openclaw-security

A browser extension security audit identifies tab access risks, CDP exposure, and permissions misuse. It enforces checks for tab scope, sensitive permissions, gateway mappings, and activity logs to detect risky configurations across workspaces.

You audit CDP exposure and permissions misuse by scanning workspace registrations, gateway configurations, and recent skill changes. This process checks tab scope and sensitive permissions to ensure minimal access and outputs a risk report with recommendations.

Yes, the security audit can check for sensitive site access. It lists attached tabs and explicitly flags sensitive sites such as banking, email, and personal accounts to prevent unauthorized browser extension access.

You need to run a browser extension permissions review before deployment and after updates. Security teams verify posture during these stages to detect potential overreach in skilled permissions, registered workspaces, and path access.

The best way to verify gateway mappings is to analyze skilled permissions, registered workspaces, and path access. This detects potential overreach and ensures risky configurations are flagged in a comprehensive risk report.

Yes, the audit applies checks across recent skill changes to detect excessive permissions. It enforces reviews of sensitive permissions and activity logs to ensure skills do not overreach their required access scope.