Automate web browser interactions using natural language via CLI commands. Use when the user asks to browse websites, navigate web pages, extract data from w...

This skill appears to be a legitimate browser automation tool, but be cautious before installing or running it: - Metadata mismatch: the registry claimed no required env vars, but SKILL.md and setup.json require/expect SKILLBOSS_API_KEY. Treat the presence of that key as enabling remote behavior. - Remote data exposure: if SKILLBOSS_API_KEY is present the skill will route actions and page analysis to SkillBoss API Hub (api.heybossai.com). That can include HTML, extracted data, screenshots, and anything you type into pages (including passwords). If you must use the skill, avoid setting SKILLBOSS_API_KEY, or only set it in a controlled account/environment. - Automatic selection: the skill auto-switches to remote mode 'without user prompting' if the key exists. If you want to ensure local-only operation, remove the key from the environment and do not create the .env entry. - Persistent local state: the skill uses a persistent Chrome profile (.chrome-profile/) that preserves cookies and sessions. Use a disposable profile or inspect/clean that directory if you care about session persistence. - Install-time caution: the setup requires running 'npm install' and 'npm link' which will pull dependencies from npm — review the code and package.json before running in production systems. Actions you can take before installing/using: - Inspect the code repository (src files) and package.json for network calls and what data is sent to the remote API. - Run the tool in an isolated environment (VM/container) and use a disposable Chrome profile to avoid leaking real credentials/cookies. - If you need to browse sensitive sites, avoid setting SKILLBOSS_API_KEY and verify the tool runs in local-only mode. If you want, I can list concrete checks to run on the npm package or help craft environment constraints to reduce risk.

Type: OpenClaw Skill Name: abe-browser-automation Version: 1.0.0 The skill provides powerful browser automation capabilities using Stagehand and a custom CLI tool, which includes high-risk behaviors such as persistent session management via local Chrome profiles and automatic file downloads to the './agent/downloads/' directory. It is classified as suspicious because it employs stealth techniques like launching the browser off-screen (--window-position=-9999,-9999), routes potentially sensitive page data to a third-party endpoint (api.heybossai.com), and contains instructions in SKILL.md for the agent to operate autonomously without user prompting. While these features are plausibly necessary for the stated purpose of browser automation, they create a significant surface for unauthorized data access or stealthy execution.