Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
tekin
v1.0.0A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured commands.
⭐ 0· 2.2k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
SKILL.md documents a wrapper around the 'agent-browser' CLI (npm/GitHub references) which fits the stated purpose of browser automation. However the registry entry calls the skill 'tekin' while the instructions and install examples refer to 'agent-browser' and a GitHub repo (vercel-labs/agent-browser). The mismatch between skill name/registry metadata and the documented upstream project, plus a missing source/homepage in the registry metadata, reduces traceability and is unexpected.
Instruction Scope
The instructions are narrowly focused on using agent-browser CLI commands (open, snapshot, click, fill, screenshot, record, upload, set headers/credentials, etc.) and do not instruct unrelated system reads. That said, the documented capabilities include uploading local files, setting arbitrary HTTP headers, setting HTTP basic auth credentials, and controlling geolocation and storage — all of which are legitimate for a browser automation tool but can be used to exfiltrate sensitive local data or forward credentials to remote sites. This is expected functionality but worth flagging to users as a privacy risk.
Install Mechanism
This is an instruction-only skill (no install spec in the registry), so nothing is written by the platform itself. SKILL.md recommends 'npm install -g agent-browser' or building from a GitHub repo. Recommending npm/GitHub is normal, but because the registry metadata lacks a source/homepage and the skill name doesn't match the package name, verify the exact npm package and upstream repo before running installs. Installing from npm/git will pull third‑party code onto your system.
Credentials
The skill only requires node and npm binaries (as documented). It does not request environment variables, credentials, or config paths in the registry metadata. That is proportionate for a wrapper around an npm CLI.
Persistence & Privilege
The skill does not request always:true and does not declare any persistent or cross-skill configuration changes. It is user-invocable and allows autonomous invocation by the agent by default (the platform default), which is expected for skills of this type.
What to consider before installing
This skill appears to be an instruction-only wrapper for the 'agent-browser' CLI, but the registry entry name ('tekin') doesn't match the documented package ('agent-browser') and there is no source/homepage listed. Before installing or allowing the agent to use this skill: 1) Verify the exact npm package name and the upstream repository (confirm maintainer/ownership and check recent releases). 2) Inspect the npm package or GitHub source yourself (or review its SHA) before running npm install -g. 3) Be cautious: the CLI can upload local files, set HTTP headers/credentials, manipulate cookies/storage, and visit arbitrary websites — these capabilities can exfiltrate sensitive data if misused. 4) Run the tool in a sandboxed environment or VM when testing, and avoid granting the agent autonomous access to sensitive files or secrets. 5) If you need higher assurance, ask the publisher for the source URL and a reproducible install method (and prefer well-known package names or official project pages).Like a lobster shell, security has layers — review code before you run it.
latestvk975c6pbx4075ftnbg3sph6zah7ztmtatekinvk975c6pbx4075ftnbg3sph6zah7ztmta
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌐 Clawdis
Binsnode, npm