Stagehand Browser CLI

Automate web browser interactions using natural language via CLI commands. Use when the user asks to browse websites, navigate web pages, extract data from websites, take screenshots, fill forms, click buttons, or interact with web applications.

Install only if you trust the publisher and can inspect the actual CLI source and dependencies behind the npm install/npm link flow. Use a dedicated browser profile, avoid saved passwords and sensitive accounts, choose local versus Browserbase mode deliberately, confirm before submitting forms or downloading files, and periodically clear screenshots, downloads, cache, and .chrome-profile data.

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The skill is classified as suspicious due to several high-risk capabilities, even without clear evidence of intentional malicious behavior within the provided files. The `SKILL.md` explicitly allows `Bash` execution, granting the AI agent broad command execution capabilities. The `REFERENCE.md` reveals that the browser uses a persistent profile (`.chrome-profile/`) which stores sensitive data like cookies and potentially saved passwords, and it allows unrestricted file downloads to a known path (`./agent/downloads/`). These features, combined with the natural language interface for browser automation, make the skill highly susceptible to prompt injection from a user to perform unauthorized actions, data exfiltration, or download and potentially execute malicious payloads.