Is skills/browser-automation-stealth safe?
Use with caution. skills/browser-automation-stealth is not clearly unsafe, but the audit flagged risks to review before you install it. Oathe's behavioral security audit gave the browser-automation-stealth skill by skills a trust score of 70/100 with 3 findings (1 high).
https://clawhub.ai/skills/browser-automation-stealth
Is skills/browser-automation-stealth safe to install?
This browser automation skill accessed multiple sensitive credential files during installation, including SSH keys and cloud service credentials. While the skill files themselves contain only documentation and no executable code, the installation process exhibited concerning behavior that could indicate potential credential harvesting.
What security issues were found in skills/browser-automation-stealth?
Category Scores
Findings (3)
HIGH Sensitive credential files accessed during installation -60 ▶
The skill installation process accessed multiple sensitive credential files including SSH private keys, AWS credentials, environment files, Docker configs, and Google Cloud credentials. While these files were not modified, unauthorized access to credential files poses a significant security risk.
MEDIUM Unexpected network connections during installation -50 ▶
Multiple HTTPS connections were established to external hosts during the installation process, including connections beyond the expected ClawHub API. This could indicate data transmission to external servers.
LOW External URL references -5 ▶
The skill documentation contains references to external URLs including a GitHub repository and support documentation. While these appear benign, they represent potential external dependencies.
Should I install skills/browser-automation-stealth?
Oathe's verdict for skills/browser-automation-stealth is CAUTION with a trust score of 70/100. Recommendation: Review before install.