Virtual Desktop Pro v4 -- Universal Browser Execution

Persistent authenticated browser for OpenClaw via kasmweb/chrome Docker sidecar. Principal logs in once via noVNC — sessions saved permanently in Docker volu...

This skill appears to do what it claims, but it grants the agent broad access to any sites you log into via the persistent browser and uses optional third‑party services that can receive data (screenshots, pages) and incur costs. Before installing: 1) Back up your docker-compose.yml; review the one‑liner change before applying. 2) Run the browser sidecar on an isolated VPS or test environment first. 3) Restrict access to port 6901 (prefer SSH tunnel or firewall rule to your IP). 4) Use a strong VNC_PW and rotate it if you stop using the skill. 5) Only set CAPSOLVER/BROWSERBASE/ANTHROPIC/TELEGRAM keys if you trust those services; expect CAPTCHA screenshots and page content to be transmitted. 6) Inspect the kasmweb/chrome image version and consider pinning/updating it from an official source. 7) Monitor /workspace/logs and audit the AUDIT.md and screenshots for unexpected activity. If you want higher assurance, ask the publisher for provenance of the repo and a signed release or run the container with network egress rules to limit external destinations.

Type: OpenClaw Skill Name: virtual-desktop-pro Version: 4.0.1 The skill bundle performs high-privilege system modifications, including editing the host's `docker-compose.yml` and `openclaw.json` files, and using `docker exec` to install Playwright dependencies. These actions in `SKILL.md` facilitate a persistent authenticated browser environment that stores user sessions and opens port 6901 for noVNC access, creating a significant attack surface. While the logic in `browser_control.py` for CAPTCHA solving (via `capsolver.com`) and stealth proxying (via `browserbase.com`) aligns with the stated purpose of browser automation, the level of host-level control and session persistence is inherently risky.