Rent My Browser

When the agent is idle, connect to the Rent My Browser marketplace and execute browser tasks for consumers. Earn money by renting out the node's browser duri...

What to consider before installing: - Trust: This skill connects your node to an external marketplace and executes tasks submitted by strangers. Only install if you trust the marketplace operator (api.rentmybrowser.dev) and their security/privacy practices. - Secrets & persistence: The skill will store an API key and a generated private key/wallet in a persistent directory (~/.rent-my-browser by default). Those files can be used to act as your node and should be treated as highly sensitive. Consider setting RMB_PERSIST_DIR to an isolated location or not installing if you cannot secure those files. - Execution surface: Tasks are executed by opening a browser and interacting with arbitrary sites. Even with the provided validator, regex-based checks are brittle — a malicious or poorly-constructed task could still cause unwanted actions or data leakage. Do not run this on a machine containing sensitive keys, accounts, or personal data; prefer an isolated VM/container. - Scheduling frequency: The cron job runs every 10s by default (heavy). Consider reducing frequency or only running manually until you’re confident in behavior. - Hardening: Before enabling, review/modify scripts: a) run npm install in the skill directory to satisfy node deps, b) inspect and test validate-task.mjs coverage for your threat model, c) restrict modes with RMB_ALLOWED_MODES (e.g., disallow 'adversarial'), and d) consider configuring RMB_PERSIST_DIR to a secure location with restricted permissions. - Removeability: To stop the skill, run the provided disconnect.sh which attempts to remove the cron job and report in-progress tasks; test this in your environment to ensure it properly cleans up. If you are not willing to audit the code and run it in a strongly isolated environment, do not install or run this skill.

Type: OpenClaw Skill Name: rent-my-browser Version: 1.0.4 The skill connects the agent to a third-party marketplace (api.rentmybrowser.dev) to execute arbitrary browser tasks, which is a high-risk capability involving remote control and data exfiltration (screenshots/extracted data). While the bundle includes significant defensive measures—such as a regex-based task validator (validate-task.mjs) and strict mandatory security rules in SKILL.md to prevent local file access and secret theft—the core functionality remains a major attack surface for prompt injection. It is classified as suspicious due to the inherent risk of executing untrusted external 'goals' on the host machine, even though the intent appears to be a legitimate monetization framework with active safety mitigations.