Nstbrowser AI Agent

Browser automation CLI with Nstbrowser integration for AI agents. Use when the user needs advanced browser fingerprinting, profile management, proxy configur...

Consider this suspicious because the skill's files expect an NST_API_KEY, local Nstbrowser service (127.0.0.1:8848), and helper tools (jq, curl, Chrome), but the registry metadata claims none of those — verify before installing. Steps to protect yourself: - Verify the publisher and source: check the claimed GitHub repo and nstbrowser.io home page manually; do not trust the skill registry summary alone. Confirm the npm package and the repository content match these templates. - Inspect the included scripts (templates/*.sh) and SKILL.md personally. They show patterns that can leak credentials (passing proxy/API passwords on the command line or echoing keys into files). Prefer setting NST_API_KEY via secure environment variable or restricted config file and avoid embedding secrets in shell commands or history. - Ensure the local Nstbrowser service is legitimate and runs only on localhost. The tool communicates with a local API and exposes a debugger URL (ws://localhost:9222) which you should not expose to untrusted networks. - Install the nstbrowser-ai-agent CLI from an official source only (npmjs.org or the verified GitHub repo) and verify checksums/release notes. If you cannot verify the upstream project, do not install. - If you need to use proxies or proxy credentials, prefer using environment variables or secure vaults rather than passing passwords in plaintext on the command line. - If you want higher assurance, ask the publisher to explain the metadata mismatch (registry says no env vars while skill.json and docs require NST_API_KEY and other tools) and provide a canonical homepage/repository link.

Type: OpenClaw Skill Name: nstbrowser-ai-agent Version: 1.0.5 The nstbrowser-ai-agent skill bundle provides a professional CLI interface for the Nstbrowser automation service, enabling AI agents to manage browser profiles, configure proxies, and perform automated web interactions. The bundle is well-documented, including a detailed security model in SECURITY.md and several helper templates (e.g., automated-workflow.sh, profile-setup.sh) that facilitate legitimate use cases like anti-detection and batch profile management. While the tool includes high-risk capabilities such as JavaScript execution (eval) and proxy manipulation, these are essential for its stated purpose and are implemented without evidence of malicious intent, data exfiltration, or unauthorized persistence.