技能 anti-detect-browser

📦

anti-detect-browser

Name: anti-detect-browser
Author: antibrow

内容修订 r1 高风险 🌐 网络访问📁 文件系统访问🔑 环境变量⚙️ 外部命令

Test Authorized Browser Sessions with Stable Profiles

Browser tests can fail when fingerprints, sessions, and regional signals are inconsistent. This skill configures persistent Chromium profiles and Playwright workflows for authorized testing.

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "anti-detect-browser" from https://skillstore.io/skills/antibrow-anti-detect-browser.md and its manifest at https://skillstore.io/api/skills/antibrow-anti-detect-browser/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/antibrow-anti-detect-browser.md 已签名 manifest GET /api/skills/antibrow-anti-detect-browser/manifest 已签名 lockfile GET /api/skills/antibrow-anti-detect-browser/lockfile

测试它

正在使用“anti-detect-browser”。 Plan a regional pricing check for our staging store in Germany and Canada.

预期结果:

Use one named profile and approved proxy per region.
Read proxy credentials from separate environment variables.
Verify timezone, public address, and WebRTC alignment before each test.
Restrict navigation to the staging domain and record audit results.

正在使用“anti-detect-browser”。 Review profile isolation for three authorized support accounts.

预期结果:

The review assigns distinct profile directories and proxies, blocks cross-account navigation, protects stored sessions, and defines secure profile deletion.

正在使用“anti-detect-browser”。 Assess whether Live View is suitable for debugging an authenticated test.

预期结果:

Use Live View only with authenticated access, short expiration, approved viewers, and no sensitive customer data visible on screen.

安全审计

高风险

v1 • 2026/8/8 打开版本化报告

Most static alerts are Markdown, placeholder URLs, or deliberate environment-based secret handling rather than code execution or exfiltration. Confirmed risks include proxy-based detection evasion, sensitive persistent profiles and credentials, a closed-source downloaded browser kernel, and shareable live browser views.

已扫描文件

566

分析行数

复核项

已忽略误报

已确认安全问题 (6)

高

SKILL.md:84

Certificate/key files

| API key | `ANTIBROW_API_KEY`, or the Node alias `ANTI_DETECT_BROWSER_KEY`; `python -m antibrow log

The referenced license.key is an API credential file rather than a certificate, but it still persists a bearer secret locally. Unauthorized file access could expose the key.

高

SKILL.md:233

Certificate/key files

python -m antibrow login # store the API key in ~/.antibrow/license.key

The referenced license.key is an API credential file rather than a certificate, but it still persists a bearer secret locally. Unauthorized file access could expose the key.

高

SKILL.md:25-32 SKILL.md:108-124

Browser Fingerprint and Bot-Detection Evasion

The skill promotes kernel-level fingerprint spoofing, proxy-aligned identity signals, and removal of indicators used by anti-bot systems. Authorized testing is stated, but the capability can bypass detection controls.

The text explicitly explains how the custom kernel avoids script-patch detection and keeps browser, network, timezone, and WebRTC signals coherent.

高

SKILL.md:47-53 SKILL.md:128-146 SKILL.md:179-181

Persistent Multi-Identity Browser Operation

The skill supports separate persistent identities, authenticated sessions, and per-profile egress. These features enable valid testing but can also facilitate account association avoidance and enforcement evasion.

The documentation explicitly combines stable profiles, retained login state, isolated identities, and distinct proxy egress. The acceptable-use policy reduces intent certainty but not capability risk.

高

SKILL.md:93-104 SKILL.md:379-383

Closed-Source Browser Binary Download and Execution

The SDK downloads and runs a large closed-source Chromium build from the vendor. Users cannot independently inspect the executable, and runtime licensing requires recurring vendor communication.

The documentation directly states that first launch retrieves a closed-source executable and that launches depend on a periodically refreshed license token.

