Scope credentials deliberately.
Provide only what the browser task needs. Verify storage, logging, and retention in the exact environment you use.
OPENCLAW · GUIDEBrowser session
Route OpenClaw browser work off your device.
Legba gives agents routing and isolated browser sessions through a ready skill. Browser work runs off your device. Review permissions, credentials, and retention before use.
ready skill. isolated browser. review the boundary.
How containment works
Capability is the easy part. Containment is the point.
A page can steer an agent through its allowed tools. Browser isolation narrows one boundary. Permissions and connected systems still matter.
Isolation can narrow the blast radius.
Browser work runs off your device. Permissions, connected tools, mounts, and network access still define the real boundary.
Browser work runs off your device.
The ready agent skill provides routing and isolated browser sessions. Confirm OpenClaw compatibility before use.
Close the session and verify.
Check retention, logs, browser storage, and credential cleanup. Do not infer deletion from a closed window.
The hosted run
Route. Run. Verify.
Route browser work through an isolated session. Close it when the task ends. Then verify logs, storage, credentials, and connected systems.
[ hosted run ]
Open the isolated browser.
The ready skill provides routing and an isolated browser session off your device.
Route the browser task.
The browser task runs inside the isolated session. Permissions define everything else it can reach.
Close and verify.
End the session. Then check logs, storage, credentials, retention, and connected systems.
Use the internet without the internet using you.
Legba is a Chrome extension with two modes. Ghost gives you a private browser route. Shield opens a page in an isolated browser off your device.
Free for 30 days. No card required.
Ghost. A private route for your browser. Shield. An isolated browser, off your device. Choose the mode. Close when finished.