Not in the top 1,000 by GitHub stars
browser-use/browser-harness-js
Self-healing browser harness that enables LLMs to complete any task
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
2d9a5ed37ed1 → 2d9a5ed37ed1
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 2d9a5ed37ed1
No earlier version was observed for comparison.
Heat
4.3- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- cdp
/
How it works
cdp
When your agent uses it
Drive Chrome via the DevTools Protocol from JavaScript. Run JS snippets through the `browser-harness-js` CLI — it auto-spawns a long-lived bun HTTP server holding a fully-typed CDP `Session`, and every call (`browser-harness-js 'await session.Page.navigate(...)'`) executes against the same persistent connection. Session, active target, and globals survive across calls. Use when the user wants to automate, script, or inspect a Chrome browser via CDP — single tab or multi-tab, attach to existing Chrome or to a new one launched with --remote-debugging-port.
What it loads into context
Frontmatter
127 tokensAlways available to the agent
SKILL.md
3,360 tokensWhen the skill is activated
Reference documents
12,971 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Setup (once, first use)
- How to use
- CLI commands
- API surface inside snippets
- Connecting to a running Chrome (chrome://inspect flow)
- Working with targets (tabs)
- Looking up a method
- Regenerating the SDK
- Files
Scripts executed separately
sdk/browser-harness-jssdk/gen.tssdk/generated.tssdk/package.jsonsdk/repl.tssdk/session.test.tssdk/session.ts
Files
.gitignoreasset52 bytesLICENSEasset1,068 bytesREADME.mddoc4,228 bytesSKILL.mdcore13,228 bytesSKILL.mdcore13,228 bytesSKILL.mdcore13,228 bytesSKILL.mdcore13,228 bytesSKILL.mdcore13,228 bytesSKILL.mdcore13,228 bytesSKILL.mdcore13,228 bytesSKILL.mdcore13,228 bytesdocs/setup-remote-debugging.pngasset50,720 bytesinteraction-skills/connection.mddoc4,062 bytesinteraction-skills/cookies.mddoc2,117 bytesinteraction-skills/cross-origin-iframes.mddoc3,153 bytesinteraction-skills/dialogs.mddoc2,540 bytesinteraction-skills/downloads.mddoc3,123 bytesinteraction-skills/drag-and-drop.mddoc3,387 bytesinteraction-skills/dropdowns.mddoc3,543 bytesinteraction-skills/iframes.mddoc2,655 bytesinteraction-skills/network-requests.mddoc3,933 bytesinteraction-skills/print-as-pdf.mddoc3,004 bytesinteraction-skills/screenshots.mddoc2,340 bytesinteraction-skills/scrolling.mddoc3,156 bytesinteraction-skills/shadow-dom.mddoc3,015 bytesinteraction-skills/tabs.mddoc2,652 bytesinteraction-skills/uploads.mddoc2,580 bytesinteraction-skills/viewport.mddoc2,938 bytessdk/browser-harness-jsruns4,159 bytessdk/browser_protocol.jsonasset1,406,521 bytessdk/bun.lockasset1,169 bytessdk/gen.tsruns9,361 bytessdk/generated.tsruns655,460 bytessdk/js_protocol.jsonasset181,640 bytessdk/package.jsonruns239 bytessdk/repl.tsruns4,170 bytessdk/session.test.tsruns991 bytessdk/session.tsruns15,218 bytessdk/tsconfig.jsonasset335 bytes
Read SKILL.md
# CDP — `browser-harness-js` skill
Custom codegen'd CDP SDK (every method from browser_protocol.json + js_protocol.json gets a typed wrapper) plus a tiny HTTP server that holds one persistent CDP `Session`. The `browser-harness-js` CLI auto-starts the server on first use and forwards JS snippets to it.
The SDK lives in the skill's `sdk/` directory. In the rest of this doc, `<skill-dir>` refers to wherever `npx skills add` installed the skill (Claude Code: `~/.claude/skills/cdp`; Cursor: `~/.cursor/skills/cdp`; other agents vary). The CLI should be on PATH as `browser-harness-js`.
## Setup (once, first use)
`npx skills add` drops the skill into your agent's skills directory but does NOT put the CLI on PATH. Before the first call, verify it's reachable and symlink it into any directory on your PATH if not:
```bash
# macOS (Apple Silicon + Homebrew)
command -v browser-harness-js >/dev/null || ln -sf <skill-dir>/sdk/browser-harness-js /opt/homebrew/bin/browser-harness-js
View the complete source on GitHubSkills included
- cdp
Repository facts
- License
- MIT
- Created
- Apr 18, 2026
- Last pushed
- Aug 30, 2026
- Forks
- 38
- Open issues
- 5
- Project activity
- Slowing
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 6, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 11 notes
SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedsdk/browser_protocol.json:1Analysis incomplete: file exceeds text byte budgetsdk/browser_protocol.json:10105Analysis incomplete: regex work limit reachedsdk/generated.ts:4990Analysis incomplete: physical or joined line exceeds character limitsdk/generated.ts:11651Analysis incomplete: regex work limit reached
- No broad tool permissions
- 5 dangerous shell commandsin 4 files: sdk/browser-harness-js:48 SKILL.md:23 sdk/generated.ts:11211 and 1 more
- 272 network referencesin 12 files: sdk/generated.ts:413 sdk/browser_protocol.json:1620 sdk/browser-harness-js:4 and 9 more
- No hidden or obfuscated text
- No instruction overrides
- 7 executable scriptsin 7 files: sdk/browser-harness-js:1 sdk/gen.ts:1 sdk/generated.ts:1 and 4 more
- 5 references to secretsin 3 files: interaction-skills/cookies.md:3 interaction-skills/downloads.md:48 sdk/generated.ts:9879
- No requests to vote in Hot
Show all 289 signals by file
README.md
- Network accessline 1
<img src="https://r2.browser-use.com/github/asbfgihsbfbaosfjla.png" alt="Browser Harness" width="100%" /> - Network accessline 24
npx skills add https://github.com/browser-use/browser-harness-js --skill cdp - Network accessline 30
Run `npx skills add https://github.com/browser-use/browser-harness-js --skill cdp`, then - Network accessline 36
(The CLI auto-installs [`bun`](https://bun.sh) on first run if it's missing. Set `BROWSER_HARNESS_SKIP_BUN_INSTALL=1` to opt out.) - Network accessline 79
[Bitter lesson](https://browser-use.com/posts/bitter-lesson-agent-frameworks) · [Skills](https://browser-use.com/posts/web-agents-that-actually-learn)
SKILL.md
- Dangerous shell operationline 23
# Linux without sudo (ensure ~/.local/bin is on PATH) - Network accessline 34
browser-harness-js 'await session.connect()' browser-harness-js 'await session.Page.navigate({url:"https://example.com"})' - Network accessline 35
browser-harness-js 'await session.Page.navigate({url:"https://example.com"})' - Network accessline 99
// required params await session.Page.navigate({ url: 'https://example.com' }) - Network accessline 100
await session.Page.navigate({ url: 'https://example.com' }) - Network accessline 157
