Back to skill
Skillv1.0.0

VirusTotal security

Chrome Relay · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 29, 2026, 6:21 AM
Hash
a4285ca92e3513c4f01a7137b8164dec3ee3cbd12149ed0d22aba4ddbd41f7d8
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: chrome-relay Version: 1.0.0 The skill bundle provides instructions for an AI agent to control a user's local Chrome browser, including access to active logged-in sessions and the ability to execute arbitrary JavaScript via the `evaluate` action. While these capabilities are aligned with the stated purpose of browser automation in `SKILL.md`, they constitute high-risk behaviors as defined in the analysis criteria. The setup requires manual installation of an unpacked extension from a local path (`~/.openclaw/browser/chrome-extension`) and the retrieval of a gateway authentication token, but no evidence of intentional malice or unauthorized data exfiltration was identified.
External report
View on VirusTotal