Browserbase Persist with captcha

Create and manage persistent Browserbase cloud browser sessions with authentication persistence. Use when the user needs to automate browsers, maintain logged-in sessions across interactions, scrape authenticated pages, or manage cloud browser instances. Handles session creation, context-based auth persistence, keep-alive reconnection, captcha solving, session recording, screenshots, and session cleanup.

Install only if you are comfortable giving the skill and your agent access to Browserbase sessions and the sites you automate. Use separate contexts per site, avoid get-cookies and execute-js unless explicitly needed, disable recording/logging and CAPTCHA solving for sensitive workflows, terminate sessions promptly, delete contexts when finished, and consider pinning dependencies in an isolated environment.

Type: OpenClaw Skill Name: browserbase Version: 1.0.0 The skill is designed for legitimate browser automation via the Browserbase service. It handles sensitive data like API keys, browser cookies, and can perform file operations (screenshots, recordings) to user-specified paths. The primary reason for 'suspicious' classification is the `execute-js` command in `scripts/browserbase_manager.py`, which allows the OpenClaw agent to execute arbitrary JavaScript code within the remote cloud browser session. While this is a core feature for browser automation, it presents a significant Remote Code Execution (RCE) vulnerability if the agent's input is compromised via prompt injection, potentially leading to unauthorized actions or data exfiltration within the remote browser context. There is no evidence of intentional malicious behavior by the skill itself, such as exfiltrating data to unauthorized endpoints or installing backdoors on the local system.