Skills agent-browser

📦

agent-browser

Name: agent-browser
Author: inference-sh-8

Content revision r1 Critical ⚙️ External commands🌐 Network access📁 Filesystem access

Automate Browser Workflows with Agent Browser

Manual browser tasks slow down research, testing, and form workflows. This skill uses inference.sh sessions to navigate pages, interact with elements, capture evidence, and extract page content.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "agent-browser" from https://skillstore.io/skills/inference-sh-8-agent-browser.md and its manifest at https://skillstore.io/api/skills/inference-sh-8-agent-browser/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/inference-sh-8-agent-browser.md Signed manifest GET /api/skills/inference-sh-8-agent-browser/manifest Signed lockfile GET /api/skills/inference-sh-8-agent-browser/lockfile

Test it

Using "agent-browser". Inspect a public landing page and list its interactive elements.

Expected outcome:

The page opened successfully. It includes a search field, pricing link, documentation link, and sign-in button.

Using "agent-browser". Submit a contact form with approved test data.

Expected outcome:

The form was filled and submitted. The final page displayed a thank-you message and no validation errors.

Using "agent-browser". Capture a product settings workflow for documentation.

Expected outcome:

Screenshots were captured for the settings page, edit action, save action, and final confirmation state.

Security Audit

Critical

v4 • 7/6/2026 Open versioned report

Most static findings are false positives from Markdown syntax, visible shell examples, placeholder URLs, relative documentation links, and /dev/null redirection. Confirmed risks include the remote installer piped to shell, advertised screen capture and file upload capabilities, SOCKS proxy support, cookie extraction guidance, proxy-based rate limit avoidance, and automated authentication handling.

Files scanned

2,107

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (5)

Critical

SKILL.md:17

Pipe to shell pattern

curl -fsSL https://cli.inference.sh | sh && infsh login

The quick start pipes a remote installer from cli.inference.sh directly into sh. This creates remote code execution and supply-chain risk if the endpoint or transport is compromised.

High

SKILL.md:3

Screen capture upload

description: "Browser automation for AI agents via inference.sh. Navigate web pages, interact with e

The skill description advertises screenshots, video recording, and file upload. These capabilities can capture sensitive page content or transmit local files when invoked.

High

references/authentication.md:209-224

Cookie Extraction Guidance

The authentication guide includes a section titled Cookie Extraction and shows extracting document.cookie for use in other tools. This can expose session tokens and enable account takeover if copied into real workflows.

The file explicitly labels the workflow as cookie extraction and shows collecting cookies from an authenticated browser session.

High

references/proxy-support.md:85-128

Proxy Rotation for Rate Limit Avoidance

The proxy guide has a Rate Limit Avoidance section that rotates proxies while scraping pages. This encourages bypassing target service limits and can support abusive collection.

The section title and sample loop directly connect proxy rotation with avoiding rate limits during scraping.

Medium

references/authentication.md:63-145

Automated Authentication and 2FA Handling

The authentication guide automates OAuth, password entry, TOTP generation, and manual 2FA entry. This is useful for testing but dangerous without strong authorization boundaries.

The guidance clearly covers login automation and TOTP generation, but legitimate internal testing use is possible.

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Critical

SKILL.md:17

Hardcoded URL

curl -fsSL https://cli.inference.sh | sh && infsh login

The URL is fetched by curl in the same command that pipes its output to sh. The hardcoded endpoint is therefore part of a remote execution path.

High

references/proxy-support.md:152

SOCKS proxy

"proxy_url": "socks5://privacy-proxy.example.com:1080"

The proxy documentation explicitly supports SOCKS5 routing for browser sessions. This can anonymize automation traffic and help bypass network controls.

High

references/proxy-support.md:165

SOCKS proxy

### SOCKS5 Proxy

The proxy documentation explicitly supports SOCKS5 routing for browser sessions. This can anonymize automation traffic and help bypass network controls.