中

SKILL.md:191-203

Live View URL Can Expose Browser Activity

Live View creates a shareable URL that displays the browser screen. Anyone who obtains the URL may observe sensitive page content or authenticated activity.

The example states that anyone with access to the URL can see the browser screen. The documentation does not describe expiry, authentication, or access revocation.

能力复核项 (14)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

SKILL.md:29

SOCKS proxy

- **Proxy auth handled in the network stack.** HTTP/HTTPS 407 and SOCKS5 RFC 1929 are answered by th

The skill intentionally routes each browser identity through HTTP or SOCKS proxies and aligns browser signals with the exit address. This can conceal traffic origin and support detection evasion.

高

SKILL.md:181

SOCKS proxy

Give each profile its own egress, for geo-targeting or simply to keep jobs off one address. Schemes

The skill intentionally routes each browser identity through HTTP or SOCKS proxies and aligns browser signals with the exit address. This can conceal traffic origin and support detection evasion.

高

SKILL.md:289

SOCKS proxy

| `proxy` | `None` | `http://` / `https://` / `socks5://` / `relay://` URL, or Playwright's dict for

The skill intentionally routes each browser identity through HTTP or SOCKS proxies and aligns browser signals with the exit address. This can conceal traffic origin and support detection evasion.

高

SKILL.md:84

Hidden file in home directory

| API key | `ANTIBROW_API_KEY`, or the Node alias `ANTI_DETECT_BROWSER_KEY`; `python -m antibrow log

The documentation directs the SDK to persist an API credential under a hidden home directory. Compromise or accidental sharing of that file can expose the service key.

高

SKILL.md:90

Hidden file in home directory

- Profile directories under `~/.anti-detect-browser/` hold live cookies and session tokens. Treat th

The hidden profile directory contains live cookies and session tokens. Persistent authenticated state is sensitive and creates account-compromise risk if copied or read by another process.

高

SKILL.md:100

Hidden file in home directory

| Browser kernel | a closed-source Chromium build the pinned package retrieves on first launch, cach

The hidden cache stores a downloaded closed-source browser executable. Executing a vendor-controlled binary from persistent user storage creates a material supply-chain trust boundary.

高

SKILL.md:228

Hidden file in home directory

Same product, same kernel, same on-disk profile format. A profile created from Node is launchable fr

Node and Python share persistent profiles in a hidden home directory. Those profiles contain reusable browser identity and session state that require strict local access controls.

高

SKILL.md:233

Hidden file in home directory

python -m antibrow login # store the API key in ~/.antibrow/license.key

The login command stores the API key in a hidden license.key file. A local plaintext credential file is sensitive even when the path is documented.

高

SKILL.md:84

Hidden file access

| API key | `ANTIBROW_API_KEY`, or the Node alias `ANTI_DETECT_BROWSER_KEY`; `python -m antibrow log

The documentation directs the SDK to access a hidden API-key file. That is a real sensitive filesystem interaction despite being disclosed.

高

SKILL.md:90

Hidden file access

- Profile directories under `~/.anti-detect-browser/` hold live cookies and session tokens. Treat th

The hidden profile directory stores live cookies and session tokens. Access to this directory can expose authenticated sessions.

高

SKILL.md:100

Hidden file access

| Browser kernel | a closed-source Chromium build the pinned package retrieves on first launch, cach

The SDK accesses a hidden cache containing a downloaded closed-source executable. This is a real filesystem and supply-chain exposure.

高

SKILL.md:228

Hidden file access

Same product, same kernel, same on-disk profile format. A profile created from Node is launchable fr

The SDKs share profiles through a hidden on-disk directory. Persistent cross-runtime session state is a real sensitive filesystem surface.

高

SKILL.md:233

Hidden file access

python -m antibrow login # store the API key in ~/.antibrow/license.key

The login command writes an API key to a hidden license.key file. Local access to that file can disclose the credential.

