技能 browser-use
📦

browser-use

內容修訂 r1 高風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

使用 Playwright MCP 自動化瀏覽器任務

瀏覽器任務可能耗時，且需要可重複的步驟。此技能會將 Claude、Codex 或 Claude Code 連接到 Playwright MCP，用於導覽、表單、螢幕截圖和資料擷取。

支援: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 差

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求
Review the Skillstore skill "browser-use" from https://skillstore.io/skills/92bilal26-browser-use.md and its manifest at https://skillstore.io/api/skills/92bilal26-browser-use/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/92bilal26-browser-use.md 已簽名 manifest GET /api/skills/92bilal26-browser-use/manifest 已簽名 lockfile GET /api/skills/92bilal26-browser-use/lockfile

測試它

正在使用「browser-use」。 開啟產品頁面並擷取可見詳細資訊。

預期結果:

  • 已啟動本機 Playwright MCP 伺服器。
  • 已開啟要求的頁面。
  • 已擷取頁面快照和螢幕截圖。
  • 已摘要產品標題、價格和供應狀態。

正在使用「browser-use」。 提交測試聯絡表單並驗證確認訊息。

預期結果:

  • 已載入表單頁面並擷取元素 refs。
  • 已將核准的測試值填入欄位。
  • 已提交表單並等待確認文字。
  • 已儲存最終狀態的螢幕截圖。

正在使用「browser-use」。 檢閱公開頁面上的表格。

預期結果:

  • 已開啟頁面並檢查可存取的快照。
  • 已擷取可見的列標籤和值。
  • 已回傳表格內容的簡潔摘要。

安全審計

高風險
v7 • 2026/7/5 開啟版本化報告

Most repeated findings are false positives from Markdown code fences, JSON Schema URI strings, and generated tool documentation. Confirmed risks remain in the stdio subprocess path, unpinned npx package execution, predictable /tmp PID files, and shared browser context behavior.

5
已掃描檔案
1,533
分析行數
25
複核項目
0
已忽略的誤報

已確認的安全問題 (3)

