OpenClaw Native Browser

• Analyzed: May 12, 2026, 4:12 AM
• Findings: 1
• Version: 0.1.0
• Hash: a04464d92bb794708cc5cf363538ba4f7180d25277a09e53318d3bc553bc8bc7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its broad capabilities that present significant security risks if misused or exploited via prompt injection. Key indicators include the `allowed-tools` declaration in `SKILL.md` granting arbitrary `Bash(python:*)` and `Bash(pip:*)` execution, the ability to execute arbitrary JavaScript (`skill.execute_js`) on any loaded webpage, and explicit functions for handling user credentials (`skill.login_perplexity`, etc.) and accessing/manipulating cookies (`skill.get_cookies`, `skill.set_cookie`). While these features align with the stated purpose of a native browser skill, they provide powerful primitives that could be leveraged for data exfiltration, unauthorized actions, or session hijacking if the agent is compromised, making it a high-risk component.