ClawHub
Back to skill

Security audit

Chrome Devtools Remote

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate remote-browser automation skill, but it can expose credentials, page contents, screenshots, and saved browser sessions to a remote service.

Install only if you trust the remote browser operator and are comfortable sending authenticated pages, form inputs, screenshots, cookies, and storage state to that service. Prefer least-privilege test accounts or disposable sessions, avoid highly sensitive logins, and look for a clear way to delete stored sessions and browser state after use.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill explicitly instructs use of bearer headers and later demonstrates filling login credentials into a browser session hosted on another machine, but it does not warn that secrets may be exposed to the remote host, browser session, logs, shell history, or any operator of that remote environment. In this context, the omission is security-relevant because the whole purpose of the skill is to drive a browser on a different host, so users may incorrectly assume credentials remain local.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill documents sticky remote session caching and local artifact creation, but omits any warning that browser state persists server-side and that screenshots, snapshots, and session identifiers may remain on disk after the task completes. This is dangerous because subsequent users or processes on either the local or remote machine may recover sensitive page contents, authenticated session state, or workflow context from these residual artifacts.

Static analysis

No suspicious patterns detected.