Obscura Skill

Use when scraping the web, driving headless browser automation, or running E2E tests from Claude Code. Obscura is a Rust-based, drop-in headless Chrome repla...

This skill is coherent with its stated purpose, but before installing or using it you should: (1) verify the upstream GitHub repository and release assets (check publisher/account, release tags, and checksums) before running downloaded binaries; (2) be prepared to use sudo to install the binary or prefer running it in a sandbox/container if you don't want system-wide changes; (3) understand that running 'obscura serve' opens a local CDP port that other local processes could access — restrict network access if necessary; (4) 'stealth' features help bypass basic bot-detection but can enable misuse — avoid using them to violate sites' terms or the law; and (5) if you plan to build from source, ensure you have trusted toolchains (Rust, V8 build) and sufficient resources. If you want stronger assurance, inspect the upstream project's source and release signatures or run the binary inside an isolated environment (container or VM) first.

Type: OpenClaw Skill Name: obscura-skill Version: 1.0.0 The skill bundle instructs the AI agent to download and install a third-party binary ('Obscura') from a GitHub repository (h4ckf0r0day/obscura) using elevated privileges (sudo mv). While the tool is presented as a legitimate headless browser for web scraping and E2E testing, the installation of unverified binaries with root access and the tool's focus on 'stealth' and anti-detection techniques represent a high-risk pattern. There is no explicit evidence of malicious intent or data exfiltration in the provided files, but the combination of high-privilege installation and the source repository's name warrants caution.