Agent skill · Audited from source
Agent Browser
skill · am-will/codex-skillsLicence not declaredAudited 20 Oct 2026 · source 31eb89d791f0
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 31eb89d791f0 and found no filesystem, network or shell access and no hard-coded secrets. What it does: A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured commands.
Cite
Cite this page
ModelsAtlas. “Agent Browser (am-will/codex-skills)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/am-will/agent-browser
18 skills are called “Agent Browser”. You are viewing am-will/codex-skills. 1 of them is BLOCK.
- am-will/codex-skills★ 1k✓SAFE
- code-yeongyu/oh-my-opencode★ 70k!CAUTION
- shanraisshan/claude-code-best-practice★ 68k✓SAFE
- vercel-labs/agent-browser★ 44k✓SAFE
- emdash-cms/emdash★ 13k!CAUTION
and 13 more with this name.
Trust audit
Audit 0.4.1 · source read 20 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass, no license.
Findings (1)
LOWInventory / provenanceinv.no_license
- Why
- no LICENSE file and no repo licence
- Fix
- add a licence
Audit 0.4.1 · source sha 31eb89d791f0 · 20 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisheram-will GitHub userOwner of the repository this skill is read from
- Source folderam-will/codex-skills/skills/agent-browserThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdict31eb89d791f0A new audit runs when the source changes
- Repository statusNot archivedLast push 97 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured commands.
---
name: Agent Browser
description: A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured commands.
read_when:
- Automating web interactions
- Extracting structured data from pages
- Filling forms programmatically
- Testing web UIs
metadata: {"clawdbot":{"emoji":"🌐","requires":{"bins":["node","npm"]}}}
---
# Agent Browser
A fast Rust-based headless browser automation CLI with Node.js fallback that enables AI agents to navigate, click, type, and snapshot pages via structured commands.
## Installation
### npm recommended
```bash
npm install -g agent-browser
agent-browser install
agent-browser install --with-deps
```
### From Source
```bash
git clone https://github.com/vercel-labs/agent-browser
cd agent-browser
pnpm install
pnpm build
agent-browser install
```
## Quick Start
```bash
agent-browser open example.com
agent-browser snapshot
agent-browser click @e2
agent-browser fill @e3 "[email protected]"
agent-browser get text @e1
agent-browser screenshot page.png
agent-browser close
```
## Using Real Chrome Profile (for OAuth/Logged-in Sessions)
For sites requiring Google/Discord/etc login (like star-swap.com):
**Method 1: Launch Chrome with custom profile, connect via CDP**
```bash
# Terminal 1: Launch Chrome with your real profile and remote debugging
google-chrome --remote-debugging-port=9222 --user-data-dir=/home/willr/.config/google-chrome/Default &
# Terminal 2: Connect agent-browser to that Chrome instance
agent-browser --cdp 9222 open "https://star-swap.com"
agent-browser --cdp 9222 snapshot -i
agent-browser --cdp 9222 click e2
# This reuses your existing Google session - no re-login needed!
# Works for: Google OAuth, Discord OAuth, any site you're logged into in Chrome
```
**Method 2: Session persistence (first-time manual login)**
```bash
# First time: headed mode, login manually
agent-browser --headed --session starswap open "https://star-swap.com"
