Stable Browser

• Analyzed: May 11, 2026, 4:49 AM
• Findings: 1
• Version: 1.0.0
• Hash: 823ef2a6ab936bcdf5ba71dde32d6a3e20bfa5e42028ccc65defa13d8609cec9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It sets up a dedicated Chrome instance for OpenClaw's browser automation via the Chrome DevTools Protocol (CDP). The `scripts/setup-cdp.sh` script launches Chrome with a debug port, creates a dedicated user profile (`~/.chrome-debug-profile`), updates the local OpenClaw configuration (`~/.openclaw/openclaw.json`), and establishes a macOS LaunchAgent (or provides systemd instructions for Linux) to ensure Chrome auto-starts and persists. All actions, including file system modifications and persistence mechanisms, are explicitly stated in `SKILL.md` and are directly aligned with the skill's stated purpose of providing a stable browser connection. There is no evidence of data exfiltration, unauthorized remote execution, obfuscation, or prompt injection attempts to subvert the agent for malicious ends.