agent-browser
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for…
Project links
How to use it
- Run the install command in your project folder.
- Restart your AI client so it picks up the skill.
- Ask for a task that matches the description to try it.
Copy setup details
Use these instructions in your own environment. Copying text here does not run it.
Install command
Run on your own machine to install this skill.
npx skills add https://github.com/vercel-labs/agent-browser --skill agent-browser
Security checks
Automated checks, last run Nov 2, 2026. They can miss problems and do not guarantee a listing is safe. Read the source and what you are asked to run before you use it.
- NoteSnyk auditLayer 2
Snyk reported a warning with 1 issue.
Evidence (3)
- Risk level
- MEDIUM
- Audited
- Oct 30, 2026
- W011 (medium)
- Third-party content exposure detected (indirect prompt injection risk).
Source: Snyk, as shown on skills.sh
- PassedSetup commands and descriptionLayer 1
The install commands and description match none of the risky patterns we look for.
Source: AIWantsThis screening rules
- PassedSkill instructions (SKILL.md)Layer 1
The skill file shows no hidden text, no instruction-override phrases and no risky commands.
Source: AIWantsThis screening rules
- PassedGen Agent Trust Hub auditLayer 2
Gen Agent Trust Hub reported a pass for this skill.
Evidence (1)
- Risk level
- SAFE
- PassedSocket auditLayer 2
Socket reported a pass for this skill.
Evidence (1)
- Audited
- Oct 30, 2026
Source: Socket, as shown on skills.sh
- PassedSource repositoryLayer 2
The repository is public, not archived and has recent activity.
Evidence (3)
- Last push
- 2026-11-01
- Archived
- no
- License
- Apache-2.0
Source: GitHub