安全扫描
OpenClaw
可疑
medium confidence该技能实现了合理的远程Chrome服务,但包元数据缺少必需的系统依赖项,脚本在URL和/tmp中暴露VNC密码,存在不一致和隐私风险,需谨慎使用。
评估建议
["元数据不匹配:注册表声明没有必需的二进制文件,但脚本需要系统包(Xvfb、x11vnc、noVNC/websockify、Chromium/Chrome、openssl)。在运行前安装这些包,否则启动脚本将失败。","VNC密码处理:启动脚本将自动生成的VNC密码写入/tmp/remote-chrome-vnc-password.txt(chmod 600),状态脚本构造的noVNC URL包含密码在查询字符串中。建议不要将服务暴露到公共互联网,使用SSH端口转发、限制防火墙访问或修改脚本避免在URL中放置密码。","网络暴露:脚本打开VNC、noVNC和Chrome调试端口。运行前确认Chrome的远程调试是否仅绑定到localhost(更安全)或所有接口。如果这些服务可以从外部访问,攻击者可能会访问远程浏览器和数据。建议在受信任的隔离环境(VM/容器)或防火墙后运行。","最小权限:使用非root用户运行脚本。运行前检查脚本以确保没有意外命令(提供的文件看起来良好)。如果在局域网中暴露此服务,考虑在noVNC/websockify前添加身份验证或TLS。","安装前快速检查:手...详细分析 ▾
⚠ 用途与能力
The skill description and scripts align: they start/stop/status a Chrome instance via Xvfb, x11vnc, and noVNC. However the registry metadata lists no required binaries or environment variables, while the scripts clearly require Xvfb, x11vnc, websockify/noVNC, Chromium/Chrome, and openssl. That metadata omission is an incoherence (the skill will fail without system packages).
ℹ 指令范围
SKILL.md and the scripts are scoped to managing local services and querying the local Chrome debug endpoint. They read /proc to discover processes and store the generated VNC password in /tmp/remote-chrome-vnc-password.txt for status reporting. The scripts do not appear to contact remote endpoints for control, but the status/start scripts expose the VNC password in a web URL query parameter which can leak via logs or Referer headers.
✓ 安装机制
This is an instruction-only skill with included shell scripts (no automated remote install). There is no installer that downloads and executes arbitrary code. The included installation guidance references official package managers and an official Google Chrome download URL; that is expected and lower risk than arbitrary remote downloads.
ℹ 凭证需求
The skill declares no required environment variables or credentials (which is accurate for API keys), but the scripts respect proxy environment variables and create a local VNC password file in /tmp. Storing the password in /tmp and embedding it in the web URL increases the chance of accidental exposure. No unrelated cloud credentials are requested (no over-broad secret access).
✓ 持久化与权限
The skill does not request permanent agent-wide presence (always:false) and does not attempt to modify other skills or system-wide agent settings. It runs local processes and writes temporary files under /tmp, which is consistent with its purpose.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/14
["远程Chrome技能的初始发布。","使用Xvfb、x11vnc和noVNC启动、停止、重启或检查远程Chrome浏览器服务状态。","提供基于Web的(noVNC)和直接VNC访问以远程访问完整的Chrome GUI。","启动脚本自动检查依赖项并提供安装指导。","包括灵活的选项:自定义端口、屏幕分辨率、代理支持和详细模式。","提供与agent-browser技能集成的指示。"]
● 可疑
安装命令 点击复制
官方npx clawhub@latest install remote-chrome
镜像加速npx clawhub@latest install remote-chrome --registry https://cn.clawhub-mirror.com
技能文档
快速启动
# 启动服务(自动检查依赖项)
./start-remote-chrome.sh
# 检查状态和获取访问信息
./status-remote-chrome.sh
# 停止服务
./stop-remote-chrome.sh
... (由于长度限制,完整的cn_skill_md_content未全部显示,但以下是关键部分的翻译)数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制