const sid = await session.use(tabs[0].targetId) await session.Page.enable() await session.Page.navigate({ url: 'https://example.com' }) - Network accessline 159
await session.Page.navigate({ url: 'https://example.com' }) - Network accessline 191
browser-harness-js '(await listPageTargets()).forEach((t,i)=>globalThis["tab"+i]=t.targetId)' browser-harness-js 'await session.use(globalThis.tab0)' browser-harness-js 'await session.Page.navigate({url:"https://example.com"})' - Network accessline 193
browser-harness-js 'await session.Page.navigate({url:"https://example.com"})'
interaction-skills/cookies.md
- Access to secretsline 3
[Credential-related source omitted] - Network accessline 13
// Cookies for specific URLs const { cookies: github } = await session.Network.getCookies({ urls: ['https://github.com/'], - Network accessline 14
const { cookies: github } = await session.Network.getCookies({ urls: ['https://github.com/'], }) - Network accessline 15
urls: ['https://github.com/'], - Access to secretsline 18
[Credential-related source omitted]
interaction-skills/dialogs.md
- Network accessline 66
// Option A: dismiss after navigating (CDP, safe, undetectable) await session.Page.navigate({ url: 'https://new-url.com' }) - Network accessline 67
await session.Page.navigate({ url: 'https://new-url.com' }) - Network accessline 72
// Option B: prevent before navigating (JS, detectable) await session.Runtime.evaluate({ expression: 'window.onbeforeunload = null' }) await session.Page.navigate({ url: 'https://new-url.com' }) - Network accessline 74
await session.Page.navigate({ url: 'https://new-url.com' })
interaction-skills/downloads.md
- Access to secretsline 48
[Credential-related source omitted] - Network accessline 51
const { tmpdir } = await import('node:os') const res = await fetch('https://example.com/report.pdf') - Network accessline 52
const res = await fetch('https://example.com/report.pdf') - Access to secretsline 56
[Credential-related source omitted]
interaction-skills/print-as-pdf.md
- Network accessline 59
await session.Page.navigate({ url: 'https://example.com/invoice/123?print=1' })
interaction-skills/tabs.md
- Network accessline 11
// Create a new tab and route subsequent calls to it const { targetId } = await session.Target.createTarget({ url: 'https://example.com' }) - Network accessline 12
const { targetId } = await session.Target.createTarget({ url: 'https://example.com' }) - Network accessline 35
await session.use(targetId) await session.Page.enable() await session.Page.navigate({ url: 'https://example.com' }) - Network accessline 36
await session.Page.enable() await session.Page.navigate({ url: 'https://example.com' }) // now wait for Page.loadEventFired via session.waitFor - Network accessline 37
await session.Page.navigate({ url: 'https://example.com' })
interaction-skills/uploads.md
- Network accessline 47
await session.Runtime.evaluate({ awaitPromise: true, expression: ` (async () => { const resp = await fetch('https://example.com/file.png') - Network accessline 48
(async () => { const resp = await fetch('https://example.com/file.png') const blob = await resp.blob() - Network accessline 49
const resp = await fetch('https://example.com/file.png')
sdk/browser-harness-js
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 4
# Usage: # browser-harness-js 'await session.connect({port:9222})' # browser-harness-js 'await session.Page.navigate({url:"https://example.com"})' - Network accessline 5
# browser-harness-js 'await session.connect({port:9222})' # browser-harness-js 'await session.Page.navigate({url:"https://example.com"})' # browser-harness-js <<'EOF' - Network accessline 6
# browser-harness-js 'await session.Page.navigate({url:"https://example.com"})' - Network accessline 22
PORT="${CDP_REPL_PORT:-9876}" HOST="127.0.0.1" URL="http://$HOST:$PORT" - Network accessline 24
URL="http://$HOST:$PORT" - Network accessline 46
if [ -n "${BROWSER_HARNESS_SKIP_BUN_INSTALL:-}" ]; then echo "browser-harness-js: bun not found and BROWSER_HARNESS_SKIP_BUN_INSTALL is set." >&2 echo " Install manually: curl -fsSL https://bun.sh/install | bash" >&2 - Network accessline 47
echo "browser-harness-js: bun not found and BROWSER_HARNESS_SKIP_BUN_INSTALL is set." >&2 echo " Install manually: curl -fsSL https://bun.sh/install | bash" >&2 return 1 - Dangerous shell operationline 48
echo " Install manually: curl -fsSL https://bun.sh/install | bash" >&2 - Network accessline 48
echo " Install manually: curl -fsSL https://bun.sh/install | bash" >&2 - Network accessline 49
return 1 fi echo "browser-harness-js: installing bun (one-time, from https://bun.sh/install)..." >&2 - Network accessline 50
fi echo "browser-harness-js: installing bun (one-time, from https://bun.sh/install)..." >&2 if ! curl -fsSL https://bun.sh/install | bash >&2; then - Network accessline 51
echo "browser-harness-js: installing bun (one-time, from https://bun.sh/install)..." >&2 if ! curl -fsSL https://bun.sh/install | bash >&2; then echo "browser-harness-js: bun install failed. Install manually from https://bun.sh, or se - Dangerous shell operationline 52
if ! curl -fsSL https://bun.sh/install | bash >&2; then - Network accessline 52
if ! curl -fsSL https://bun.sh/install | bash >&2; then - Network accessline 53
echo "browser-harness-js: bun install failed. Install manually from https://bun.sh, or set BROWSER_HARNESS_SKIP_BUN_INSTALL=1 to suppress this prompt." >&2 - Network accessline 63
is_up() { curl -fsS --max-time 1 "$URL/health" >/dev/null 2>&1 - Network accessline 64
curl -fsS --max-time 1 "$URL/health" >/dev/null 2>&1 - Network accessline 73
is_up && return 0 done echo "browser-harness-js: REPL failed to start on $URL (see $LOG)" >&2 - Network accessline 74
done echo "browser-harness-js: REPL failed to start on $URL (see $LOG)" >&2 return 1 - Network accessline 75
echo "browser-harness-js: REPL failed to start on $URL (see $LOG)" >&2 - Network accessline 82
local out status body out=$(curl -sS -w '\n___STATUS___%{http_code}' --data-binary "$1" "$URL/eval") - Network accessline 83
out=$(curl -sS -w '\n___STATUS___%{http_code}' --data-binary "$1" "$URL/eval") - Network accessline 96
--status) if is_up; then curl -sS "$URL/health"; echo - Network accessline 97
if is_up; then curl -sS "$URL/health"; echo else - Network accessline 98
curl -sS "$URL/health"; echo - Network accessline 104
--start) start_repl curl -sS "$URL/health"; echo - Network accessline 105
start_repl curl -sS "$URL/health"; echo ;; - Network accessline 106
