中文 EN
Start Review
Skill Trust Decision

chrome-use

chrome-use是浏览器自动化工具，仅含SKILL.md文档，无脚本代码可供审查。curl|sh安装模式虽被标记为危险模式，但这是CLI工具常见模式，文档未声明敏感权限。

Install decision first Source: ClawHub Scanned: 20 days ago
Files 1
Artifacts 2
Violations 0
Findings 3

Why this conclusion was reached

1/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Block
Hidden execution and egress

2 high-risk artifacts or egress signals were extracted.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

1 dependency or supply-chain issues need attention.

What drove the risk score up

curl|sh远程脚本执行 +15

SKILL.md:36,58 两处curl|sh是常见CLI模式，但存在供应链风险

无代码可审查 +5

仅有SKILL.md文档，无scripts/*审查实际行为

文档声明清晰 +-5

allowed-tools明确声明Bash(chrome-use:*)，未超权

Most important evidence

Medium Supply Chain

curl|sh远程脚本执行

SKILL.md包含两处curl|sh模式执行远程脚本，存在供应链攻击风险。攻击者可能篡改GitHub仓库中的install.sh或upgrade脚本注入恶意代码。

SKILL.md:36
使用安全安装方式：先下载脚本审查内容后再执行，或使用包管理器安装
Medium Supply Chain

upgrade-use-family.sh远程执行

Family升级脚本同样采用curl|sh模式，风险同上。

SKILL.md:58
建议使用chrome-use upgrade内置命令替代
Low Doc Mismatch

无实际代码可审查

该skill仅包含SKILL.md文档，无scripts/*文件，无法验证chrome-use二进制实际行为。建议在实际部署前沙箱测试。

SKILL.md:1
在隔离环境中测试chrome-use实际功能

Declared capability vs actual capability

Filesystem Pass
Declared NONE
→
Inferred UNKNOWN
无脚本文件，仅文档
Shell Pass
Declared ADMIN
→
Inferred —
allowed-tools: Bash(chrome-use:*), Bash(abs:*), Bash(npx chrome-use:*)
Browser Pass
Declared ADMIN
→
Inferred —
SKILL.md:描述Chrome浏览器自动化功能
Network Pass
Declared READ
→
Inferred —
用于网页访问、爬取等

Suspicious artifacts and egress

Critical Dangerous Command
curl -fsSL https://raw.githubusercontent.com/leeguooooo/chrome-use/main/install.sh | sh

SKILL.md:36

Critical Dangerous Command
curl -fsSL https://raw.githubusercontent.com/leeguooooo/plugins/main/upgrade-use-family.sh | sh

SKILL.md:58

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
chrome-use latest GitHub Release No 二进制工具，无版本锁定

File composition

1 files · 58 lines
Markdown 1 files · 58 lines
Files of concern · 1
SKILL.md Markdown · 58 lines
curl|sh远程脚本执行 · upgrade-use-family.sh远程执行 · 无实际代码可审查 · curl -fsSL https://raw.githubusercontent.com/leeguooooo/chrome-use/main/install.sh | sh · curl -fsSL https://raw.githubusercontent.com/leeguooooo/plugins/main/upgrade-use-family.sh | sh

Security positives

文档声明清晰，allowed-tools明确列出Bash权限范围
声称功能合理：Chrome浏览器自动化是合法用例
无base64编码、eval、敏感路径遍历等高危模式
无凭证收割、环境变量遍历等数据外泄迹象