高
SKILL.md:18scripts/start-server.sh:15
Unpinned Remote Package Execution
The skill starts Playwright MCP with npx @playwright/mcp@latest. This executes a network-fetched package version that can change without review.
Both locations invoke the latest package directly. This is clear supply-chain risk, although it points to an official package name.
中
SKILL.md:36scripts/start-server.sh:15
Shared Browser Context Retains Session State
The skill requires shared browser context across calls. This can preserve cookies and authenticated state between tasks, increasing data exposure risk.
The instructions explicitly require shared browser context, and the script enables it. Risk depends on user account state and task trust.
中
SKILL.md:105-109references/playwright-tools.md:460-471
Arbitrary Playwright Code Execution in Browser Context
The browser_run_code tool accepts Playwright JavaScript functions. Untrusted prompts could drive page actions or extract visible page data through the browser.
The documentation directly describes a code-bearing Playwright function. It affects browser context rather than operating-system code execution.
能力複核項目 (25)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高
scripts/mcp-client.py:204
Python subprocess.Popen
self._process = subprocess.Popen(
subprocess.Popen is called with shell=True on self.command from the --stdio argument. Untrusted input can execute arbitrary shell commands.
高
SKILL.md:13-19
Ruby/shell backtick execution
```bash
This instruction tells the user or agent to run a shell helper or npx @playwright/mcp@latest. That is external command execution with unpinned package execution.
中
scripts/start-server.sh:9
Shell command substitution
if [ -f "$PID_FILE" ] && kill -0 $(cat "$PID_FILE") 2>/dev/null; then
The script reads a predictable PID file and passes its contents to kill without validating ownership or numeric format. Tampering could target unrelated processes.
中
scripts/start-server.sh:20
Shell command substitution
if kill -0 $(cat "$PID_FILE") 2>/dev/null; then
The script reads the predictable PID file again before calling kill. Unvalidated PID contents can affect process checks.
中
scripts/start-server.sh:1
Unix shell invocation
#!/bin/bash
This is an executable shell helper that starts an npx process and manages local processes. Running it creates an external command surface.
中
scripts/start-server.sh:6
Temp directory access
PID_FILE="/tmp/playwright-mcp-${PORT}.pid"
The PID file path is predictable in world-writable /tmp. A local user could tamper with it and influence later kill operations.
中
scripts/stop-server.sh:9
Shell command substitution
PID=$(cat "$PID_FILE")
The script reads a predictable /tmp PID file into PID and later uses it for kill operations without ownership validation. Tampering could affect unrelated processes.
中
scripts/stop-server.sh:1
Unix shell invocation
#!/bin/bash
This is an executable shell helper that calls Python, kill, kill -9, and pkill. Running it creates a local process-control surface.
中
scripts/stop-server.sh:6
Temp directory access
PID_FILE="/tmp/playwright-mcp-${PORT}.pid"
The PID file path is predictable in world-writable /tmp. A local user could tamper with it and influence shutdown behavior.
中
SKILL.md:22-29
Ruby/shell backtick execution
```bash
This command block instructs running a shell stop script, a Python client, and pkill. Those operations can control local processes.
中
SKILL.md:42-49
Ruby/shell backtick execution
```bash
This command block instructs running the Python MCP client against the local server. It can drive browser navigation from the shell.
中
SKILL.md:53-60
Ruby/shell backtick execution
```bash
This command block instructs running the Python MCP client for snapshots and screenshots. It can read visible browser page state.
中
SKILL.md:66-82
Ruby/shell backtick execution
```bash
This command block instructs running the Python MCP client for clicks, typing, form fills, and selections. It can submit page data.
中
SKILL.md:86-94
Ruby/shell backtick execution
```bash
This command block instructs running the Python MCP client for wait operations. It is expected but still uses shell-launched browser automation.
中
SKILL.md:98-101
Ruby/shell backtick execution
```bash
This command block invokes browser_evaluate through the Python MCP client. It can execute JavaScript in the current browser page.
中
SKILL.md:107-110
Ruby/shell backtick execution
```bash
This command block invokes browser_run_code through the Python MCP client. It can execute arbitrary Playwright browser actions supplied in the prompt.
低
scripts/mcp-client.py:146
HTTP client library
def request(self, method: str, params: Optional[dict] = None) -> dict:
HTTPTransport.request sends JSON-RPC over urlopen to a caller-supplied MCP URL. This expected feature still creates network egress.
低
scripts/mcp-client.py:314
HTTP client library
result = self.transport.request("tools/list")
This method forwards MCP requests through the selected transport, which may be HTTP to a configured server. The behavior is expected but network-capable.
低
scripts/mcp-client.py:323
HTTP client library
result = self.transport.request("tools/call", params)
This method forwards MCP requests through the selected transport, which may be HTTP to a configured server. The behavior is expected but network-capable.
低
scripts/mcp-client.py:328
HTTP client library
result = self.transport.request("resources/list")
This method forwards MCP requests through the selected transport, which may be HTTP to a configured server. The behavior is expected but network-capable.
低
scripts/mcp-client.py:333
HTTP client library
result = self.transport.request("prompts/list")
This method forwards MCP requests through the selected transport, which may be HTTP to a configured server. The behavior is expected but network-capable.
低
scripts/stop-server.sh:10
Standard device file access
if kill -0 "$PID" 2>/dev/null; then
The script checks a PID read from the predictable PID file. If the file is tampered with, it can probe unrelated local processes.
低
scripts/stop-server.sh:15
Standard device file access
kill "$PID" 2>/dev/null
The script sends SIGTERM to a PID loaded from the predictable PID file. Tampering could signal the wrong local process.
低
scripts/stop-server.sh:19
Standard device file access
kill -9 "$PID" 2>/dev/null || true
The script force-kills a PID loaded from the predictable PID file. Tampering could signal the wrong local process.
低
scripts/stop-server.sh:28
Standard device file access
pkill -f "@playwright/mcp.*--port.*${PORT}" 2>/dev/null && echo "Playwright MCP stopped" || echo "Pl
The pkill fallback uses a broad process-name pattern with the provided port. It may terminate matching local Playwright MCP processes beyond the tracked PID.