curl -sS "$URL/health"; echo - Network accessline 108
--stop) if is_up; then curl -s -X POST "$URL/quit" >/dev/null || true - Network accessline 109
if is_up; then curl -s -X POST "$URL/quit" >/dev/null || true echo '{"ok":true,"stopped":true}' - Network accessline 110
curl -s -X POST "$URL/quit" >/dev/null || true - Network accessline 115
;; --restart) is_up && curl -s -X POST "$URL/quit" >/dev/null 2>&1 || true - Network accessline 116
--restart) is_up && curl -s -X POST "$URL/quit" >/dev/null 2>&1 || true sleep 0.2 - Network accessline 117
is_up && curl -s -X POST "$URL/quit" >/dev/null 2>&1 || true - Network accessline 118
sleep 0.2 start_repl curl -sS "$URL/health"; echo - Network accessline 119
start_repl curl -sS "$URL/health"; echo ;; - Network accessline 120
curl -sS "$URL/health"; echo
sdk/browser_protocol.json
- Network accessline 1620
{ "id": "AttributionReportingIssueDetails", "description": "Details for issues around \"Attribution Reporting API\" usage.\nExplainer: https://github.com/WICG/attribution-reporting-api", - Network accessline 1621
"id": "AttributionReportingIssueDetails", "description": "Details for issues around \"Attribution Reporting API\" usage.\nExplainer: https://github.com/WICG/attribution-reporting-api", "type": "object - Network accessline 1622
"description": "Details for issues around \"Attribution Reporting API\" usage.\nExplainer: https://github.com/WICG/attribution-reporting-api", - Network accessline 1815
{ "id": "DeprecationIssueDetails", "description": "This issue tracks information needed to print a deprecation message.\nhttps://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/rend - Network accessline 1816
"id": "DeprecationIssueDetails", "description": "This issue tracks information needed to print a deprecation message.\nhttps://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/core/frame/third_ - Network accessline 1817
"description": "This issue tracks information needed to print a deprecation message.\nhttps://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/core/frame/third_party/blink/renderer/core/frame/deprecation/README.md - Network accessline 1836
{ "id": "BounceTrackingIssueDetails", "description": "This issue warns about sites in the redirect chain of a finished navigation\nthat may be flagged as trackers and have their state cleared if they - Network accessline 1837
"id": "BounceTrackingIssueDetails", "description": "This issue warns about sites in the redirect chain of a finished navigation\nthat may be flagged as trackers and have their state cleared if they don't\nreceive a user - Network accessline 1838
"description": "This issue warns about sites in the redirect chain of a finished navigation\nthat may be flagged as trackers and have their state cleared if they don't\nreceive a user interaction. Note that in this context 'site' means eTLD - Network accessline 1850
{ "id": "CookieDeprecationMetadataIssueDetails", "description": "This issue warns about third-party sites that are accessing cookies on the\ncurrent page, and have been permitted due to having a globa - Network accessline 1851
"id": "CookieDeprecationMetadataIssueDetails", "description": "This issue warns about third-party sites that are accessing cookies on the\ncurrent page, and have been permitted due to having a global metadata grant.\nNot - Network accessline 1852
"description": "This issue warns about third-party sites that are accessing cookies on the\ncurrent page, and have been permitted due to having a global metadata grant.\nNote that in this context 'site' means eTLD+1. For example, if the URL - Network accessline 2601
{ "name": "name", "description": "address field name, for example GIVEN_NAME.\nThe full list of supported field names:\nhttps://source.chromium.org/chromium/chromium/src/+/main:compone - Network accessline 2602
"name": "name", "description": "address field name, for example GIVEN_NAME.\nThe full list of supported field names:\nhttps://source.chromium.org/chromium/chromium/src/+/main:components/autofill/core/browser/fiel - Network accessline 2603
"description": "address field name, for example GIVEN_NAME.\nThe full list of supported field names:\nhttps://source.chromium.org/chromium/chromium/src/+/main:components/autofill/core/browser/field_types.cc;l=38", - Network accessline 3001
{ "name": "key", "description": "Company identifier\nhttps://bitbucket.org/bluetooth-SIG/public/src/main/assigned_numbers/company_identifiers/company_identifiers.yaml\nhttps://usb.org/ - Network accessline 3002
"name": "key", "description": "Company identifier\nhttps://bitbucket.org/bluetooth-SIG/public/src/main/assigned_numbers/company_identifiers/company_identifiers.yaml\nhttps://usb.org/developers", - Network accessline 3003
"description": "Company identifier\nhttps://bitbucket.org/bluetooth-SIG/public/src/main/assigned_numbers/company_identifiers/company_identifiers.yaml\nhttps://usb.org/developers", - Network accessline 3543
{ "id": "PermissionDescriptor", "description": "Definition of PermissionDescriptor defined in the Permissions API:\nhttps://w3c.github.io/permissions/#dom-permissiondescriptor.", - Network accessline 3544
"id": "PermissionDescriptor", "description": "Definition of PermissionDescriptor defined in the Permissions API:\nhttps://w3c.github.io/permissions/#dom-permissiondescriptor.", "experimental": true, - Network accessline 3545
"description": "Definition of PermissionDescriptor defined in the Permissions API:\nhttps://w3c.github.io/permissions/#dom-permissiondescriptor.", - Network accessline 3549
{ "name": "name", "description": "Name of permission.\nSee https://cs.chromium.org/chromium/src/third_party/blink/renderer/modules/permissions/permission_descriptor.idl for valid permi - Network accessline 3550
"name": "name", "description": "Name of permission.\nSee https://cs.chromium.org/chromium/src/third_party/blink/renderer/modules/permissions/permission_descriptor.idl for valid permission names.", - Network accessline 3551
"description": "Name of permission.\nSee https://cs.chromium.org/chromium/src/third_party/blink/renderer/modules/permissions/permission_descriptor.idl for valid permission names.", - Network accessline 4289
{ "id": "Specificity", "description": "Specificity:\nhttps://drafts.csswg.org/selectors/#specificity-rules", - Network accessline 4290
"id": "Specificity", "description": "Specificity:\nhttps://drafts.csswg.org/selectors/#specificity-rules", "experimental": true, - Network accessline 4291
