browsh

PassAudited by ClawScan on May 1, 2026.

Overview

This is a simple instruction-only terminal browser skill; the main thing to verify is that your local Browsh and Firefox binaries come from trusted sources.

This skill appears benign and purpose-aligned. Before installing or using it, make sure Browsh and Firefox are installed from trusted sources and that the binaries found in your PATH are the ones you intend to run.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the local Browsh or Firefox binaries were installed from an untrusted source, this skill would invoke them.

Why it was flagged

The skill itself does not install or include code, but it will run whatever local browsh and firefox binaries are on PATH, and the artifacts do not provide a trusted source or pinned installation path for those binaries.

Skill content

Source: unknown; Homepage: none; Required binaries: browsh, firefox; No install spec — this is an instruction-only skill.

Recommendation

Install Browsh and Firefox from trusted sources, and check that your PATH points to the expected binaries before using the skill.