Browser Bookmarks Cleanup

ReviewAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it claims, but it handles private browser history/profile data and can change bookmarks when the user approves a write.

Install only if you are comfortable letting the agent read local browser bookmarks/history and generate local reports from them. Before any cleanup, require a dry-run, review the plan, confirm that the browser is closed, and keep the backup file so changes can be rolled back.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

If approved with --write, a cleanup plan can delete, move, rename, create folders, or change bookmark URLs.

Why it was flagged

The script can write modified bookmark data back to the browser bookmark file after creating a backup.

Skill content

if args.write:
        backup_file = f"{bookmarks_path}.backup-{int(time.time())}"
        shutil.copy2(bookmarks_path, backup_file)
        dump_bookmarks(bookmarks_path, data)

Recommendation

Run the dry-run first, review every planned operation and the generated results, close the browser before writing, and keep the backup path for rollback.

Low

#ASI03: Identity and Privilege Abuse

What this means

The profile list may reveal which browser account/profile is present on the device.

Why it was flagged

Profile discovery may expose the local browser account email and profile file paths in its output.

Skill content

"account_email": normalize_name(meta.get("user_name", "")) or None,
            "bookmarks_path": str(bookmarks),
            "history_path": str(history) if history.exists() else None

Recommendation

Avoid sharing discovery output publicly if it contains account names, emails, or local file paths.

Medium

#ASI06: Memory and Context Poisoning

What this means

The generated analysis may contain private bookmark URLs, history-derived visit information, and local browser paths.

Why it was flagged

The analysis reads browser history URL records to determine stale or never-visited bookmarks.

Skill content

query = (
        "SELECT url, last_visit_date, visit_count, typed FROM moz_places WHERE url IS NOT NULL"
        if browser == "firefox"
        else "SELECT url, last_visit_time, visit_count, typed_count FROM urls"
    )

Recommendation

Store reports and plan files in a private location, inspect them before sharing, and delete temporary outputs when no longer needed.