"description": "Specificity:\nhttps://drafts.csswg.org/selectors/#specificity-rules", - Network accessline 5158
{ "id": "FontFace", "description": "Properties of a web font: https://www.w3.org/TR/2008/REC-CSS2-20080411/fonts.html#font-descriptions\nand additional information such as platformFontFamily and fontV - Network accessline 5159
"id": "FontFace", "description": "Properties of a web font: https://www.w3.org/TR/2008/REC-CSS2-20080411/fonts.html#font-descriptions\nand additional information such as platformFontFamily and fontVariationAxes.", - Network accessline 5160
"description": "Properties of a web font: https://www.w3.org/TR/2008/REC-CSS2-20080411/fonts.html#font-descriptions\nand additional information such as platformFontFamily and fontVariationAxes.", - Network accessline 8637
{ "name": "getAnchorElement", "description": "Returns the target anchor element of the given anchor query according to\nhttps://www.w3.org/TR/css-anchor-position-1/#target.", - Network accessline 8638
"name": "getAnchorElement", "description": "Returns the target anchor element of the given anchor query according to\nhttps://www.w3.org/TR/css-anchor-position-1/#target.", "experimental": true, - Network accessline 8639
"description": "Returns the target anchor element of the given anchor query according to\nhttps://www.w3.org/TR/css-anchor-position-1/#target.", - Network accessline 8647
{ "name": "anchorSpecifier", "description": "An optional anchor specifier, as defined in\nhttps://www.w3.org/TR/css-anchor-position-1/#anchor-specifier.\nIf not provided, it will retur - Network accessline 8648
"name": "anchorSpecifier", "description": "An optional anchor specifier, as defined in\nhttps://www.w3.org/TR/css-anchor-position-1/#anchor-specifier.\nIf not provided, it will return the implicit anchor element - Network accessline 8649
"description": "An optional anchor specifier, as defined in\nhttps://www.w3.org/TR/css-anchor-position-1/#anchor-specifier.\nIf not provided, it will return the implicit anchor element for\nthe given positioned element.",
sdk/gen.ts
- Executable scriptline 1
#!/usr/bin/env bun
sdk/generated.ts
- Executable scriptline 1
Executable file - Network accessline 413
/** * Details for issues around "Attribution Reporting API" usage. * Explainer: https://github.com/WICG/attribution-reporting-api - Network accessline 414
* Details for issues around "Attribution Reporting API" usage. * Explainer: https://github.com/WICG/attribution-reporting-api */ - Network accessline 415
* Explainer: https://github.com/WICG/attribution-reporting-api - Network accessline 479
/** * This issue tracks information needed to print a deprecation message. * https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/core/frame/third_party/blink/renderer/core/frame/deprecation/README.md - Network accessline 480
* This issue tracks information needed to print a deprecation message. * https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/core/frame/third_party/blink/renderer/core/frame/deprecation/README.md */ - Network accessline 481
* https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/core/frame/third_party/blink/renderer/core/frame/deprecation/README.md - Network accessline 492
* that may be flagged as trackers and have their state cleared if they don't * receive a user interaction. Note that in this context 'site' means eTLD+1. * For example, if the URL `https://example.test:80/bounce` was in the - Network accessline 493
* receive a user interaction. Note that in this context 'site' means eTLD+1. * For example, if the URL `https://example.test:80/bounce` was in the * redirect chain, the site reported would be `example.test`. - Network accessline 494
* For example, if the URL `https://example.test:80/bounce` was in the - Network accessline 503
* current page, and have been permitted due to having a global metadata grant. * Note that in this context 'site' means eTLD+1. For example, if the URL * `https://example.test:80/web_page` was accessing cookies, the site reported - Network accessline 504
* Note that in this context 'site' means eTLD+1. For example, if the URL * `https://example.test:80/web_page` was accessing cookies, the site reported * would be `example.test`. - Network accessline 505
* `https://example.test:80/web_page` was accessing cookies, the site reported - Network accessline 733
* address field name, for example GIVEN_NAME. * The full list of supported field names: * https://source.chromium.org/chromium/chromium/src/+/main:components/autofill/core/browser/field_types.cc;l=38 - Network accessline 734
* The full list of supported field names: * https://source.chromium.org/chromium/chromium/src/+/main:components/autofill/core/browser/field_types.cc;l=38 */ - Network accessline 735
* https://source.chromium.org/chromium/chromium/src/+/main:components/autofill/core/browser/field_types.cc;l=38 - Network accessline 845
/** * Company identifier * https://bitbucket.org/bluetooth-SIG/public/src/main/assigned_numbers/company_identifiers/company_identifiers.yaml - Network accessline 846
* Company identifier * https://bitbucket.org/bluetooth-SIG/public/src/main/assigned_numbers/company_identifiers/company_identifiers.yaml * https://usb.org/developers - Network accessline 847
* https://bitbucket.org/bluetooth-SIG/public/src/main/assigned_numbers/company_identifiers/company_identifiers.yaml - Network accessline 848
* https://usb.org/developers - Network accessline 921
/** * Definition of PermissionDescriptor defined in the Permissions API: * https://w3c.github.io/permissions/#dom-permissiondescriptor. - Network accessline 922
* Definition of PermissionDescriptor defined in the Permissions API: * https://w3c.github.io/permissions/#dom-permissiondescriptor. */ - Network accessline 923
* https://w3c.github.io/permissions/#dom-permissiondescriptor. - Network accessline 926
/** * Name of permission. * See https://cs.chromium.org/chromium/src/third_party/blink/renderer/modules/permissions/permission_descriptor.idl for valid permission names. - Network accessline 927
* Name of permission. * See https://cs.chromium.org/chromium/src/third_party/blink/renderer/modules/permissions/permission_descriptor.idl for valid permission names. */ - Network accessline 928
* See https://cs.chromium.org/chromium/src/third_party/blink/renderer/modules/permissions/permission_descriptor.idl for valid permission names. - Network accessline 1143
/** * Specificity: * https://drafts.csswg.org/selectors/#specificity-rules - Network accessline 1144
