Multilogin X

Use when you need to manage Multilogin X browser profiles — launch quick disposable profiles, list/start/stop saved profiles, or check launcher status using...

This skill appears to do what it says (manage Multilogin X), but exercise caution before installing or running it: the SKILL.md tells you to download and execute native binaries from an unverified S3 distribution and to supply your Multilogin credentials. Before proceeding, verify the publisher (official homepage or vendor), check cryptographic signatures or checksums for the binaries, prefer installing only from an official release page or package repository, and test in an isolated environment (VM/container) rather than on production hosts. If you must use it, avoid giving persistent or high-privilege access to the host, and consider creating least-privilege user accounts or ephemeral credentials. If the vendor/publisher cannot be confirmed, treat the install instructions as high risk and do not run them on sensitive systems.

Type: OpenClaw Skill Name: multiloginx Version: 1.0.0 The skill is classified as suspicious due to several high-risk behaviors, even though they appear to align with its stated purpose of managing Multilogin X browser profiles. Key indicators include the download and execution of external binaries from a third-party S3 bucket (`ml000x-dev-dists.s3.eu-north-1.amazonaws.com`) during installation, which poses a supply chain risk. Additionally, the skill instructs the agent to handle sensitive user credentials for `xcli login` and demonstrates the use of `sessions_spawn` to execute arbitrary shell commands (including passing credentials) on a remote node, which is a powerful remote code execution vector if misused or subject to prompt injection. All these risky operations are detailed in `SKILL.md`.