ClawHub
Back to skill

Security audit

qqbrowser-use

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed browser automation tool with expected persistence for user-requested reusable browser playbooks.

Install only if you want an agent to control QQ Browser for web tasks. Review any saved playbooks before reuse, avoid storing passwords or sensitive personal data in them, and require explicit confirmation before replaying workflows that post, submit, purchase, delete, message, or otherwise affect real accounts.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Session Persistence

Medium
Category
Rogue Agent
Content
#    2g: Add metadata, params, settings, and descriptions

# 3. Save
mkdir -p ~/.qqbrowser-skill/playbooks
# Write JSON to ~/.qqbrowser-skill/playbooks/<kebab-case-name>.json

# 4. Verify safely
Confidence
86% confidence
Finding
The guide instructs saving generated playbooks under a persistent user home directory (`~/.qqbrowser-skill/playbooks/`). Because playbooks can contain recorded workflow structure, fixed URLs, selectors, and potentially parameter defaults or other user-associated data, this creates a persistence surface where sensitive automation artifacts may remain on disk longer than intended and be reused or read by other local processes/users depending on host permissions.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.