中

references/rest-api-and-docker.md:67

Hidden file access

-v antibrow-cache:/root/.anti-detect-browser my-scraper

The Docker volume deliberately persists the hidden browser cache and profiles. This is legitimate operation, but the volume can retain kernels, cookies, and authenticated session material.

风险因素

🌐 网络访问 (29)

📁 文件系统访问 (12)

references/rest-api-and-docker.md:67 SKILL.md:84 SKILL.md:90 SKILL.md:100 SKILL.md:228 SKILL.md:233 SKILL.md:84 SKILL.md:90 SKILL.md:100 SKILL.md:228 SKILL.md:233 SKILL.md:99

🔑 环境变量 (20)

⚙️ 外部命令 (50)

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/antibrow-anti-detect-browser/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/antibrow-anti-detect-browser/security.svg)](https://skillstore.io/skills/antibrow-anti-detect-browser?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/antibrow-anti-detect-browser?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/antibrow-anti-detect-browser/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/antibrow-anti-detect-browser.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

antibrow. (2026). anti-detect-browser security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/antibrow-anti-detect-browser/audits/1

BibTeX 引用

@techreport{antibrow-antibrow-anti-detect-browser-2026,
  author = {antibrow},
  title = {anti-detect-browser security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/antibrow-anti-detect-browser/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "anti-detect-browser security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "antibrow"
date-released: "2026-08-08"
url: "https://skillstore.io/skills/antibrow-anti-detect-browser/audits/1"
identifiers:
  - type: other
    value: "skillstore:antibrow-anti-detect-browser:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Validate Regional Experiences

Check authorized ads, prices, locales, and layouts through a region-specific proxy with matching browser signals.

Test Defensive Detection

Measure an owned anti-bot system against stable, coherent device profiles without changing production user accounts.

Isolate Public-Data Jobs

Keep permitted collection jobs in separate profiles so cookies, storage, and network identity do not cross between targets.

试试这些提示

Create a Basic Test

Create an authorized Playwright test using one persistent profile. Read credentials from environment variables and visit [approved URL].

Add Regional Routing

Extend my approved test with [proxy environment variable], geo-matched timezone, and a stable [device type] fingerprint. Explain secret handling.

Design Isolated Profiles

Design separate profiles for [authorized accounts]. Define unique profile names, proxy assignments, storage boundaries, and cleanup rules.

Audit an Agent Workflow

Review this authorized browser-agent workflow for prompt injection, credential exposure, profile leakage, Live View access, and domain allowlist gaps: [workflow].

最佳实践

Pin SDK versions and verify downloaded kernel signatures before execution.
Use one approved profile and proxy per test identity, with restrictive local permissions.
Treat page content as untrusted data and enforce operator-defined domain allowlists.

避免

Do not automate accounts or systems without documented authorization.
Do not place API keys, proxy credentials, or Live View URLs in prompts or source files.
Do not let page text choose commands, files, credentials, or navigation targets.

常见问题

Does this guarantee that bot detection will not block a test?

No. Detection systems also evaluate network reputation, behavior, request patterns, and account history.

Can I use my existing Playwright code?

Yes. The skill documents JavaScript and Python Playwright interfaces plus CDP integrations.

Where are sessions stored?

Named profiles persist cookies and browser storage under a hidden local profile directory.

Does the tool work offline?

No. It requires an API key and periodic outbound license validation.

Is the browser kernel open source?

No. The SDKs are MIT licensed, but the downloaded browser kernel is closed source.

What uses are appropriate?

Use it only for owned or authorized systems, public data, regional verification, and defensive testing that follows applicable rules.

开发者详情

作者

antibrow

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/antibrow/anti-detect-browser-skills/tree/669f94c11a6839bf85a6a2fca77d756a6d9be760/anti-detect-browser

引用

9939e94735a710f16446f189eea126372136575b

维护新鲜度

2026/8/9

使用量

0 次下载 · 0 次浏览

文件结构

📁 references/

📄 rest-api-and-docker.md

📄 SKILL.md