browsh

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: browsh Version: 1.0.0 The skill bundle describes how to use the 'browsh' text-based browser, requiring 'browsh' and 'firefox' binaries. The `SKILL.md` provides standard usage instructions and a common `export PATH` command for local setup, which is not inherently malicious. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection with harmful intent against the agent. The content is clearly aligned with the stated purpose of running a text-based browser.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the local Browsh or Firefox binaries were installed from an untrusted source, this skill would invoke them.

Why it was flagged

The skill itself does not install or include code, but it will run whatever local browsh and firefox binaries are on PATH, and the artifacts do not provide a trusted source or pinned installation path for those binaries.

Skill content
Source: unknown; Homepage: none; Required binaries: browsh, firefox; No install spec — this is an instruction-only skill.
Recommendation

Install Browsh and Firefox from trusted sources, and check that your PATH points to the expected binaries before using the skill.