* Specificity: * https://drafts.csswg.org/selectors/#specificity-rules */ - Network accessline 1145
* https://drafts.csswg.org/selectors/#specificity-rules - Network accessline 1553
/** * Properties of a web font: https://www.w3.org/TR/2008/REC-CSS2-20080411/fonts.html#font-descriptions - Network accessline 1554
* Properties of a web font: https://www.w3.org/TR/2008/REC-CSS2-20080411/fonts.html#font-descriptions - Network accessline 2481
/** Used to specify User Agent Client Hints to emulate. See https://wicg.github.io/ua-client-hints */ - Network accessline 2487
/** * Used to specify User Agent Client Hints to emulate. See https://wicg.github.io/ua-client-hints - Network accessline 2488
* Used to specify User Agent Client Hints to emulate. See https://wicg.github.io/ua-client-hints - Network accessline 2504
/** * Used to specify User Agent form-factor values. * See https://wicg.github.io/ua-client-hints/#sec-ch-ua-form-factors - Network accessline 2505
* Used to specify User Agent form-factor values. * See https://wicg.github.io/ua-client-hints/#sec-ch-ua-form-factors */ - Network accessline 2506
* See https://wicg.github.io/ua-client-hints/#sec-ch-ua-form-factors - Network accessline 2511
/** * Used to specify sensor types to emulate. * See https://w3c.github.io/sensors/#automation for more information. - Network accessline 2512
* Used to specify sensor types to emulate. * See https://w3c.github.io/sensors/#automation for more information. */ - Network accessline 2513
* See https://w3c.github.io/sensors/#automation for more information. - Network accessline 2567
/** * Screen information similar to the one returned by window.getScreenDetails() method, * see https://w3c.github.io/window-management/#screendetailed. - Network accessline 2568
* Screen information similar to the one returned by window.getScreenDetails() method, * see https://w3c.github.io/window-management/#screendetailed. */ - Network accessline 2569
* see https://w3c.github.io/window-management/#screendetailed. - Network accessline 2759
/** Bucket name. Not passing a `bucketName` will retrieve the default Bucket. (https://developer.mozilla.org/en-US/docs/Web/API/Storage_API#storage_buckets) */ - Network accessline 3259
/** * Represents the cookie's 'SameSite' status: * https://tools.ietf.org/html/draft-west-first-party-cookies - Network accessline 3260
* Represents the cookie's 'SameSite' status: * https://tools.ietf.org/html/draft-west-first-party-cookies */ - Network accessline 3261
* https://tools.ietf.org/html/draft-west-first-party-cookies - Network accessline 3265
/** * Represents the cookie's 'Priority' status: * https://tools.ietf.org/html/draft-west-cookie-priority-00 - Network accessline 3266
* Represents the cookie's 'Priority' status: * https://tools.ietf.org/html/draft-west-cookie-priority-00 */ - Network accessline 3267
* https://tools.ietf.org/html/draft-west-cookie-priority-00 - Network accessline 3361
/** The referrer policy of the request, as defined in https://www.w3.org/TR/referrer-policy/ */ - Network accessline 3835
/** * Information about a signed exchange signature. * https://wicg.github.io/webpackage/draft-yasskin-httpbis-origin-signed-exchanges-impl.html#rfc.section.3.1 - Network accessline 3836
* Information about a signed exchange signature. * https://wicg.github.io/webpackage/draft-yasskin-httpbis-origin-signed-exchanges-impl.html#rfc.section.3.1 */ - Network accessline 3837
* https://wicg.github.io/webpackage/draft-yasskin-httpbis-origin-signed-exchanges-impl.html#rfc.section.3.1 - Network accessline 3860
/** * Information about a signed exchange header. * https://wicg.github.io/webpackage/draft-yasskin-httpbis-origin-signed-exchanges-impl.html#cbor-representation - Network accessline 3861
* Information about a signed exchange header. * https://wicg.github.io/webpackage/draft-yasskin-httpbis-origin-signed-exchanges-impl.html#cbor-representation */ - Network accessline 3862
* https://wicg.github.io/webpackage/draft-yasskin-httpbis-origin-signed-exchanges-impl.html#cbor-representation - Network accessline 3911
/** * Only matching requests will be affected by these conditions. Patterns use the URLPattern constructor string * syntax (https://urlpattern.spec.whatwg.org/) and must be absolute. If the pattern is empty, all requests are - Network accessline 3912
* Only matching requests will be affected by these conditions. Patterns use the URLPattern constructor string * syntax (https://urlpattern.spec.whatwg.org/) and must be absolute. If the pattern is empty, all requests are * matched - Network accessline 3913
* syntax (https://urlpattern.spec.whatwg.org/) and must be absolute. If the pattern is empty, all requests are - Network accessline 3936
/** * URL pattern to match. Patterns use the URLPattern constructor string syntax * (https://urlpattern.spec.whatwg.org/) and must be absolute. Example: `*://*:*\/*.css`. - Network accessline 3937
* URL pattern to match. Patterns use the URLPattern constructor string syntax * (https://urlpattern.spec.whatwg.org/) and must be absolute. Example: `*://*:*\/*.css`. */ - Network accessline 3938
* (https://urlpattern.spec.whatwg.org/) and must be absolute. Example: `*://*:*\/*.css`. - Network accessline 4579
/** * Origin Trial(https://www.chromium.org/blink/origin-trials) support. - Network accessline 4580
* Origin Trial(https://www.chromium.org/blink/origin-trials) support. - Network accessline 4640
* Frame document's registered domain, taking the public suffixes list into account. * Extracted from the Frame's url. * Example URLs: http://www.google.com/file.html -> "google.com" - Network accessline 4641
* Extracted from the Frame's url. * Example URLs: http://www.google.com/file.html -> "google.com" * http://a.b.co.uk/file.html -> "b.co.uk" - Network accessline 4642
* Example URLs: http://www.google.com/file.html -> "google.com" - Network accessline 4643
* http://a.b.co.uk/file.html -> "b.co.uk" - Network accessline 4960
* TODO(crbug.com/1231886): This field is non-standard and part of a Chrome * experiment. See: * https://github.com/WICG/web-app-launch/blob/main/launch_handler.md - Network accessline 4961
* experiment. See: * https://github.com/WICG/web-app-launch/blob/main/launch_handler.md */ - Network accessline 4962
* https://github.com/WICG/web-app-launch/blob/main/launch_handler.md - Network accessline 4972
/** * Non-standard, see * https://github.com/WICG/manifest-incubations/blob/gh-pages/scope_extensions-explainer.md - Network accessline 4973
