Security audit
Security checks for vulnerabilities and agentic risk
ClawScan rates this skill suspicious because scanners report browser actions that can disrupt unrelated sessions, delete saved session data, or display the wrong page; the scan is also incomplete.
Consider the risk of disrupted browser sessions, lost recoverable tabs, or personal content appearing on the projected display before installing. Skillspector inspected both listed components, but marked its analysis partial because a local path-like reference in SKILL.md could not be resolved, so the evidence is incomplete.
scripts/xps-plex.shBrowser cleanup terminates unrelated browser sessions without a confirmation gate
Unrelated browser sessions can be forcibly closed, interrupting downloads and active work and potentially losing unsaved in-memory content.
The command really does delete session recovery files without a reset request, but its paths are scoped to the dedicated Firefox profile rather than arbitrary user files. This is the same bounded data-loss issue reported by SQP-2, not an additional independent tool-parameter-abuse vulnerability.
user_pref("datareporting.policy.dataSubmissionEnabled", false);
user_pref("toolkit.telemetry.reportingpolicy.firstRun", false);
JS
rm -f "$PROF/sessionstore.jsonlz4" "$PROF"/sessionstore-backups/*
ff_windows() { hyprctl clients -j 2>/dev/null | jq '[.[] | select(.class|test("firefox"))] | length'; }
page_windows() { hyprctl clients -j 2>/dev/null | jq '[.[] | select(.class|test("firefox")) | select(.title|test("Plex"))] | length'; }
pid=$(pgrep -x firefox | head -1)
The restart paths call kill_stale, which terminates all same-named browser processes the SSH account can signal, rather than only the skill's browser instance. A routine request to display a page can therefore close unrelated browsing sessions and lose unsaved work; that destructive scope is not necessary for the advertised projection task.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
fi
kill_stale v2rayN 5
kill_stale xray 4
setsid sh -c "cd '$V2RAY_DIR' && exec ./v2rayN" >/tmp/v2rayN.log 2>&1 < /dev/null &
for _ in $(seq 1 25); do
sleep 1
ss -ltn 2>/dev/null | grep -q '@PROXY_ADDR@' && { proxy_state=started; return 0; }
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
elif [ -n "$on_profile" ]; then action=clean
else action=restart; fi
kill_stale firefox 8
setsid firefox --profile "$PROF" --new-instance >/tmp/firefox-plex.log 2>&1 < /dev/null &
fi
printf 'action\t%s\n' "$action"
wait_title firefox
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
action=reuse
else
if [ -n "${pid:-}" ]; then action=restart; kill_stale brave 8; else action=start; fi
setsid brave --ozone-platform=wayland --proxy-server='@PROXY@' \
--no-first-run --no-default-browser-check --new-window '@URL@' \
>/tmp/brave-plex.log 2>&1 < /dev/null &
fi
Every Firefox open request deletes saved session state and all session backup entries before determining whether the existing browser can be reused. Although deletion is confined to the dedicated projection profile, it can still remove recoverable tabs or session state without the user requesting a reset.
Neither reuse branch navigates to the requested URL: Firefox relies on a Plex title match, while Brave accepts any detected instance with a proxy-server argument. Because this skill controls a visible display and can fullscreen the reused browser, it can leave unrelated or sensitive content visible instead of the requested page.
Brave is launched without a dedicated user-data directory, despite the skill's promise of a dedicated proxy profile. This mixes the projection task with the account's ordinary browser state, potentially exposing personal tabs or authenticated sessions on the projected display and applying proxy routing to personal browsing.