Firm Browser Audit Pack

核心功能是审计Playwright/Puppeteer的无头浏览器配置安全，检测13种危险Chrome/Chromium启动参数（如--no-sandbox等），并按严重程度分类（CRITICAL/HIGH）。典型场景为开发或安全人员排查浏览器自动化配置的安全风险，通过指定配置文件路径运行工具，输出含危险参数及对应严重级别的审计结果，需依赖mcp-openclaw-extensions≥3.0.0。

romainsantoli-web

热度 63.43

最近更新 2026-05-11 17:28:04

分类：安全依赖：MCP 服务应用场景：自动化脚本 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add firm-browser-audit-pack

Metadata

name: firm-browser-audit-pack
version: 1.0.0
description: Browser automation security audit pack. Validates Playwright/Puppeteer headless configuration for dangerous arguments. 1 audit tool.
author: romainsantoli-web
license: MIT
metadata: {"openclaw":{"registry":"ClawHub","requires":["mcp-openclaw-extensions >= 3.0.0"]}}
tags: ["browser","security","playwright","puppeteer","audit"]

firm-browser-audit-pack

⚠️ Contenu généré par IA — validation humaine requise avant utilisation.

Purpose

Audits browser automation configurations for security risks. Detects 13 dangerous Chrome/Chromium arguments (--no-sandbox, --disable-web-security, etc.) in Playwright and Puppeteer configs with severity-based classification.

Tools (1)

Tool	Description	Severity
`openclaw_browser_context_check`	Headless browser config security audit	CRITICAL (--no-sandbox), HIGH (others)

Usage

skills:
  - firm-browser-audit-pack

# Audit browser configuration:
openclaw_browser_context_check config_path=/path/to/config.json

Requirements

mcp-openclaw-extensions >= 3.0.0