High

references/proxy-support.md:168

SOCKS proxy

{"proxy_url": "socks5://proxy.example.com:1080"}

The proxy documentation explicitly supports SOCKS5 routing for browser sessions. This can anonymize automation traffic and help bypass network controls.

Risk Factors

⚙️ External commands (163)

🌐 Network access (55)

📁 Filesystem access (15)

references/authentication.md:5 references/authentication.md:263 references/commands.md:3 references/commands.md:59 references/proxy-support.md:5 references/proxy-support.md:272 references/snapshot-refs.md:5 references/video-recording.md:5 references/video-recording.md:239 templates/authenticated-session.sh:30 templates/capture-workflow.sh:28 templates/capture-workflow.sh:78 templates/capture-workflow.sh:81 templates/capture-workflow.sh:149 templates/form-automation.sh:23

Detected Patterns

Screen capture uploadPipe to shell pattern

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/inference-sh-8-agent-browser/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/inference-sh-8-agent-browser/security.svg)](https://skillstore.io/skills/inference-sh-8-agent-browser?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/inference-sh-8-agent-browser?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/inference-sh-8-agent-browser/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/inference-sh-8-agent-browser.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

inference-sh-8. (2026). agent-browser security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/inference-sh-8-agent-browser/audits/4

BibTeX citation

@techreport{inference-sh-8-inference-sh-8-agent-browser-2026,
  author = {inference-sh-8},
  title = {agent-browser security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/inference-sh-8-agent-browser/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "agent-browser security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "inference-sh-8"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/inference-sh-8-agent-browser/audits/4"
identifiers:
  - type: other
    value: "skillstore:inference-sh-8-agent-browser:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

19 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

supercent-io Recommended

supercent-io-agent-browser

Skillstore Score 78

Evidence Confidence High

Skillstore usage 30

Updated

2026-08-21

101-skills

101-skills-agent-browser

Skillstore Score 74

Evidence Confidence Medium

Skillstore usage 1

Updated

2026-08-21

vercel-labs

vercel-labs-agent-browser

Skillstore Score 38

Evidence Confidence High

Skillstore usage 66

Updated

2026-08-21

qu-skills

qu-skills-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 40

Updated

2026-08-21

am-will

am-will-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 36

Updated

2026-08-21

tul-sh

tul-sh-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 35

Updated

2026-08-21

inference-sh-8 Current

inference-sh-8-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 25

Updated

2026-08-21

toolshell

toolshell-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 16

Updated

2026-08-21

skillssh

skillssh-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 16

Updated

2026-08-21

inference-sh-9

inference-sh-9-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 15

Updated

2026-08-21

inferen-sh

inferen-sh-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

inference-shell

inference-shell-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

inferencesh

inferencesh-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 10

Updated

2026-08-21

inference-sh-skills

inference-sh-skills-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

inference-sh-0

inference-sh-0-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-08-21

infsh-skills

infsh-skills-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

inf-sh

inf-sh-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-08-21

inference-skills

inference-skills-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 6

Updated

2026-08-21

halt-catch-fire

halt-catch-fire-agent-browser

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 3

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Test Web Flows

Run repeatable browser actions, capture screenshots, and record videos for failed test cases.

Extract Page Content

Open public pages, collect visible text, save links, and document the page state.

Document Product Workflows

Record guided browser sessions and capture screenshots for help articles or process reviews.

Try These Prompts

Open and Inspect a Page

Open this URL with agent-browser. Summarize the page title, visible form fields, main links, and available buttons.

Fill a Simple Form

Use agent-browser to inspect this form. Fill the fields I provide, submit it, and report the confirmation state.

Capture Evidence

Navigate this workflow with agent-browser. Take a full page screenshot at each major step and describe what changed.

Extract Structured Page Data

Use agent-browser to open these pages, extract visible text and links, and compare the results in a concise table.

Best Practices

Use only sites and accounts where you have clear authorization.
Re-snapshot after navigation or dynamic updates before using element refs again.
Disable video recording when pages may contain passwords, tokens, or private data.