Security audit

Browser Vps Setup Skill

Security checks for vulnerabilities and agentic risk

Overview

The skill matches its stated VPS browser setup purpose, but it needs Review because it combines root-level setup, disabled Chrome sandboxing, unsafe proxy credential handling, and broad firewall changes.

Use this only on an isolated VPS you can rebuild. Before installing, remove Chrome --no-sandbox/noSandbox=true, run the browser stack as an unprivileged user, explicitly bind noVNC/websockify/CDP to loopback, avoid inline proxy credentials, and review firewall changes manually instead of applying the provided UFW block unchanged.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (3)

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:51
Finding: Chrome Runs Without Its Security Sandbox
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Error

Location: SKILL.md:95
Finding: Authenticated Proxy Credentials Are Embedded in Process Arguments and Transmitted Using Plaintext Basic Authentication
Content: View full analysis
Remediation: View remediation

T05 · Unauthorized Access and Privilege Escalation

Warning

Location: SKILL.md:160
Finding: Skill Replaces Host-Wide Firewall Policy and Opens Unnecessary Inbound Ports
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Tool Parameter Abuse

High

Category: Tool Misuse
Confidence: 85% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.
bash
# Clean stale locks rm -f /tmp/.X99-lock ~/.openclaw/browser/openclaw/user-data/SingletonLock 2>/dev/null # Virtual display Xvfb :99 -screen 0 1280x800x24 &

Tool Parameter Abuse

High

Category: Tool Misuse
Confidence: 85% confidence
Finding: Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
Content: Scanner excerpt · SKILL.md (reported line 147)May include surrounding context.
bash
pkill -9 chrome rm -f ~/.openclaw/browser/openclaw/user-data/SingletonLock DISPLAY=:99 google-chrome-stable --no-sandbox --disable-gpu \ --remote-debugging-port=18800 \ --user-data-dir=~/.openclaw/browser/openclaw/user-data \

Static analysis

No suspicious patterns detected.