Browser Config

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a straightforward browser-configuration guide, but it can restart OpenClaw browser services and reuse saved browser logins.

Install only if you want OpenClaw-CN browser configuration help. Be aware that changing the config can restart browser services, and that Chrome/openclaw browser modes may keep you logged in to websites; use a separate profile for sensitive accounts when possible.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the commands can switch browser mode, restart the OpenClaw gateway, or interrupt existing browser sessions.

Why it was flagged

The skill instructs the user to edit local OpenClaw configuration and run CLI commands that restart the gateway and start a browser profile. This is expected for a browser configuration skill, but it changes local runtime state.

Skill content
编辑 `C:\Users\Administrator\.openclaw\openclaw.json` ... `openclaw-cn gateway restart` ... `openclaw-cn browser --browser-profile openclaw start`
Recommendation

Review the target profile and configuration path before applying changes, and back up openclaw.json if the current setup matters.

What this means

If the configured browser is used on social, business, or other sensitive sites, actions may occur as the logged-in user.

Why it was flagged

The documented browser modes can reuse existing Chrome login state or persist OpenClaw browser login data. This is disclosed and purpose-aligned, but it means browser automation may act with the user's logged-in web accounts.

Skill content
`chrome` 模式 ... `使用 Chrome 现有登录`; `登录数据保存在 C:\Users\Administrator\.openclaw\browser\openclaw\user-data`; `登录一次后会话会保持`
Recommendation

Prefer a separate OpenClaw browser profile for automation, connect Chrome mode only to intended tabs, and sign out or clear the profile when persistent sessions are no longer desired.