Skills steel-browser

📦

steel-browser

Name: steel-browser
Author: steel-dev

Content revision r1 High Risk ⚙️ External commands🌐 Network access🔑 Env variables📁 Filesystem access

Automate Cloud Browsing with Steel

Dynamic websites often fail with simple fetch tools. This skill guides Claude, Codex, and Claude Code to use Steel cloud browsers for scraping, navigation, screenshots, PDFs, and sessions.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "steel-browser" from https://skillstore.io/skills/steel-dev-steel-browser.md and its manifest at https://skillstore.io/api/skills/steel-dev-steel-browser/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/steel-dev-steel-browser.md Signed manifest GET /api/skills/steel-dev-steel-browser/manifest Signed lockfile GET /api/skills/steel-dev-steel-browser/lockfile

Test it

Using "steel-browser". Extract product details from a dynamic catalog page.

Expected outcome:

A concise summary of product names, prices, availability, and source page notes.

Using "steel-browser". Capture a PDF of a public policy page.

Expected outcome:

A saved PDF artifact, the page title, the final URL, and any access warnings.

Using "steel-browser". Diagnose a stale browser session.

Expected outcome:

A short recovery note that identifies the session mismatch and recommends a fresh named session.

Security Audit

High Risk

v5 • 7/9/2026 Open versioned report

Most static detections are Markdown command examples, placeholder URLs, or standard Steel authentication guidance. Confirmed risks remain for CAPTCHA and anti-bot automation, webpage capture artifacts, proxy credential exposure, remote credential injection, and browser JavaScript evaluation. No prompt injection attempt was found in the reviewed files.

Files scanned

944

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (8)

High

references/steel-browser-commands.md:217

System reconnaissance

steel browser captcha solve --session <name> --page-id <id> --task-id <id>

The cited section invokes or documents CAPTCHA solving. Combined with the skill's anti-bot and proxy guidance, this can bypass website abuse controls.

High

references/steel-browser-lifecycle.md:83

System reconnaissance

steel browser captcha solve --session <name> --page-id <id> --task-id <id>

The cited section invokes or documents CAPTCHA solving. Combined with the skill's anti-bot and proxy guidance, this can bypass website abuse controls.

High

references/troubleshooting.md:69

System reconnaissance

- CAPTCHA solving requires a paid Steel plan.

The cited section invokes or documents CAPTCHA solving. Combined with the skill's anti-bot and proxy guidance, this can bypass website abuse controls.

High

references/troubleshooting.md:128

System reconnaissance

steel browser captcha solve --session <name> --page-id <id> --task-id <id>

The cited section invokes or documents CAPTCHA solving. Combined with the skill's anti-bot and proxy guidance, this can bypass website abuse controls.

High

SKILL.md:28

Screen capture upload

- Screenshot or PDF capture of webpages.

The skill explicitly triggers for webpage screenshot and PDF capture through cloud browser sessions. This can expose sensitive page content on authenticated or private pages.

High

SKILL.md:24-30 references/troubleshooting.md:65-71 references/steel-browser-commands.md:207-218

Anti-Bot and CAPTCHA Automation Guidance

The skill tells agents to use anti-bot-sensitive automation, CAPTCHA solving, stealth mode, and proxies. These workflows can bypass website abuse controls when used without authorization.

Multiple files explicitly route agents toward CAPTCHA solving, stealth mode, and proxy use. Legitimate testing is possible, but the abuse-control bypass capability is clear.

High

SKILL.md:136-138 references/steel-browser-lifecycle.md:50-51 references/steel-browser-commands.md:119-125

Credential Injection Into Remote Browser Sessions

The documentation describes credential namespaces and credential injection into Steel browser sessions. This can expose account credentials to remote browser infrastructure without explicit consent controls.

The cited commands and flags directly reference credential storage or injection. The risk depends on user authorization, but the sensitive data flow is real.

Medium

references/steel-browser-commands.md:168-176

Browser JavaScript Evaluation Capability

The command reference includes browser JavaScript evaluation through direct strings, base64 input, and stdin. In authenticated sessions, arbitrary page scripts can access sensitive page state.

The eval command family is explicitly documented and supports several input modes. It is a normal automation feature, but it is risky with untrusted scripts.

Capability review items (4)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

references/steel-browser-commands.md:218

Temp directory access

steel browser screenshot /tmp/captcha-progress.png --session <name>

The example writes browser screenshots to /tmp. Screenshots can contain sensitive page or CAPTCHA content, and shared temp storage may persist beyond the task.

Medium

references/steel-browser-lifecycle.md:89

Temp directory access

steel browser screenshot /tmp/captcha-check.png --session <name>

The example writes browser screenshots to /tmp. Screenshots can contain sensitive page or CAPTCHA content, and shared temp storage may persist beyond the task.

