Web-search(Bing-CN)

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

If the user enables noSandbox, browsing untrusted pages could have less containment than normal browser automation.

Why it was flagged

The skill provides an optional browser configuration example that disables the browser sandbox. This is not hidden and is related to browser operation, but it weakens browser isolation if copied.

Skill content

"browser": { "headless": true, "noSandbox": true }

Recommendation

Use the default browser sandbox unless there is a specific, understood need to disable it.

Note

ASI03: Identity and Privilege Abuse

What this means

The skill may lead the user into an authenticated browsing flow, so account-specific pages or permissions could be involved.

Why it was flagged

The skill discloses that it may open the host browser for the user to log in when a visited site requires authentication. This is purpose-aligned but may involve the user's real website accounts.

Skill content

仅在网站明确要求登录时（检测到登录弹窗/按钮），才打开 host 浏览器

Recommendation

Only log in to sites you trust and review any account-related actions before continuing.