Skills/ClawHub/web-browser

web-browser@0.3.0

VERIFIED

Publisher claims: "Environment-aware browser operations. Detects wmux/cmux/Orca/tmux and routes to backend. Topics — ui-test (snapshots, click/fill, shadow DOM), credential-issue (login via backend -> wait sign-in -> issue/refresh token/secret), orca-computer (drive the user's real signed-in browser via `orca computer`, for bot-blocked sign-in). Use when: "browser", "web-browser", "ui-test", "credential-issue", "orca-computer", "orca computer", "computer use", "playwright", "chrome-devtools", "UI check", "browser test", "screen verify", "Playwright test", "shadow DOM cascade", "::part not working", "CDP trace", "issue token", "service credential", "open login screen", "PAT refresh", "scope expansion", "device-code auth", "browser device-code", "GitHub social login", "Cloudflare Turnstile", "bot-blocked login", "browser may not be secure"." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher drumrobot · joined 0 days agoInstalls 1,905Last detonated 7 h ago
$clawhub install web-browser
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-27 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Authorization escalation languageorca-computer.md:70 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
npx invocation of non-well-known packagescripts/cdp-trace.js:7 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageSKILL.md:102 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06