中文 EN
Start Review
Skill Trust Decision

chrome-use

chrome-use 技能声称提供 Chrome 浏览器自动化，但通过未版本锁定的远程脚本安装，存在供应链攻击风险

Install decision first Source: ClawHub Scanned: 19 days ago
Files 3
Artifacts 4
Violations 0
Findings 2
Most direct threat evidence
01
用户通过 AI Agent 安装 chrome-use 技能 Entry · SKILL.md
02
Agent 执行 curl | sh 从 GitHub 下载并执行安装脚本 Escalation · SKILL.md
03
若 GitHub 仓库被入侵，攻击者可在用户机器上执行任意代码 Impact · N/A

Why this conclusion was reached

2/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Block
Hidden execution and egress

2 high-risk artifacts or egress signals were extracted.

Block
Attack chain and severe findings

The report includes 3 attack-chain steps and 1 severe findings.

Review
Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

Attack Chain

01
用户通过 AI Agent 安装 chrome-use 技能

Entry · SKILL.md:36

02
Agent 执行 curl | sh 从 GitHub 下载并执行安装脚本

Escalation · SKILL.md:36

03
若 GitHub 仓库被入侵，攻击者可在用户机器上执行任意代码

Impact · N/A

What drove the risk score up

远程脚本管道执行 +20

SKILL.md:36,58 - curl URL | sh 直接执行远程脚本，无版本锁定

供应链依赖 GitHub 仓库 +15

依赖 leeguooooo 私人 GitHub 仓库，仓库被入侵或脚本被篡改时自动执行恶意代码

文档未完整披露风险 +10

SKILL.md 未警告远程脚本风险，仅 skill-card.md 提及

Most important evidence

High Supply Chain

未版本锁定的远程脚本执行

install.sh 和 upgrade-use-family.sh 从 GitHub raw URL 实时下载并直接执行，若仓库被入侵可导致 RCE

SKILL.md:36
使用版本锁定的 release artifact 或 hash 校验脚本内容
Medium Doc Mismatch

风险披露不一致

SKILL.md 未提及远程脚本执行风险，而 skill-card.md 明确标注该风险并建议验证来源

SKILL.md:1
SKILL.md 应添加安全警告和验证说明

Declared capability vs actual capability

Filesystem Pass
Declared WRITE
→
Inferred WRITE
SKILL.md:1 Bash(chrome-use:*) 允许执行任意 chrome-use 命令
Network Pass
Declared READ
→
Inferred WRITE
SKILL.md:36,58 curl 远程脚本
Shell Pass
Declared WRITE
→
Inferred WRITE
SKILL.md:36,58 使用 | sh 管道执行

Suspicious artifacts and egress

Critical Dangerous Command
curl -fsSL https://raw.githubusercontent.com/leeguooooo/chrome-use/main/install.sh | sh

SKILL.md:36

Critical Dangerous Command
curl -fsSL https://raw.githubusercontent.com/leeguooooo/plugins/main/upgrade-use-family.sh | sh

SKILL.md:58

Medium External URL
https://clawhub.ai/user/leeguooooo

skill-card.md:9

Medium External URL
https://clawhub.ai/leeguooooo/skills/chrome-use

skill-card.md:35

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
chrome-use * GitHub raw script No 通过 curl | sh 安装，无版本锁定，存在供应链风险

File composition

3 files · 116 lines
Markdown 2 files · 111 linesJSON 1 files · 5 lines
Files of concern · 2
SKILL.md Markdown · 58 lines
未版本锁定的远程脚本执行 · 风险披露不一致 · curl -fsSL https://raw.githubusercontent.com/leeguooooo/chrome-use/main/install.sh | sh · curl -fsSL https://raw.githubusercontent.com/leeguooooo/plugins/main/upgrade-use-family.sh | sh
skill-card.md Markdown · 53 lines
https://clawhub.ai/user/leeguooooo · https://clawhub.ai/leeguooooo/skills/chrome-use
Other files · _meta.json

Security positives

skill-card.md 明确披露了远程脚本执行风险并提供缓解建议
chrome-use 是真实存在的开源项目（非空壳）
无代码执行阴影功能 - 所有操作均已在文档声明
无凭证收割或数据外泄行为