Kernel Auth：为任何网站设置托管认证连接，自动化登录与安全检查

kernel-auth by kernel/skills

132 周安装量

3 GitHub Stars

GitHub

安装命令

npx skills add https://github.com/kernel/skills --skill kernel-auth

自动化开发运维安全

🇨🇳中文介绍

Kernel Auth Skill

为任何网站设置和管理 Kernel 托管的认证连接，提供安全检查并支持重新认证。

快速开始

kernel-auth setup gmail

然后访问打印出的 URL 以完成登录。

适用于任何网站 — 对于其他网站，请参阅“使用自定义域名”部分。

使用方法

kernel-auth setup <service> [--profile-name <name>]

内置服务

gmail → gmail.com
github → github.com
outlook → outlook.com

使用自定义域名

对于任何其他网站，使用 --domain 标志：

广告位招租

在这里展示您的产品或服务

触达数万 AI 开发者，精准高效

联系我们

为什么需要手动访问 URL？

登录会话有时间限制 — 如果您未在时间窗口内访问，它们会过期（清理机制）
防止自动打开 — 避免 Telegram/电子邮件客户端意外消耗链接
控制权在您手中 — 您可以在准备好时访问 URL

# 列出所有认证连接
kernel auth connections list -o json

# 检查特定连接
kernel auth connections get <connection-id> -o json | jq '.status'

使用已认证的浏览器

一旦认证连接建立，即可使用该配置文件创建浏览器会话：

# 创建已加载 Gmail 认证的浏览器
kernel browser create --profile-name gmail-main --stealth -o json

# 浏览器将自动登录到 Gmail

⚠️ 配置文件删除 = 级联删除

删除 Kernel 配置文件将删除附加到它的所有连接：

kernel profile delete gmail-main  # 删除所有 gmail-main 连接

请谨慎使用。最好刷新认证，而不是删除并重新创建。

🔗 Telegram 和链接预览

如果您通过 Telegram 发送认证 URL，请在设置中禁用链接预览：

设置 → 隐私与安全 → 链接预览 → 从不显示

否则 Telegram 会自动打开 URL 并消耗掉验证码。

Kernel 认证需要：

能够通过 HTTPS 出站连接到 Kernel 托管的认证服务
启用 JavaScript 的浏览器
支持 Cookie/会话存储

setup — 创建连接，生成登录 URL，显示说明
无后台监视器 — 您控制何时/是否访问 URL

“验证码已被使用”

认证码已被消耗。这发生在以下情况：

您访问了 URL 两次
Telegram/电子邮件客户端自动打开了它
其他人先完成了登录

解决方案：再次运行 kernel-auth setup <service> 以获取新的验证码。

“验证码已过期”

验证码约 40 分钟后过期。重新运行 setup 以生成新的验证码。

“未找到连接”

连接可能已被删除。再次运行 setup 以创建它。

认证状态为 NEEDS_AUTH

您未在会话窗口内完成登录，或者需要重新认证。重新启动登录：

kernel-auth setup gmail

认证技能与 OpenClaw 定时任务集成：

定时任务在运行前检查认证状态
如果为 AUTHENTICATED，则继续执行浏览器自动化
如果不是，则发送消息请求重新认证
用户确认后，系统重新运行认证流程

来自 GMAIL_DAILY_WORKFLOW.md 的示例：

# 每日定时任务在抓取前检查此项
AUTH_STATUS=$(kernel auth connections list -o json | jq -r ".[] | select(.domain == \"gmail.com\") | .status")
if [ "$AUTH_STATUS" != "AUTHENTICATED" ]; then
  echo "需要重新认证"
  exit 1
fi

编程式认证检查

# 获取认证状态
kernel auth connections list -o json | jq '.[] | {id, status, domain}'

# 删除并重新创建
kernel profile delete gmail-main --yes
kernel-auth setup gmail

为每个账户创建单独的配置文件：

kernel-auth setup gmail --profile-name gmail-personal
kernel-auth setup gmail --profile-name gmail-work

然后在创建浏览器时使用相应的配置文件：

kernel browser create --profile-name gmail-work --stealth

🇺🇸English

Kernel Auth Skill

Setup and manage Kernel managed authentication connections for any website with safety checks and reauthentication support.

Quick Start

kernel-auth setup gmail

Then visit the URL printed to complete login.

Works for any website — See Using Custom Domains for any other site.

Usage

kernel-auth setup <service> [--profile-name <name>]

Built-in Services

gmail → gmail.com
github → github.com
outlook → outlook.com

Using Custom Domains

For any other website, use the --domain flag:

kernel-auth setup --domain amazon.com --profile-name amazon-main
kernel-auth setup --domain linkedin.com
kernel-auth setup --domain example.com --profile-name custom-site

Examples

kernel-auth setup gmail
kernel-auth setup github --profile-name github-work
kernel-auth setup outlook

Authentication Flow

Create auth connection — Sets up a managed auth profile (domain + profile name)
Initiate login session — Generates a hosted login URL
You visit URL — Complete the login flow on your device/browser
Login state stored in profile — Kernel saves your authenticated session
Use authenticated browser — Create browser sessions with that profile, automatically logged in

Key Concepts

Auth Connections

Each connection ties a service domain to a profile name
Connections can be reused for multiple browser sessions
Status: AUTHENTICATED (user completed login, state stored) or NEEDS_AUTH (never logged in or login session expired)

Login Sessions

Login sessions (the hosted URL) expire after a generous timeframe as cleanup
If you don't complete login within that window, the session is deleted
The connection itself stays — just initiate a new login session

Check connection status:

kernel auth connections list  # Check status
kernel auth connections get <id>  # Get connection details

If a connection shows NEEDS_AUTH:

kernel-auth setup <service>  # Re-initiate login session with fresh URL

Why Manual URL Visit?