風險因素

⚙️ 外部命令 (37)
references/playwright-tools.md:247 references/playwright-tools.md:308 references/playwright-tools.md:471-480 references/playwright-tools.md:515-533 scripts/mcp-client.py:191 scripts/mcp-client.py:204 scripts/mcp-client.py:348 scripts/mcp-client.py:371 scripts/mcp-client.py:377-379 scripts/start-server.sh:9 scripts/start-server.sh:10 scripts/start-server.sh:20 scripts/start-server.sh:21 scripts/start-server.sh:1 scripts/stop-server.sh:9 scripts/stop-server.sh:12 scripts/stop-server.sh:1 SKILL.md:13-19 SKILL.md:19-22 SKILL.md:22-29 SKILL.md:29-36 SKILL.md:36-42 SKILL.md:42-49 SKILL.md:49-53 SKILL.md:53-60 SKILL.md:60-64 SKILL.md:64-66 SKILL.md:66-82 SKILL.md:82-86 SKILL.md:86-94 SKILL.md:94-98 SKILL.md:98-101 SKILL.md:101-105 SKILL.md:105-107 SKILL.md:107-110 SKILL.md:110-112 SKILL.md:112-140
🌐 網路存取 (49)
references/playwright-tools.md:19 references/playwright-tools.md:56 references/playwright-tools.md:91 references/playwright-tools.md:127 references/playwright-tools.md:168 references/playwright-tools.md:199 references/playwright-tools.md:265 references/playwright-tools.md:284 references/playwright-tools.md:315 references/playwright-tools.md:368 references/playwright-tools.md:399 references/playwright-tools.md:418 references/playwright-tools.md:447 references/playwright-tools.md:478 references/playwright-tools.md:531 references/playwright-tools.md:559 references/playwright-tools.md:626 references/playwright-tools.md:675 references/playwright-tools.md:712 references/playwright-tools.md:758 references/playwright-tools.md:800 references/playwright-tools.md:838 scripts/mcp-client.py:146 scripts/mcp-client.py:271 scripts/mcp-client.py:314 scripts/mcp-client.py:323 scripts/mcp-client.py:328 scripts/mcp-client.py:333 scripts/mcp-client.py:33 scripts/mcp-client.py:10 scripts/mcp-client.py:16 scripts/mcp-client.py:20 scripts/mcp-client.py:23 scripts/stop-server.sh:12 SKILL.md:27 SKILL.md:44 SKILL.md:45 SKILL.md:48 SKILL.md:55 SKILL.md:58 SKILL.md:68 SKILL.md:72 SKILL.md:76 SKILL.md:80 SKILL.md:88 SKILL.md:92 SKILL.md:99 SKILL.md:108 SKILL.md:109
📁 檔案系統存取 (9)
scripts/start-server.sh:9 scripts/start-server.sh:20 scripts/start-server.sh:6 scripts/stop-server.sh:10 scripts/stop-server.sh:12 scripts/stop-server.sh:15 scripts/stop-server.sh:19 scripts/stop-server.sh:28 scripts/stop-server.sh:6
審計單位: codex 檢視審計紀錄 →
分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告
安全評估

複製報告連結

https://skillstore.io/skills/92bilal26-browser-use/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/92bilal26-browser-use/security.svg)](https://skillstore.io/skills/92bilal26-browser-use?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/92bilal26-browser-use?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/92bilal26-browser-use/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/92bilal26-browser-use.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
學術引用 (APA · BibTeX · CFF)

APA 引用

92Bilal26. (2026). browser-use security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/92bilal26-browser-use/audits/7

BibTeX 引用

@techreport{92bilal26-92bilal26-browser-use-2026, author = {92Bilal26}, title = {browser-use security audit report (audit version 7)}, institution = {Skillstore}, year = {2026}, number = {7}, url = {https://skillstore.io/skills/92bilal26-browser-use/audits/7}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "browser-use security audit report (audit version 7)" version: "unspecified" type: report authors: - name: "92Bilal26" date-released: "2026-07-05" url: "https://skillstore.io/skills/92bilal26-browser-use/audits/7" identifiers: - type: other value: "skillstore:92bilal26-browser-use:audit:7" description: "Skillstore immutable audit report identifier"

