A specialized security auditing tool that detects dangerous Chromium flags and misconfigurations in browser automation frameworks.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install firm-browser-audit-pack
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install firm-browser-audit-pack using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Firm Browser Audit Pack?
The Firm Browser Audit Pack is a technical security utility designed to harden headless browser environments used in automation. As part of the Openclaw Skills ecosystem, this pack focuses on identifying and mitigating risks associated with 13 specific and dangerous Chromium arguments—such as --no-sandbox and --disable-web-security—which are often inadvertently left active in production environments.
By leveraging this skill, developers can automatically validate their Playwright and Puppeteer configurations against a severity-based classification system. This ensures that browser-based agents maintain a high security posture while performing complex tasks, preventing potential sandbox escapes or cross-origin vulnerabilities that could compromise the host system.
Firm Browser Audit Pack Use Cases
- Auditing Playwright and Puppeteer configuration files for hidden security risks.
- Identifying critical vulnerabilities like the use of the --no-sandbox flag in headless mode.
- Automating security compliance checks within CI/CD pipelines using Openclaw Skills.
- Validating headless browser arguments before deploying data scraping or testing agents.
How Firm Browser Audit Pack Works
- The user invokes the openclaw_browser_context_check tool by providing a path to a configuration file.
- The skill parses the configuration to locate Chrome or Chromium launch arguments.
- Each argument is analyzed against a list of 13 known insecure flags.
- The tool classifies each finding into severity levels, marking items like --no-sandbox as CRITICAL.
- A comprehensive security report is returned to the agent or developer for remediation.
Firm Browser Audit Pack Setup
To install and use this skill, ensure you have the required MCP extensions and add the pack to your skills list:
# Requirement: mcp-openclaw-extensions >= 3.0.0
# Usage in your YAML configuration:
skills:
- firm-browser-audit-pack
Execute the audit command via the CLI:
openclaw_browser_context_check config_path=/path/to/your/config.json
Firm Browser Audit Pack Data Schema & Taxonomy
The skill processes JSON configuration data and outputs structured security audit results:
| Property | Type | Description |
|---|---|---|
| config_path | String | The file system path to the target configuration file. |
| severity | String | Risk level: CRITICAL (for sandbox issues) or HIGH (for others). |
| flags_found | Array | List of dangerous Chromium arguments detected during the audit. |
| status | String | Overall security health status of the browser context. |
Firm Browser Audit Pack Advanced Features
- Targeted detection of 13 distinct security-compromising Chromium arguments.
- Severity-based classification system to help developers prioritize the most dangerous risks first.
- Direct integration with Openclaw Skills workflows for automated security gatekeeping.
- Support for both Playwright and Puppeteer headless browser configuration standards.
SKILL.md
Loading
Related Openclaw Skills
Firm Auth Compliance Pack
A comprehensive suite of 8 auditing tools designed to enforce OAuth 2.1 compliance, GDPR data residency, and decentralized identity for AI agents.
Firm Agent Orchestration Pack
An advanced orchestration toolkit for managing multi-agent teams using Directed Acyclic Graph (DAG) task execution and real-time status monitoring.
Firm Advanced Security Pack
A comprehensive security auditing toolkit designed to protect AI agent configurations from prototype pollution, secret leaks, and unauthorized execution plans.
Firm ACP Bridge
A high-availability bridge for the Agent Client Protocol (ACP) that ensures autonomous agent sessions remain functional after crashes and prevents workspace race conditions.
Firm Config Migration Pack
A specialized auditing suite for validating configuration safety, environment sanitization, and data integrity during system migrations.
firm-delivery-export
A post-processing skill that transforms structured AI agent outputs into actionable deliverables across GitHub, Jira, Linear, and Slack.
Featured*
