Browser Automation CLI

• Verdict: Pass
• Analyzed: May 12, 2026, 3:28 AM
• Findings: 0
• Version: 1.0.0
• Hash: a5e3c7b7aef27b14fec79307fb659fd5c683359933d18825f180d6bb34b0341d
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The skill is classified as suspicious due to its inherent high-risk capabilities, despite being transparently documented and aligned with its stated purpose of browser automation. Key indicators include full browser access with network capabilities (including potential access to internal networks), unrestricted file download functionality to `./agent/downloads/`, and the persistence of credentials (saved passwords, cookies) within the `.chrome-profile/` directory, as detailed in `REFERENCE.md`. Additionally, the skill's setup involves executing `npm install` and `npm link` via Bash, as instructed in `SKILL.md` and `setup.json`, which are powerful commands. While these capabilities are necessary for a browser automation tool, they present significant security risks if misused or if the agent is compromised.