ClawHosters Browser Relay Chrome extension security report

ClawHosters Browser Relay lets your OpenClaw AI agent control browser tabs remotely. Attach any Chrome tab and your agent can navigate, click, fill forms, take screenshots, and extract data — all through the Chrome DevTools Protocol. TWO CONNECTION MODES: Local Mode — Connect to an OpenClaw instance running on your own machine (ws://127.0.0.1). Same as the official OpenClaw extension. Remote Mode — Connect to a ClawHosters-hosted OpenClaw instance over a secure WebSocket connection (wss://). No SSH tunnels needed. Just paste your instance URL and gateway token. HOW IT WORKS: 1. Install the extension 2. Open the options page and choose your connection mode 3. For Remote: enter your ClawHosters instance URL (e.g. https://mybot.clawhosters.com) 4. Enter your gateway token 5. Click the toolbar icon on any tab to attach it 6. Your OpenClaw agent can now control that tab SECURITY: - All remote connections use TLS encryption (wss://) - Authentication via HMAC-SHA256 derived tokens - You explicitly choose which tabs to share — nothing is attached automatically - No data collection, no analytics, no telemetry - Open source: https://github.com/Yixn/clawhosters-relay PERMISSIONS EXPLAINED: - debugger: Required to control browser tabs via Chrome DevTools Protocol (CDP). This is the core functionality — forwarding CDP commands between your OpenClaw agent and attached tabs. - tabs: Track which tabs are attached and their navigation state. - activeTab: Attach the currently focused tab when you click the toolbar icon. - storage: Save your connection settings locally. - alarms: Keepalive timer to maintain the WebSocket connection. - webNavigation: Re-attach tabs after page navigation. ClawHosters (clawhosters.com) provides managed hosting for OpenClaw, the open-source AI agent framework with 40,000+ GitHub stars.