← Back to Skills Marketplace
Firm Browser Audit Pack
by
romainsantoli-web
· GitHub ↗
· v1.0.0
298
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install firm-browser-audit-pack
Description
Browser automation security audit pack. Validates Playwright/Puppeteer headless configuration for dangerous arguments. 1 audit tool.
README (SKILL.md)
firm-browser-audit-pack
⚠️ Contenu généré par IA — validation humaine requise avant utilisation.
Purpose
Audits browser automation configurations for security risks. Detects 13 dangerous Chrome/Chromium arguments (--no-sandbox, --disable-web-security, etc.) in Playwright and Puppeteer configs with severity-based classification.
Tools (1)
| Tool | Description | Severity |
|---|---|---|
openclaw_browser_context_check |
Headless browser config security audit | CRITICAL (--no-sandbox), HIGH (others) |
Usage
skills:
- firm-browser-audit-pack
# Audit browser configuration:
openclaw_browser_context_check config_path=/path/to/config.json
Requirements
mcp-openclaw-extensions >= 3.0.0
Usage Guidance
This skill itself is a small instruction-only audit and appears to do what it claims, but it relies on the external package mcp-openclaw-extensions to provide the actual tool (openclaw_browser_context_check). Before installing or running: 1) Verify the source and integrity of mcp-openclaw-extensions (publisher, version, and release channel). 2) Inspect the extension or its code (if available) to confirm it only analyzes configs and does not transmit data externally. 3) When running audits, point config_path at non-sensitive sample configs first, and avoid feeding production secrets or credentials. 4) Because the skill's source/homepage is unknown, prefer running it in an isolated/test environment until you validate the extension it depends on.
Capability Analysis
Type: OpenClaw Skill
Name: firm-browser-audit-pack
Version: 1.0.0
The skill bundle `firm-browser-audit-pack` is benign. It serves as a descriptor for a browser security audit tool, `openclaw_browser_context_check`, which aims to detect dangerous Chrome/Chromium arguments. The `SKILL.md` file clearly outlines its purpose and usage, without any evidence of prompt injection attempts against the AI agent, data exfiltration, malicious execution, or other harmful behaviors. It declares a dependency on `mcp-openclaw-extensions`, which is a standard practice for skill bundles.
Capability Assessment
Purpose & Capability
The name/description claim to audit Playwright/Puppeteer headless arguments and the SKILL.md contains a single audit tool invocation consistent with that purpose. Minor note: the SKILL.md declares a dependency on mcp-openclaw-extensions >= 3.0.0, which is reasonable for providing the tool but is not otherwise described in the package metadata or manifest — verify that the extension is the expected provider of openclaw_browser_context_check.
Instruction Scope
Instructions are short and scoped: invoke openclaw_browser_context_check with a config_path. The SKILL.md does not instruct reading unrelated files, network exfiltration, or collecting credentials. It is minimal and focused on the declared audit task.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, which limits on-disk risk. The only install concern is the declared dependency on mcp-openclaw-extensions; how that extension is provided/installed is outside this skill and should be checked.
Credentials
The skill declares no required environment variables, credentials, or config paths. The audit operates on a user-provided config file path (config_path), which is proportional to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and uses the platform default for model invocation. It does not request elevated persistence or claim to modify other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install firm-browser-audit-pack - After installation, invoke the skill by name or use
/firm-browser-audit-pack - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release — 1 tool: Playwright/Puppeteer headless security audit
Metadata
Frequently Asked Questions
What is Firm Browser Audit Pack?
Browser automation security audit pack. Validates Playwright/Puppeteer headless configuration for dangerous arguments. 1 audit tool. It is an AI Agent Skill for Claude Code / OpenClaw, with 298 downloads so far.
How do I install Firm Browser Audit Pack?
Run "/install firm-browser-audit-pack" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Firm Browser Audit Pack free?
Yes, Firm Browser Audit Pack is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Firm Browser Audit Pack support?
Firm Browser Audit Pack is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Firm Browser Audit Pack?
It is built and maintained by romainsantoli-web (@romainsantoli-web); the current version is v1.0.0.
More Skills