Security audit

Clawser

Security checks for vulnerabilities and agentic risk

Overview

Clawser’s temporary browser sharing is disclosed, owner-controlled, and consistent with its stated purpose.

Share only tabs or profiles whose signed-in contents and account authority you intend to expose. Treat invitation links like passwords; Cloudflare carries viewer traffic. Review setup with --dry-run. Optional noVNC retains its browser profile and requires separate service/container shutdown. This static review did not validate the live deployment or downloaded dependencies.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/funnel.mjs:7
Evidence: const defaultRun = async (args) => (await exec('tailscale', args, { timeout: 15_000, maxBuffer: 1024 * 1024 })).stdout;

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/host-deps.mjs:164
Evidence: const child = spawn(entry.path, args, { stdio: ['pipe', 'pipe', 'pipe', ...(extraFd ? ['pipe'] : [])], env });

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/setup.mjs:35
Evidence: const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/setup.mjs:542
Evidence: env: process.env, homeDir: homedir(), uid: process.getuid?.(), platform: process.platform,