* Non-standard, see * https://github.com/WICG/manifest-incubations/blob/gh-pages/scope_extensions-explainer.md */ - Network accessline 4974
* https://github.com/WICG/manifest-incubations/blob/gh-pages/scope_extensions-explainer.md - Network accessline 5045
/** See https://github.com/WICG/LargestContentfulPaint and largest_contentful_paint.idl */ - Network accessline 5064
/** See https://wicg.github.io/layout-instability/#sec-layout-shift and layout_shift.idl */ - Network accessline 5075
frameId: Page.FrameId; /** * The event type, as specified in https://w3c.github.io/performance-timeline/#dom-performanceentry-entrytype - Network accessline 5076
/** * The event type, as specified in https://w3c.github.io/performance-timeline/#dom-performanceentry-entrytype * This determines which of the optional "details" fields is present. - Network accessline 5077
* The event type, as specified in https://w3c.github.io/performance-timeline/#dom-performanceentry-entrytype - Network accessline 5107
* * See also: * - https://wicg.github.io/nav-speculation/speculation-rules.html - Network accessline 5108
* See also: * - https://wicg.github.io/nav-speculation/speculation-rules.html * - https://github.com/WICG/nav-speculation/blob/main/triggers.md - Network accessline 5109
* - https://wicg.github.io/nav-speculation/speculation-rules.html - Network accessline 5110
* - https://github.com/WICG/nav-speculation/blob/main/triggers.md - Network accessline 5120
* * See also: * - https://wicg.github.io/nav-speculation/speculation-rules.html#speculation-rules-script - Network accessline 5121
* See also: * - https://wicg.github.io/nav-speculation/speculation-rules.html#speculation-rules-script * - https://wicg.github.io/nav-speculation/speculation-rules.html#speculation-rules-header - Network accessline 5122
* - https://wicg.github.io/nav-speculation/speculation-rules.html#speculation-rules-script - Network accessline 5123
* - https://wicg.github.io/nav-speculation/speculation-rules.html#speculation-rules-header - Network accessline 5133
/** TODO(https://crbug.com/1425354): Replace this property with structured error. */ - Network accessline 5135
/** * For more details, see: * https://github.com/WICG/nav-speculation/blob/main/speculation-rules-tags.md - Network accessline 5136
* For more details, see: * https://github.com/WICG/nav-speculation/blob/main/speculation-rules-tags.md */ - Network accessline 5137
* https://github.com/WICG/nav-speculation/blob/main/speculation-rules-tags.md - Network accessline 5151
/** * Corresponds to mojom::SpeculationTargetHint. * See https://github.com/WICG/nav-speculation/blob/main/triggers.md#window-name-targeting-hints - Network accessline 5152
* Corresponds to mojom::SpeculationTargetHint. * See https://github.com/WICG/nav-speculation/blob/main/triggers.md#window-name-targeting-hints */ - Network accessline 5153
* See https://github.com/WICG/nav-speculation/blob/main/triggers.md#window-name-targeting-hints - Network accessline 5206
/** * TODO(https://crbug.com/1384419): revisit the list of PrefetchStatus and - Network accessline 5207
* TODO(https://crbug.com/1384419): revisit the list of PrefetchStatus and - Network accessline 5301
/** * The following types are the replica of * https://crsrc.org/c/chrome/browser/web_applications/proto/web_app_os_integration_state.proto;drc=9910d3be894c8f142c977ba1023f30a656bc13fc;l=67 - Network accessline 5302
* The following types are the replica of * https://crsrc.org/c/chrome/browser/web_applications/proto/web_app_os_integration_state.proto;drc=9910d3be894c8f142c977ba1023f30a656bc13fc;l=67 */ - Network accessline 5303
* https://crsrc.org/c/chrome/browser/web_applications/proto/web_app_os_integration_state.proto;drc=9910d3be894c8f142c977ba1023f30a656bc13fc;l=67 - Network accessline 5306
/** * New name of the mimetype according to * https://www.iana.org/assignments/media-types/media-types.xhtml - Network accessline 5307
* New name of the mimetype according to * https://www.iana.org/assignments/media-types/media-types.xhtml */ - Network accessline 5308
* https://www.iana.org/assignments/media-types/media-types.xhtml - Network accessline 5641
/** * A description of mixed content (HTTP resources on HTTPS pages), as defined by * https://www.w3.org/TR/mixed-content/#categories - Network accessline 5642
* A description of mixed content (HTTP resources on HTTPS pages), as defined by * https://www.w3.org/TR/mixed-content/#categories */ - Network accessline 5643
* https://www.w3.org/TR/mixed-content/#categories - Network accessline 5805
* * This maps to: * PC/SC Lite: https://pcsclite.apdu.fr/api/group__ErrorCodes.html - Network accessline 5806
* This maps to: * PC/SC Lite: https://pcsclite.apdu.fr/api/group__ErrorCodes.html * Microsoft: https://learn.microsoft.com/en-us/windows/win32/secauthn/authentication-return-values - Network accessline 5807
* PC/SC Lite: https://pcsclite.apdu.fr/api/group__ErrorCodes.html - Network accessline 5808
* Microsoft: https://learn.microsoft.com/en-us/windows/win32/secauthn/authentication-return-values - Network accessline 6195
/** List of types: https://source.chromium.org/chromium/chromium/src/+/main:content/browser/devtools/devtools_agent_host_impl.cc?ss=chromium&q=f:devtools%20-f:out%20%22::kTypeTab%5B%5D%22 */ - Network accessline 6417
/** * If set to true, the authenticator will support the largeBlob extension. * https://w3c.github.io/webauthn#largeBlob - Network accessline 6418
* If set to true, the authenticator will support the largeBlob extension. * https://w3c.github.io/webauthn#largeBlob * Defaults to false. - Network accessline 6419
* https://w3c.github.io/webauthn#largeBlob - Network accessline 6423
/** * If set to true, the authenticator will support the credBlob extension. * https://fidoalliance.org/specs/fido-v2.1-rd-20201208/fido-client-to-authenticator-protocol-v2.1-rd-20201208.html#sctn-credBlob-extension - Network accessline 6424
* If set to true, the authenticator will support the credBlob extension. * https://fidoalliance.org/specs/fido-v2.1-rd-20201208/fido-client-to-authenticator-protocol-v2.1-rd-20201208.html#sctn-credBlob-extension * Defaults to fals - Network accessline 6425
* https://fidoalliance.org/specs/fido-v2.1-rd-20201208/fido-client-to-authenticator-protocol-v2.1-rd-20201208.html#sctn-credBlob-extension - Network accessline 6429
/** * If set to true, the authenticator will support the minPinLength extension. * https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#sctn-minpinlength-extension - Network accessline 6430