Medium

references/troubleshooting.md:138

Hardcoded URL

steel browser start --session "$SESSION" --session-solve-captcha --proxy http://user:pass@host:port

The proxy example places credentials in a command-line URL. Users who copy it directly may expose proxy secrets through shell history or process listings.

Medium

references/troubleshooting.md:108

Temp directory access

steel browser screenshot /tmp/captcha-auto-progress.png --session <name>

The example writes browser screenshots to /tmp. Screenshots can contain sensitive page or CAPTCHA content, and shared temp storage may persist beyond the task.

Risk Factors

⚙️ External commands (50)

README.md:60 references/steel-browser-lifecycle.md:151 references/troubleshooting.md:137 SKILL.md:7 SKILL.md:8 SKILL.md:19 SKILL.md:31 SKILL.md:44 SKILL.md:46 SKILL.md:48 SKILL.md:53-56 SKILL.md:56-60 SKILL.md:60-67 SKILL.md:67-71 SKILL.md:71-86 SKILL.md:86-96 SKILL.md:96-102 SKILL.md:102-106 SKILL.md:106-113 SKILL.md:113-117 SKILL.md:117-124 SKILL.md:124-128 SKILL.md:128-134 SKILL.md:134-138 SKILL.md:138 SKILL.md:145-150 SKILL.md:150-155 SKILL.md:155 SKILL.md:158-159 SKILL.md:159 SKILL.md:161-169 SKILL.md:169-171 SKILL.md:171 SKILL.md:173 SKILL.md:181-184 SKILL.md:184-188 SKILL.md:188-189 SKILL.md:189 SKILL.md:191-193 SKILL.md:193-194 SKILL.md:194-195 SKILL.md:195-197 SKILL.md:197 SKILL.md:200-201 SKILL.md:201-202 SKILL.md:202 SKILL.md:215-216 SKILL.md:216 SKILL.md:61 SKILL.md:60-67

🌐 Network access (10)

README.md:54 README.md:62 references/migration-agent-browser.md:30 references/migration-agent-browser.md:36 references/steel-browser-lifecycle.md:153 references/troubleshooting.md:138 SKILL.md:54 SKILL.md:55 SKILL.md:77 SKILL.md:78

🔑 Env variables (6)

README.md:78 references/migration-agent-browser.md:16 references/migration-agent-browser.md:56 references/troubleshooting.md:27 references/troubleshooting.md:35 SKILL.md:189

📁 Filesystem access (5)

references/steel-browser-commands.md:218 references/steel-browser-lifecycle.md:30 references/steel-browser-lifecycle.md:30 references/steel-browser-lifecycle.md:89 references/troubleshooting.md:108

Detected Patterns

System reconnaissance×4Screen capture upload

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/steel-dev-steel-browser/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/steel-dev-steel-browser/security.svg)](https://skillstore.io/skills/steel-dev-steel-browser?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/steel-dev-steel-browser?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/steel-dev-steel-browser/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/steel-dev-steel-browser.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

steel-dev. (2026). steel-browser security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/steel-dev-steel-browser/audits/5

BibTeX citation

@techreport{steel-dev-steel-dev-steel-browser-2026,
  author = {steel-dev},
  title = {steel-browser security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/steel-dev-steel-browser/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "steel-browser security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "steel-dev"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/steel-dev-steel-browser/audits/5"
identifiers:
  - type: other
    value: "skillstore:steel-dev-steel-browser:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Collect Dynamic Web Data

Extract page text and structured content from dynamic public websites for comparison or summarization.

Verify Multi-Step Web Flows

Drive repeatable browser steps, capture evidence, and inspect page state in remote sessions.

Debug Remote Browser Sessions

Check authentication, session reuse, endpoint mode, live view, and stuck session problems.

Try These Prompts

Scrape a Page

Use Steel to extract readable content from this URL and summarize the main points: [URL].

Capture Page Evidence

Use a named Steel session to open [URL], capture a screenshot, and report the page title.

Automate a Form Flow

Use Steel browser commands to open [URL], fill the form fields I provide, and stop the session after verification.

Migrate Agent Browser Workflow

Convert this agent-browser workflow to steel browser commands, preserving session behavior and adding validation steps: [workflow].

Best Practices

Use named sessions for every multi-step workflow.
Stop Steel sessions when the task is complete unless the user asks to keep them running.
Confirm authorization before using credentialed sessions, proxy settings, or CAPTCHA features.

Avoid

Do not use this skill for localhost-only or private network targets that Steel cloud cannot reach.
Do not print API keys, credential values, or raw connect URLs in responses.
Do not run CAPTCHA, proxy, or credential workflows without clear user authorization.