Login sessions are time-bound — If you don't visit within the window, they expire (cleanup)
Prevent auto-opening — Avoid Telegram/email clients accidentally consuming the link
Control is yours — You visit the URL when you're ready

Checking Status

# List all auth connections
kernel auth connections list -o json

# Check specific connection
kernel auth connections get <connection-id> -o json | jq '.status'

Using Authenticated Browsers

Once auth is connected, create browser sessions with that profile:

# Create browser with Gmail auth already loaded
kernel browser create --profile-name gmail-main --stealth -o json

# Browser will be logged into Gmail automatically

Important Notes

⚠️ Profile Deletion = Cascade Delete

Deleting a Kernel profile deletes ALL connections attached to it:

kernel profile delete gmail-main  # Deletes ALL gmail-main connections

Use sparingly. Better to refresh auth than delete and recreate.

🔗 Telegram & Link Previews

If you send auth URLs via Telegram, disable link previews in settings:

Settings → Privacy & Security → Link Preview → Never show

Otherwise Telegram auto-opens the URL and consumes the code.

🌐 Network Requirements

Kernel auth requires:

Outbound HTTPS to Kernel's managed auth service
Browser with JavaScript enabled
Cookie/session storage support

Scripts

setup — Create connection, generate login URL, display instructions
No background watchers — You control when/if you visit the URL

Troubleshooting

"Code already used"

The auth code was consumed. This happens if:

You visited the URL twice
Telegram/email client auto-opened it
Someone else completed the login first

Solution: Run kernel-auth setup <service> again to get a fresh code.

"Code expired"

Codes expire after ~40 minutes. Re-run setup to generate a new one.

"Connection not found"

The connection may have been deleted. Run setup again to create it.

Auth Status is NEEDS_AUTH

You didn't complete the login within the session window, or you need to re-authenticate. Re-initiate login:

kernel-auth setup gmail

Integration with OpenClaw

The auth skill integrates with OpenClaw cron jobs:

Cron job checks auth status before running
If AUTHENTICATED, proceeds with browser automation
If not, sends message requesting reauthentication
User confirms, system re-runs auth flow

Example from GMAIL_DAILY_WORKFLOW.md:

# Daily cron checks this before scraping
AUTH_STATUS=$(kernel auth connections list -o json | jq -r ".[] | select(.domain == \"gmail.com\") | .status")
if [ "$AUTH_STATUS" != "AUTHENTICATED" ]; then
  echo "Reauthentication needed"
  exit 1
fi

Advanced

Programmatic Auth Check

# Get auth status
kernel auth connections list -o json | jq '.[] | {id, status, domain}'

# Delete and recreate
kernel profile delete gmail-main --yes
kernel-auth setup gmail

Multiple Accounts

Create separate profiles for each account:

kernel-auth setup gmail --profile-name gmail-personal
kernel-auth setup gmail --profile-name gmail-work

Then use the appropriate profile when creating browsers:

kernel browser create --profile-name gmail-work --stealth

Weekly Installs

132

Repository

kernel/skills

GitHub Stars

First Seen

Feb 21, 2026

Security Audits

Gen Agent Trust HubPass SocketPass SnykPass

Installed on

codex132

cursor132

claude-code129

opencode13

gemini-cli13

github-copilot13

Kernel Auth：为任何网站设置托管认证连接，自动化登录与安全检查

🇨🇳中文介绍

Kernel Auth Skill

快速开始

使用方法

内置服务

使用自定义域名

相关 Skills

示例

认证流程

核心概念

认证连接

登录会话

为什么需要手动访问 URL？

检查状态

使用已认证的浏览器

重要说明

⚠️ 配置文件删除 = 级联删除

🔗 Telegram 和链接预览

🌐 网络要求

脚本

故障排除

“验证码已被使用”

“验证码已过期”

“未找到连接”

认证状态为 NEEDS_AUTH

与 OpenClaw 集成

高级用法

编程式认证检查

多账户

🇺🇸English

Kernel Auth Skill

Quick Start

Usage

Built-in Services

Using Custom Domains

Examples

Authentication Flow

Key Concepts

Auth Connections

Login Sessions

Why Manual URL Visit?

Checking Status

Using Authenticated Browsers

Important Notes

⚠️ Profile Deletion = Cascade Delete

🔗 Telegram & Link Previews

🌐 Network Requirements

Scripts

Troubleshooting

"Code already used"

"Code expired"

"Connection not found"

Auth Status is NEEDS_AUTH

Integration with OpenClaw

Advanced

Programmatic Auth Check

Multiple Accounts

最新 Skills