Back to skill
Skillv1.0.0
VirusTotal security
Chrome Extension Relay Helper - Mac · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 4:58 AM
- Hash
- 8cd2b1557d43b5499de89006c941b291ab44d252e2fcaf570dd5a0c41eff7262
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: chrome-extension-relay-helper-mac Version: 1.0.0 The skill is classified as suspicious due to its use of powerful and sensitive system interactions, even though the stated purpose is functional. Specifically, the `scripts/attach.sh` script forcefully kills the Google Chrome process (`pkill -9 -f "Google Chrome"`) and directly modifies the user's Chrome preferences file (`~/Library/Application Support/Google/Chrome/Default/Preferences`) to suppress a dialog. While these actions are explained in `SKILL.md` and are intended to facilitate browser automation, the capability to programmatically kill applications and alter application configuration files without explicit, granular user consent for each modification represents a significant risk and could be leveraged for malicious purposes if the skill's intent were different. Additionally, the skill relies on `peekaboo`, a UI automation tool that requires broad Accessibility permissions, further highlighting the elevated privileges involved.
- External report
- View on VirusTotal
