by Player-YN
Paw Work - selection-first web agent for Chrome: select on the live page, describe the outcome, take away an editable office file. BYOK, sandboxed, no server.
# Add to your Claude Code skills
git clone https://github.com/Player-YN/PawWork_ZhuaZhuaGuides for using ai agents skills like PawWork_ZhuaZhua.
Last scanned: 9/2/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@univerjs-pro/collaboration: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/collaboration-client: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/collaboration-client-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/docs-exchange-client: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/docs-print: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/edit-history-loader: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/edit-history-viewer: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/engine-chart: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/engine-formula: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/exchange-client: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/license: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-chart: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-chart-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-exchange-client: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-outline: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-outline-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-pivot: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-pivot-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-print: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-shape: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-shape-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-sparkline: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/sheets-sparkline-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs-pro/thread-comment-datasource: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/core: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/data-validation: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/docs: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/docs-drawing: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/docs-drawing-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/docs-hyper-link: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/docs-hyper-link-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/docs-thread-comment-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/docs-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/drawing: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/drawing-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/engine-formula: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/engine-render: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/find-replace: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/network: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-docs-advanced: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-docs-collaboration: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-docs-core: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-docs-drawing: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-docs-hyper-link: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-docs-node-core: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-docs-thread-comment: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-advanced: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-collaboration: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-conditional-formatting: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-core: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-data-validation: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-drawing: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-filter: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-find-replace: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-hyper-link: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-node-core: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-note: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-sort: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-table: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/preset-sheets-thread-comment: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/presets: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/rpc: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/rpc-node: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-conditional-formatting: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-conditional-formatting-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-data-validation: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-data-validation-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-drawing: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-drawing-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-filter: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-filter-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-find-replace: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-formula: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-formula-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-graphics: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-hyper-link: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-hyper-link-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-note: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-note-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-numfmt: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-numfmt-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-sort: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-sort-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-table: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-table-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-thread-comment: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-thread-comment-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/sheets-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/telemetry: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/thread-comment: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/thread-comment-ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@univerjs/ui: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "image-size: image-size: ICNS parser allows denial of service through an infinite loop",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nanoid: nanoid: non-secure generators can loop indefinitely with negative size",
"severity": "high"
},
{
"type": "npm-audit",
"message": "pptxgenjs: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "xlsx: Prototype Pollution in sheetJS",
"severity": "high"
},
{
"file": "src/agent/vnext/skills/html-site/SKILL.md",
"line": 45,
"type": "prompt-injection",
"message": "Possible concealment directive: \"Do not tell the user\"",
"severity": "medium"
}
],
"status": "WARNING",
"scannedAt": "2026-09-02T08:25:45.415Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how PawWork_ZhuaZhua compares with popular alternatives.
PawWork_ZhuaZhua is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by Player-YN. Paw Work - selection-first web agent for Chrome: select on the live page, describe the outcome, take away an editable office file. BYOK, sandboxed, no server. It has 2,844 GitHub stars.
PawWork_ZhuaZhua returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/Player-YN/PawWork_ZhuaZhua" and add it to your Claude Code skills directory (see the Installation section above).
PawWork_ZhuaZhua is primarily written in JavaScript. It is open-source under Player-YN on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh PawWork_ZhuaZhua against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Treat the already-logged-in Chrome as a programmable computer. 爪爪 is the agent on that machine.
爪爪 · 完全解放版 (PawWork_ZhuaZhua) is a Chrome MV3 unpacked extension. It runs a side-panel agent that can drive the current tab (action), execute guest JS against the browser (sys inside run), and keep sheet / Univer doc / site HTML artifacts in the session.
Not on the Chrome Web Store. No hosted model — bring your own key.
chrome://extensions → Developer mode → Load unpacked → select the folder (manifest.json is at its root)chrome.storage.local) → send a task on a normal http(s) pageAfter editing files, click 重新加载 on the extension card. There is no package.json and no build step.
Needs Chrome 135+. On Chrome 138+, enable Allow User Scripts on the extension details page if you want sys.eval or page-identity fetch. Close DevTools on the target tab before using sys.cdp (otherwise CDP_BUSY). Restricted pages such as chrome:// and the Web Store return NEED_PAGE.
node --test tests/runtime-regression.test.mjs # pure Node, no browser
node tests/browser-smoke.cjs <path-to-playwright> # loads the real extension
Side panel → service worker → offscreen SessionWorkspaceService → AI SDK ToolLoopAgent. Process layering, domain objects, tool contracts, and the unimplemented boundaries are documented in AGENTS.md and the nested AGENTS.md files under src/.
Release packaging: python scripts/pack_extension.py --zip dist/pawwork.zip.
MIT. Third-party components: THIRD_PARTY_NOTICES.md.