OpenClaw Browser Flows

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only browser skill is mostly coherent, but it explicitly tells the agent how to attach to your logged-in browser session without tight scope or explicit approval boundaries.

Install only if you are comfortable with an agent using browser automation patterns, including potentially using your logged-in Chromium session. Supervise sensitive workflows and require confirmation before account changes, form submissions, purchases, public posts, or other irreversible actions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may click, type, navigate, and manage tabs during web tasks, which can have real effects on websites if used on sensitive pages.

Why it was flagged

The skill is designed to guide multi-step browser automation, including opening tabs, taking snapshots, and acting on page controls. This is purpose-aligned, but browser actions can affect real websites.

Skill content
Use this skill when you need the `browser` tool for anything beyond a single page check.
Recommendation

Use it for browser workflows you intend the agent to perform, and review/confirm important actions such as purchases, submissions, account changes, or public posts.

What this means

The agent could interact with websites as you using your existing logged-in browser sessions.

Why it was flagged

Attaching to the user's running browser can use existing cookies and logged-in sessions. The instruction is disclosed and purpose-related, but it is broad and does not require explicit user approval or limit the accounts/sites/actions where that session authority may be used.

Skill content
Use `profile="user"` only when existing cookies/login matter. This attaches to the user's running Chromium-based browser.
Recommendation

Only allow `profile="user"` when you explicitly want the agent to use your logged-in browser. Avoid using it for banking, admin consoles, private accounts, or irreversible actions unless you are supervising closely.