* If set to true, the authenticator will support the minPinLength extension. * https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#sctn-minpinlength-extension * Defaults - Network accessline 6431
* https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#sctn-minpinlength-extension - Network accessline 6435
/** * If set to true, the authenticator will support the prf extension. * https://w3c.github.io/webauthn/#prf-extension - Network accessline 6436
* If set to true, the authenticator will support the prf extension. * https://w3c.github.io/webauthn/#prf-extension * Defaults to false. - Network accessline 6437
* https://w3c.github.io/webauthn/#prf-extension - Network accessline 6441
/** * If set to true, the authenticator will support the hmac-secret extension. * https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#sctn-hmac-secret-extension - Network accessline 6442
* If set to true, the authenticator will support the hmac-secret extension. * https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#sctn-hmac-secret-extension * Defaults t - Network accessline 6443
* https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#sctn-hmac-secret-extension - Network accessline 6447
/** * If set to true, the authenticator will support the hmac-secret-mc extension. * https://fidoalliance.org/specs/fido-v2.2-rd-20241003/fido-client-to-authenticator-protocol-v2.2-rd-20241003.html#sctn-hmac-secret-make-cred-exten - Network accessline 6448
* If set to true, the authenticator will support the hmac-secret-mc extension. * https://fidoalliance.org/specs/fido-v2.2-rd-20241003/fido-client-to-authenticator-protocol-v2.2-rd-20241003.html#sctn-hmac-secret-make-cred-extension - Network accessline 6449
* https://fidoalliance.org/specs/fido-v2.2-rd-20241003/fido-client-to-authenticator-protocol-v2.2-rd-20241003.html#sctn-hmac-secret-make-cred-extension - Network accessline 6464
* Credentials created by this authenticator will have the backup * eligibility (BE) flag set to this value. Defaults to false. * https://w3c.github.io/webauthn/#sctn-credential-backup - Network accessline 6465
* eligibility (BE) flag set to this value. Defaults to false. * https://w3c.github.io/webauthn/#sctn-credential-backup */ - Network accessline 6466
* https://w3c.github.io/webauthn/#sctn-credential-backup - Network accessline 6470
* Credentials created by this authenticator will have the backup state * (BS) flag set to this value. Defaults to false. * https://w3c.github.io/webauthn/#sctn-credential-backup - Network accessline 6471
* (BS) flag set to this value. Defaults to false. * https://w3c.github.io/webauthn/#sctn-credential-backup */ - Network accessline 6472
* https://w3c.github.io/webauthn/#sctn-credential-backup - Network accessline 6493
* Signature counter. This is incremented by one for each successful * assertion. * See https://w3c.github.io/webauthn/#signature-counter - Network accessline 6494
* assertion. * See https://w3c.github.io/webauthn/#signature-counter */ - Network accessline 6495
* See https://w3c.github.io/webauthn/#signature-counter - Network accessline 6498
/** * The large blob associated with the credential. * See https://w3c.github.io/webauthn/#sctn-large-blob-extension (Encoded as a base64 string when passed over JSON) - Network accessline 6499
* The large blob associated with the credential. * See https://w3c.github.io/webauthn/#sctn-large-blob-extension (Encoded as a base64 string when passed over JSON) */ - Network accessline 6500
* See https://w3c.github.io/webauthn/#sctn-large-blob-extension (Encoded as a base64 string when passed over JSON) - Network accessline 6515
/** * The credential's user.name property. Equivalent to empty if not set. * https://w3c.github.io/webauthn/#dom-publickeycredentialentity-name - Network accessline 6516
* The credential's user.name property. Equivalent to empty if not set. * https://w3c.github.io/webauthn/#dom-publickeycredentialentity-name */ - Network accessline 6517
* https://w3c.github.io/webauthn/#dom-publickeycredentialentity-name - Network accessline 6521
* The credential's user.displayName property. Equivalent to empty if * not set. * https://w3c.github.io/webauthn/#dom-publickeycredentialuserentity-displayname - Network accessline 6522
* not set. * https://w3c.github.io/webauthn/#dom-publickeycredentialuserentity-displayname */ - Network accessline 6523
* https://w3c.github.io/webauthn/#dom-publickeycredentialuserentity-displayname - Network accessline 8344
/** * An optional anchor specifier, as defined in * https://www.w3.org/TR/css-anchor-position-1/#anchor-specifier. - Network accessline 8345
* An optional anchor specifier, as defined in * https://www.w3.org/TR/css-anchor-position-1/#anchor-specifier. * If not provided, it will return the implicit anchor element for - Network accessline 8346
* https://www.w3.org/TR/css-anchor-position-1/#anchor-specifier. - Network accessline 8772
/** * The timezone identifier. List of supported timezones: * https://source.chromium.org/chromium/chromium/deps/icu.git/+/faee8bc70570192d82d2978a71e2a615788597d1:source/data/misc/metaZones.txt - Network accessline 8773
* The timezone identifier. List of supported timezones: * https://source.chromium.org/chromium/chromium/deps/icu.git/+/faee8bc70570192d82d2978a71e2a615788597d1:source/data/misc/metaZones.txt * If empty, disables the override and r - Network accessline 8774
* https://source.chromium.org/chromium/chromium/deps/icu.git/+/faee8bc70570192d82d2978a71e2a615788597d1:source/data/misc/metaZones.txt - Network accessline 8975
* Allows callers to disable the promise rejection delay that would * normally happen, if this is unimportant to what's being tested. * (step 4 of https://fedidcg.github.io/FedCM/#browser-api-rp-sign-in) - Network accessline 8976
* normally happen, if this is unimportant to what's being tested. * (step 4 of https://fedidcg.github.io/FedCM/#browser-api-rp-sign-in) */ - Network accessline 8977
* (step 4 of https://fedidcg.github.io/FedCM/#browser-api-rp-sign-in) - Network accessline 9481
* Editing commands to send with the key event (e.g., 'selectAll') (default: []). * These are related to but not equal the command names used in `document.execCommand` and NSStandardKeyBindingResponding. * See https://source.chromi - Network accessline 9482
