← 返回 Skills 市场
Firm Browser Audit Pack
作者
romainsantoli-web
· GitHub ↗
· v1.0.0
298
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install firm-browser-audit-pack
功能描述
Browser automation security audit pack. Validates Playwright/Puppeteer headless configuration for dangerous arguments. 1 audit tool.
使用说明 (SKILL.md)
firm-browser-audit-pack
⚠️ Contenu généré par IA — validation humaine requise avant utilisation.
Purpose
Audits browser automation configurations for security risks. Detects 13 dangerous Chrome/Chromium arguments (--no-sandbox, --disable-web-security, etc.) in Playwright and Puppeteer configs with severity-based classification.
Tools (1)
| Tool | Description | Severity |
|---|---|---|
openclaw_browser_context_check |
Headless browser config security audit | CRITICAL (--no-sandbox), HIGH (others) |
Usage
skills:
- firm-browser-audit-pack
# Audit browser configuration:
openclaw_browser_context_check config_path=/path/to/config.json
Requirements
mcp-openclaw-extensions >= 3.0.0
安全使用建议
This skill itself is a small instruction-only audit and appears to do what it claims, but it relies on the external package mcp-openclaw-extensions to provide the actual tool (openclaw_browser_context_check). Before installing or running: 1) Verify the source and integrity of mcp-openclaw-extensions (publisher, version, and release channel). 2) Inspect the extension or its code (if available) to confirm it only analyzes configs and does not transmit data externally. 3) When running audits, point config_path at non-sensitive sample configs first, and avoid feeding production secrets or credentials. 4) Because the skill's source/homepage is unknown, prefer running it in an isolated/test environment until you validate the extension it depends on.
功能分析
Type: OpenClaw Skill
Name: firm-browser-audit-pack
Version: 1.0.0
The skill bundle `firm-browser-audit-pack` is benign. It serves as a descriptor for a browser security audit tool, `openclaw_browser_context_check`, which aims to detect dangerous Chrome/Chromium arguments. The `SKILL.md` file clearly outlines its purpose and usage, without any evidence of prompt injection attempts against the AI agent, data exfiltration, malicious execution, or other harmful behaviors. It declares a dependency on `mcp-openclaw-extensions`, which is a standard practice for skill bundles.
能力评估
Purpose & Capability
The name/description claim to audit Playwright/Puppeteer headless arguments and the SKILL.md contains a single audit tool invocation consistent with that purpose. Minor note: the SKILL.md declares a dependency on mcp-openclaw-extensions >= 3.0.0, which is reasonable for providing the tool but is not otherwise described in the package metadata or manifest — verify that the extension is the expected provider of openclaw_browser_context_check.
Instruction Scope
Instructions are short and scoped: invoke openclaw_browser_context_check with a config_path. The SKILL.md does not instruct reading unrelated files, network exfiltration, or collecting credentials. It is minimal and focused on the declared audit task.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, which limits on-disk risk. The only install concern is the declared dependency on mcp-openclaw-extensions; how that extension is provided/installed is outside this skill and should be checked.
Credentials
The skill declares no required environment variables, credentials, or config paths. The audit operates on a user-provided config file path (config_path), which is proportional to the stated purpose.
Persistence & Privilege
The skill is not always-enabled and uses the platform default for model invocation. It does not request elevated persistence or claim to modify other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install firm-browser-audit-pack - 安装完成后，直接呼叫该 Skill 的名称或使用
/firm-browser-audit-pack触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release — 1 tool: Playwright/Puppeteer headless security audit
元数据
常见问题
Firm Browser Audit Pack 是什么？
Browser automation security audit pack. Validates Playwright/Puppeteer headless configuration for dangerous arguments. 1 audit tool. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 298 次。
如何安装 Firm Browser Audit Pack？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install firm-browser-audit-pack」即可一键安装，无需额外配置。
Firm Browser Audit Pack 是免费的吗？
是的，Firm Browser Audit Pack 完全免费（开源免费），可自由下载、安装和使用。
Firm Browser Audit Pack 支持哪些平台？
Firm Browser Audit Pack 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Firm Browser Audit Pack？
由 romainsantoli-web（@romainsantoli-web）开发并维护，当前版本 v1.0.0。
推荐 Skills