ClawHub
Back to skill

Security audit

unbrowser

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed web-browsing helper with sensitive cookie-handling features that are purpose-aligned and explicitly scoped.

Install this only if you are comfortable with a local browsing tool that can handle session cookies. Use isolated installation, keep any cookie solver on loopback, provide cookies only for the exact site you intend to use, and require confirmation before posts, purchases, deletes, settings changes, or other account-changing actions.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

YARA rule 'info_stealer': Information stealer patterns (credential harvesting, browser data theft) [malware]

High
Category
YARA Match
Content
- **Drag/drop, hover-only menus, intersection-observer infinite scroll, real keystroke timing under fingerprinting.** v1 has no inter-key jitter or scroll easing.
- **Multipart uploads.** `submit` supports GET and `application/x-www-form-urlencoded` POST only; multipart upload forms require escalation.
- **Heavy JIT-bound JS** (Google Sheets, Figma, Notion editor). QuickJS is 20–50× slower than V8 — the page may technically run but settle times will be unworkable.
- **Login flows that require interactive auth.** Use the managed browser to log in once. Cookies exported from that session can be replayed via `cookies_set` **for the same site only** — see [Operational safety](#operational-safety) for the rules around cookie reuse.

## Escalation accountability
Confidence
84% confidence
Finding
Cookies exported from that session can be replayed via `cookies_set` **for the same site only** — see [Operational safety](#opera; cookies_set` **for the same site only** — see [Operational safety](#o

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.