# Complete Google OAuth manually in the browser window
# Close when done
# Future runs: cookies persist!
agent-browser --session starswap open "https://star-swap.com"
# Already logged in automatically
```
**am.will.ryan Chrome profile:** `/home/willr/.config/google-chrome/Default`
## Core Commands
### Navigation
```bash
agent-browser open <url>
agent-browser back
agent-browser forward
agent-browser reload
```
### Interaction
```bash
agent-browser click <sel>
agent-browser dblclick <sel>
agent-browser focus <sel>
agent-browser type <sel> <text>
agent-browser fill <sel> <text>
agent-browser clear <sel>
agent-browser press <key>
agent-browser keydown <key>
agent-browser keyup <key>
agent-browser hover <sel>
agent-browser select <sel> <val>
agent-browser check <sel>
agent-browser uncheck <sel>
agent-browser drag <src> <tgt>
agent-browser upload <sel> <files>
```
### Extraction and Info
```bash
agent-browser snapshot
agent-browser get text <sel>
agent-browser get html <sel>
agent-browser get value <sel>
agent-browser get attr <sel> <attr>
agent-browser get title
agent-browser get url
agent-browser get count <sel>
agent-browser get box <sel>
agent-browser screenshot [path]
agent-browser pdf <path>
```
### Check State
```bash
agent-browser is visible <sel>
agent-browser is enabled <sel>
agent-browser is checked <sel>
```
### Find Elements
- agent-browser find role <role> <action> [value]
- agent-browser find text <text> <action>
- agent-browser find label <label> <action> [value]
- agent-browser find placeholder <ph> <action> [value]
- agent-browser find alt <text> <action>
- agent-browser find title <text> <action>
- agent-browser find testid <id> <action> [value]
Actions include click, fill, check, hover, and text.
### Wait and Timing
```bash
agent-browser wait <selector>
agent-browser wait <ms>
agent-browser wait --text "Welcome"
agent-browser wait --url "**/dash"
agent-browser wait --load networkidle
```
### Advanced Control
```bash
agent-browser scroll <dir> [px]
agent-browser scrollintoview <sel>
agent-browser eval <js>
agent-browser mouse move <x> <y>
agent-browser cookies
agent-browser storage local
agent-browser tab new [url]
agent-browser frame <sel>
agent-browser dialog accept [text]
```
## Sessions
Run multiple isolated browser instances.
```bash
agent-browser --session agent1 open site-a.com
agent-browser --session agent2 open site-b.com
```
## Snapshot Options
The snapshot command supports filtering to reduce output size.
- agent-browser snapshot -i
- agent-browser snapshot -c
- agent-browser snapshot -d 3
- agent-browser snapshot -s "#main"
## Selectors and Refs
Refs provide deterministic element selection from snapshots. Use the @ref syntax.
```bash
agent-browser snapshot
agent-browser click @e2
```
## Agent Mode
Use --json for machine readable output.
```bash
agent-browser snapshot --json
```
### Optimal AI Workflow
- Navigate with agent-browser open <url>
- Observe with agent-browser snapshot -i --json
- Act with @ref from the snapshot
- Verify with agent-browser snapshot
## Troubleshooting
- If the command is not found on Linux ARM64, use the full path in the bin folder.
- If an element is not found, use snapshot to find the correct ref.
- If the page is not loaded, add a wait command after navigation.
- Use --headed to see the browser window for debugging.
## Options
- --session <name> uses an isolated session.
- --json provides JSON output.
- --full takes a full page screenshot.
- --headed shows the browser window.
- --timeout sets the command timeout in milliseconds.
## Notes
- Refs are stable per page load but change on navigation.
- Always snapshot after navigation to get new refs.
- Use fill instead of type for input fields to ensure existing text is cleared.Excerpt, first 5,797 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 31eb89d
npm install -g agent-browser git clone https://github.com/vercel-labs/agent-browser
git clone https://github.com/am-will/codex-skills git -C codex-skills checkout 31eb89d791f0
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 31eb89d791f0 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
31eb89d791f0
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/am-will/agent-browser/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/am-will/agent-browser/)
<a href="https://modelsatlas.com/skills/am-will/agent-browser/"><img src="https://modelsatlas.com/skills/am-will/agent-browser/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about Agent Browser
Is Agent Browser safe to install?
What can Agent Browser access on my machine?
How current is this page?
Sources
- github.com/am-will/codex-skills/tree/main/skills/agent-browser — the audited source at commit 31eb89d791f0 and every finding aboveObserved · 20 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- Is Agent Browser safe to install?
- What can Agent Browser access on my machine?
- How current is this page?