status",
      "category": "security",
      "label": "Handshake status",
      "value": "UNKNOWN",
      "href": "https://www.xpersona.co/api/v1/agents/clawhub-ziniao-open-ziniao-assistant/trust",
      "sourceUrl": "https://www.xpersona.co/api/v1/agents/clawhub-ziniao-open-ziniao-assistant/trust",
      "sourceType": "trust",
      "confidence": "medium",
      "observedAt": null,
      "isPublic": true
    }
  ],
  "events": [
    {
      "eventType": "release",
      "title": "Release 1.0.1",
      "description": "**Ziniao Assistant 1.0.1 introduces dynamic tool discovery for safer, more reliable browser control.** - On skill load or before first tool use, fetch available tools from the bridge via GET /zclaw/tools and only allow invoking tool names from this live list. - Prevents using hallucinated or invalid tool names by always mapping user actions to names in the session's allowedTools. - Retains static fallback allowlist for tool names only if the bridge registry cannot be reached. - No changes to browser control capabilities or stop-on-blocker logic. - Updated documentation for dynamic discovery, static fallback, and stricter tool invocation flow.",
      "href": "https://clawhub.ai/ziniao-open/ziniao-assistant",
      "sourceUrl": "https://clawhub.ai/ziniao-open/ziniao-assistant",
      "sourceType": "release",
      "confidence": "medium",
      "observedAt": "2026-03-26T13:00:40.032Z",
      "isPublic": true
    }
  ]
}

Record generated Oct 9, 2026.

Sponsored

Ads related to ziniao-assistant and adjacent AI workflows.