Firm Browser Audit Pack

该 Skill 提供 1 个审计工具，检查 Playwright/Puppeteer 无头浏览器配置文件中是否包含 13 类危险 Chrome/Chromium 启动参数（如 --no-sandbox、--disable-web-security 等），并按 CRITICAL、HIGH 等等级分类输出结果。依赖 mcp-openclaw-extensions 扩展包，文件本身标注为 AI 生成内…

romainsantoli-web

热度 63.29

最近更新 2026-05-11 17:28:04

分类：安全依赖：MCP 服务 / 读写文件应用场景：代码审查 / DevOps

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add firm-browser-audit-pack

Metadata

name: firm-browser-audit-pack
version: 1.0.0
description: Browser automation security audit pack. Validates Playwright/Puppeteer headless configuration for dangerous arguments. 1 audit tool.
author: romainsantoli-web
license: MIT
metadata: {"openclaw":{"registry":"ClawHub","requires":["mcp-openclaw-extensions >= 3.0.0"]}}
tags: ["browser","security","playwright","puppeteer","audit"]

firm-browser-audit-pack

⚠️ Contenu généré par IA — validation humaine requise avant utilisation.

Purpose

Audits browser automation configurations for security risks. Detects 13 dangerous Chrome/Chromium arguments (--no-sandbox, --disable-web-security, etc.) in Playwright and Puppeteer configs with severity-based classification.

Tools (1)

Tool	Description	Severity
`openclaw_browser_context_check`	Headless browser config security audit	CRITICAL (--no-sandbox), HIGH (others)

Usage

skills:
  - firm-browser-audit-pack

# Audit browser configuration:
openclaw_browser_context_check config_path=/path/to/config.json

Requirements

mcp-openclaw-extensions >= 3.0.0