Back to skill
Skillv1.0.0

VirusTotal security

Chrome Extension Relay Helper - Mac · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 4:58 AM
Hash
8cd2b1557d43b5499de89006c941b291ab44d252e2fcaf570dd5a0c41eff7262
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: chrome-extension-relay-helper-mac Version: 1.0.0 The skill is classified as suspicious due to its use of powerful and sensitive system interactions, even though the stated purpose is functional. Specifically, the `scripts/attach.sh` script forcefully kills the Google Chrome process (`pkill -9 -f "Google Chrome"`) and directly modifies the user's Chrome preferences file (`~/Library/Application Support/Google/Chrome/Default/Preferences`) to suppress a dialog. While these actions are explained in `SKILL.md` and are intended to facilitate browser automation, the capability to programmatically kill applications and alter application configuration files without explicit, granular user consent for each modification represents a significant risk and could be leveraged for malicious purposes if the skill's intent were different. Additionally, the skill relies on `peekaboo`, a UI automation tool that requires broad Accessibility permissions, further highlighting the elevated privileges involved.
External report
View on VirusTotal