
from web-access7,211
Provides browser CDP-based web access for agents: search, fetch, logged-in interactions, and scripted browser automation with a proxy and safety checks.
Web-access equips agents with a browser CDP proxy and operational guidance for safely performing web tasks that require real browser behavior or login state. It formalizes checks (Node.js and proxy availability), a proxy API for opening tabs, evaluating DOM, navigating, clicking, screenshots, and file uploads, plus a philosophy for human-like, target-driven automation.
Use this skill when agents must fetch dynamic pages, interact with login-protected sites, operate where static HTTP fetches fail (JS-rendered sites, social platforms), or when GUI actions (clicks, scrolling, form submissions) are required. It's appropriate for tasks that need reliable page rendering, media frame capture, or complex multi-step interactions.
Agents that can orchestrate browser automation and maintain user safety (Claude Code, automation-focused assistants, or any agent able to call a local proxy and execute curl/http requests).
Web Access (CDP Proxy) provides browser automation for agents via a local CDP HTTP proxy. It connects to the user's existing Chrome/Edge browser with remote debugging, offering endpoints for navigation, evaluation, clicking, scrolling, screenshots, and file uploads. The SKILL.md is thorough and well-structured, covering browsing philosophy, tool selection, login handling, and parallel sub-agent strategies. Scripts are well-written but couldn't be executed in the test environment (.mjs not supported).
nodejs-22+Minor SQL-injection-adjacent pattern in find-url.mjs (string interpolation into SQL LIKE clause, mitigated by single-quote escaping). CDP proxy properly scoped to localhost. Port guard prevents pages from accessing Chrome debug port. No exfiltration, no destructive commands, no hardcoded secrets. Well-designed security posture for a browser automation tool. Scripts were skipped by runner due to .mjs extension.