首页 › 龙虾技能列表 › Passo - Remote Browser Access

Passo - Remote Browser Access

v1.0.0

Enables secure remote access to a browser on your server for manual tasks like logins, 2FA, and captchas via a protected URL.

0· 505·0 当前·0 累计
by @felipegoulu (Felipe Goulu)·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/14
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
medium confidence
The skill's purpose (exposing a browser on your server for remote manual actions) matches its instructions, but the runtime guidance instructs you to run an externally hosted install script (curl | bash) and to rely on a third‑party service that will broker access — both of which are high‑risk and under‑documented.
评估建议
This skill is coherent with its stated purpose but carries real risk. Before installing: (1) inspect the install.sh contents (do not run curl | bash without review); (2) test in an isolated VM or disposable server, not a production host; (3) confirm the legitimacy and privacy policy of getpasso.app and what data it stores and shares; (4) assume any remote user with access can view cookies, sessions, and 2FA flows — only grant access to trusted people and revoke immediately after use; (5) prefer ...
详细分析 ▾
ℹ 用途与能力
Name/description align with the SKILL.md: it intends to install a local browser tunnel and provide a protected URL for manual actions. The extra step of signing up at getpasso.app and installing Chromium/VNC is coherent with that purpose, though those external dependencies are not declared in registry metadata.
⚠ 指令范围
The instructions tell an operator to run a remote install script (curl https://raw.githubusercontent.com/.../install.sh | bash) which will install browser/VNC and create a tunnel. That script will contact getpasso.app and prompt account signup; the instructions therefore create network-exposed remote access to a full browser session (cookies, logins, 2FA) which is a significant data‑exposure risk. The SKILL.md does not show the install script contents or what it transmits/authorizes.
⚠ 安装机制
No install spec is in the skill bundle, but the runtime instructions explicitly direct piping a script from GitHub raw into bash. Even though GitHub is a known host, piping remote scripts to shell is high risk because arbitrary code will be executed on the host; the install will also add heavy system components (Chromium, VNC, tunnel) that increase attack surface.
ℹ 凭证需求
The skill itself does not request environment variables or credentials. However, it requires sign-up at getpasso.app and uses Google sign-in for access control; that implies external authentication and possible data collection by the service. The skill does not declare what account data or tokens the external service will store or how long access persists.
✓ 持久化与权限
The skill does not request always:true, does not include code that modifies other skills, and is instruction-only. It does, however, create persistent system services on the host via the external installer (per the README), so installation will change the host but that behavior is described in the instructions.
安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/2/22

Passo 1.0.0 initial release - Launches remote browser access via a secure, server-hosted tunnel. - Enables trusted users to perform manual actions (logins, 2FA, captchas) in a browser on your server. - Easy installation with automatic setup of required dependencies. - Simple command-line control: start, stop, and status. - 30-day free trial, then $5/month subscription.

● 可疑

安装命令 点击复制

官方npx clawhub@latest install passo
镜像加速npx clawhub@latest install passo --registry https://cn.clawhub-mirror.com

技能文档

Give your user remote access to a browser on your server. Perfect for logins, 2FA, captchas, or any manual browser action.

Installation

Run this on the server where you want the browser:

curl -fsSL https://raw.githubusercontent.com/felipegoulu/passo-client/main/install.sh | bash

The script will:

  • Prompt the user to sign up at getpasso.app (if no account)
  • Install dependencies (Chromium, VNC, etc.)
  • Create the passo command

Your Browser URL

{{ACCESS_URL}}

Protected by: {{EMAIL}}

Commands

passo start   # Start the browser tunnel
passo stop    # Stop everything  
passo status  # Check if running

How to use

  • Send the URL above when you need human help
  • User opens it on their phone/laptop
  • User signs in with Google (only their email can access)
  • User does the action (login, 2FA, captcha, etc.)
  • User says "done"
  • You continue

Pricing

$5/month after 30-day free trial. Managed via getpasso.app/dashboard.

Links

  • Website: https://getpasso.app
  • Docs: https://getpasso.app/docs
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制

了解定制服务