Trusted — Risk Score 5/100
Last scan:23 hr ago Rescan
5 /100
coupang-shopping-relay
로그인된 Chrome browser relay로 쿠팡 검색, 비교, 장바구니 조회/추가/삭제/수량 변경, 주문 직전 검수를 수행하는 OpenClaw 스킬
A legitimate Chrome browser relay skill for Coupang shopping assistance with comprehensive documentation, explicit safety rules, and no malicious indicators.
Skill Namecoupang-shopping-relay
Duration25.8s
Enginepi
Safe to install
This skill is safe to use. No security concerns identified.
ResourceDeclaredInferredStatusEvidence
Filesystem READ READ ✓ Aligned SKILL.md: Permission to read documentation files
Network READ READ ✓ Aligned SKILL.md: Explicitly uses Chrome browser relay only, no direct HTTP requests
Browser READ READ ✓ Aligned SKILL.md: Uses user logged-in Chrome session via relay
Shell NONE NONE No shell execution found in any files
credential_theft NONE NONE SKILL.md explicitly prohibits storing passwords, card numbers, auth codes
3 findings
🔗
Medium External URL 外部 URL
https://www.coupang.com/
SKILL.md:179
🔗
Medium External URL 外部 URL
https://www.coupang.com/np/search?q=
SKILL.md:180
🔗
Medium External URL 外部 URL
https://cart.coupang.com/cartView.pang
SKILL.md:181

File Tree

7 files · 39.9 KB · 1066 lines
Markdown 6f · 1062L YAML 1f · 4L
├─ 📁 agents
│ └─ 📋 openai.yaml YAML 4L · 261 B
├─ 📁 assets
│ └─ 📝 coupang-relay-memory-template.md Markdown 83L · 2.4 KB
├─ 📁 references
│ ├─ 📝 browser-relay-workflow.md Markdown 271L · 8.9 KB
│ ├─ 📝 coupang-page-structure.md Markdown 145L · 6.6 KB
│ ├─ 📝 improvement-log.md Markdown 241L · 8.0 KB
│ └─ 📝 operating-memory.md Markdown 135L · 4.6 KB
└─ 📝 SKILL.md Markdown 187L · 9.1 KB

Security Positives

✓ Comprehensive SKILL.md with explicit safety rules and clear scope boundaries
✓ Intentional limitations documented: no login automation, no payment submission, no bot bypass
✓ Explicit sensitivity data handling rules (no passwords, cards, addresses stored)
✓ Uses user-authenticated browser session rather than bypassing authentication
✓ Requires user confirmation before any write actions
✓ Includes verification loops to confirm actions succeeded
✓ No shell execution, subprocess, or direct network requests
✓ No base64 encoding, eval patterns, or obfuscation techniques
✓ Reference documents provide detailed operational guidance without introducing security risks
✓ Version 1.1.2 with clear changelog in improvement-log.md