ClawHub
Back to skill

Security audit

Agent Browser

Security checks across malware telemetry and agentic risk

Overview

This is a legitimate browser automation skill, but it gives agents reusable logged-in browser state and sensitive page-capture powers without enough safety guidance.

Install only if you trust the external agent-browser npm package and source. Use disposable or task-specific browser sessions where possible, avoid sensitive accounts unless necessary, treat saved state files, screenshots, videos, PDFs, traces, cookies, and request logs as secrets, and delete them after use. Require explicit confirmation before uploads, submissions, purchases, public posts, or account changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The skill documents commands that expose and persist sensitive browser state, including cookies, localStorage, saved auth state, recordings, screenshots, and network request history, but it does not clearly warn users that these actions may capture credentials, session tokens, personal data, or other private content. In an agent setting, this increases the chance of unintentional data retention or reuse across tasks, especially when state is saved to disk or reused in later sessions.

Session Persistence

Medium
Category
Rogue Agent
Content
```bash
agent-browser state save auth.json    # Save session state
agent-browser state load auth.json    # Load saved state
```

## Example: Form submission
Confidence
95% confidence
Finding
Load saved state

Session Persistence

Medium
Category
Rogue Agent
Content
agent-browser wait --url "/dashboard"
agent-browser state save auth.json

# Later sessions: load saved state
agent-browser state load auth.json
agent-browser open https://app.example.com/dashboard
```
Confidence
97% confidence
Finding
load saved state

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.