比較變體

3 個可安裝變體

每位作者的技能都保留為獨立的可安裝項目。推薦變體依 Skillstore 證據排序。

為何此變體排名第一

證據信心較高
browser-use 推薦

browser-use-browser-use

Skillstore 評分 38
證據置信度 高
Skillstore 使用量 82
已更新

2026-09-09

92Bilal26 目前

92bilal26-browser-use

Skillstore 評分 38
證據置信度 中
Skillstore 使用量 63
已更新

2026-10-19

AbdullahMalik17

abdullahmalik17-browser-use

Skillstore 評分 38
證據置信度 中
Skillstore 使用量 17
已更新

2026-10-20

Skillstore 評分

評分依據 證據置信度: 中
64
架構
85
可維護性
85
內容
70
社群
83
規範符合度

你可以打造什麼

檢查網頁流程

QA 工程師可以在提交缺陷前，自動化登入、表單和確認路徑。

收集頁面證據

研究人員可以在檢閱公開頁面時擷取快照和螢幕截圖。

操作內部工具

支援團隊可以透過清楚的命令，在已核准的管理工具中重複瀏覽器步驟。

試試這些提示

開啟頁面 
啟動 Playwright MCP 伺服器，開啟 https://example.com，擷取快照，並摘要可見頁面內容。
填寫表單 
開啟目標表單，取得快照，依 ref 填寫列出的欄位，提交表單，並擷取確認畫面。
擷取頁面資料 
導覽至頁面、檢查快照、執行安全的瀏覽器評估以擷取可見表格資料，並摘要結果。
執行多步驟流程 
針對已核准的多步驟工作流程使用 browser_run_code，回傳最終頁面標題，並拍攝結果的螢幕截圖。

最佳實務

  • 在點擊前使用快照，讓元素 refs 符合目前頁面。
  • 瀏覽器工作完成後停止 MCP 伺服器。
  • 針對敏感帳戶或私人資料使用隔離的瀏覽器設定檔。

避免

  • 不要依據不受信任的指示執行 browser_run_code。
  • 敏感工作階段結束後，不要讓共用瀏覽器環境保持開啟。
  • 未經使用者明確核准，不要提交表單或進行購買。

常見問題

這個技能會瀏覽網頁嗎？
是。它會透過 MCP 控制本機 Playwright 瀏覽器，並可導覽至使用者核准的網站。
它需要本機伺服器嗎？
是。輔助工具會在命令呼叫瀏覽器工具前，於 localhost 啟動 Playwright MCP。
它可以填寫表單嗎？
是。當元素 refs 可用時，它可以輸入、選取選項並提交表單。
它可以拍攝螢幕截圖嗎？
是。它可以透過 Playwright MCP 擷取視窗範圍或完整頁面的螢幕截圖。
它可以使用現有的瀏覽器工作階段嗎？
是。共用瀏覽器環境可以重複使用狀態，因此敏感工作階段需要謹慎處理。
它對不受信任的頁面安全嗎？
請謹慎使用。瀏覽器自動化可能會將頁面資料、Cookie 和表單輸入暴露給目前的任務。

開發者詳細資訊

作者

92Bilal26

授權

MIT

Skillstore 修訂

r1

版本提示

作者未聲明版本。

儲存庫

https://github.com/92Bilal26/TaskPilotAI/tree/main/.claude/skills/browser-use

引用

c4037264bbd363c572662d6154a3ab28f5ca4f53

維護新鮮度

2026/7/24

使用量

51 次下載 · 230 次瀏覽

檔案結構

📁 references/

📄 playwright-tools.md

📁 scripts/

📄 mcp-client.py

📄 start-server.sh

📄 stop-server.sh

📄 SKILL.md

92Bilal26 的更多技能

查看全部

相關技能

查看全部