* These are related to but not equal the command names used in `document.execCommand` and NSStandardKeyBindingResponding. * See https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/core/editing/commands/e - Network accessline 9483
* See https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/core/editing/commands/editor_command_names.h for valid command names. - Access to secretsline 9879
[Credential-related source omitted] - Network accessline 10927
/** * The types of event to report, as specified in * https://w3c.github.io/performance-timeline/#dom-performanceentry-entrytype - Network accessline 10928
* The types of event to report, as specified in * https://w3c.github.io/performance-timeline/#dom-performanceentry-entrytype * The specified filter overrides any previous filters, passing empty - Network accessline 10929
* https://w3c.github.io/performance-timeline/#dom-performanceentry-entrytype - Network accessline 10994
* The id from the webapp's manifest file, commonly it's the url of the * site installing the webapp. See * https://web.dev/learn/pwa/web-app-manifest. - Network accessline 10995
* site installing the webapp. See * https://web.dev/learn/pwa/web-app-manifest. */ - Network accessline 10996
* https://web.dev/learn/pwa/web-app-manifest. - Dangerous shell operationline 11211
* which includes eval(), Function(), setTimeout() and setInterval()
sdk/js_protocol.json
- Dangerous shell operationline 3226
"description": "The Content Security Policy (CSP) for the target might block 'unsafe-eval'\nwhich includes eval(), Function(), setTimeout() and setInterval()\nwhen called with non-callable arguments. This flag bypasses CSP for this\nevaluat
sdk/package.json
- Executable scriptline 1
Executable file
sdk/repl.ts
- Executable scriptline 1
Executable file - Network accessline 72
port: PORT, hostname: '127.0.0.1', async fetch(req) { - Network accessline 73
hostname: '127.0.0.1', async fetch(req) { const url = new URL(req.url); - Network accessline 74
async fetch(req) { - Network accessline 113
ready: true, port: server.port, message: `CDP REPL listening on http://127.0.0.1:${server.port}`, - Network accessline 114
port: server.port, message: `CDP REPL listening on http://127.0.0.1:${server.port}`, })); - Network accessline 115
message: `CDP REPL listening on http://127.0.0.1:${server.port}`,
sdk/session.test.ts
- Executable scriptline 1
Executable file
sdk/session.ts
- Executable scriptline 1
Executable file
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 252 facts
- Network access in prose of documentationREADME.md:1Low confidence
- Network access in code of documentationREADME.md:24Low confidence
- Network access in code of documentationREADME.md:30Low confidence
- Network access in prose of documentationREADME.md:36Low confidence
- Network access in prose of documentationREADME.md:79Low confidence
- Dangerous shell operation in code of the SKILL.mdSKILL.md:23High confidence
- Network access in code of the SKILL.mdSKILL.md:34High confidence
- Network access in code of the SKILL.mdSKILL.md:35High confidence
- Network access in code of the SKILL.mdSKILL.md:99High confidence
- Network access in code of the SKILL.mdSKILL.md:100High confidence
- Network access in code of the SKILL.mdSKILL.md:157High confidence
- Network access in code of the SKILL.mdSKILL.md:159High confidence
- Network access in code of the SKILL.mdSKILL.md:191High confidence
- Network access in code of the SKILL.mdSKILL.md:193High confidence
- Access to secrets in prose of documentationinteraction-skills/cookies.md:3Low confidence
- Network access in code of documentationinteraction-skills/cookies.md:13Low confidence
- Network access in code of documentationinteraction-skills/cookies.md:14Low confidence
- Network access in code of documentationinteraction-skills/cookies.md:15Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valueinteraction-skills/cookies.md:18Low confidence
- Network access in code of documentationinteraction-skills/dialogs.md:66Low confidence
- Network access in code of documentationinteraction-skills/dialogs.md:67Low confidence
- Network access in code of documentationinteraction-skills/dialogs.md:72Low confidence
- Network access in code of documentationinteraction-skills/dialogs.md:74Low confidence
- Access to secrets in prose of documentationinteraction-skills/downloads.md:48Low confidence
- Network access in code of documentationinteraction-skills/downloads.md:51Low confidence
- Network access in code of documentationinteraction-skills/downloads.md:52Low confidence
- Access to secrets in prose of documentationinteraction-skills/downloads.md:56Low confidence
- Network access in code of documentationinteraction-skills/print-as-pdf.md:59Low confidence
- Network access in code of documentationinteraction-skills/tabs.md:11Low confidence
- Network access in code of documentationinteraction-skills/tabs.md:12Low confidence
- Network access in code of documentationinteraction-skills/tabs.md:35Low confidence
- Network access in code of documentationinteraction-skills/tabs.md:36Low confidence
- Network access in code of documentationinteraction-skills/tabs.md:37Low confidence
- Network access in code of documentationinteraction-skills/uploads.md:47Low confidence
- Network access in code of documentationinteraction-skills/uploads.md:48Low confidence
- Network access in code of documentationinteraction-skills/uploads.md:49Low confidence
- Executable script in code of a file that runssdk/browser-harness-js:1High confidence
- Network access in a comment of a file that runssdk/browser-harness-js:4Low confidence
- Network access in a comment of a file that runssdk/browser-harness-js:5Low confidence
- Network access in a comment of a file that runssdk/browser-harness-js:6Low confidence
- Network access in code of a file that runssdk/browser-harness-js:22High confidence
- Network access in code of a file that runssdk/browser-harness-js:24High confidence
- Network access in code of a file that runssdk/browser-harness-js:46High confidence
- Network access in code of a file that runssdk/browser-harness-js:47High confidence
- Dangerous shell operation in code of a file that runssdk/browser-harness-js:48High confidence
- Network access in code of a file that runssdk/browser-harness-js:48High confidence
- Network access in code of a file that runssdk/browser-harness-js:49High confidence
- Network access in code of a file that runssdk/browser-harness-js:50High confidence
- Network access in code of a file that runssdk/browser-harness-js:51High confidence
- Dangerous shell operation in code of a file that runssdk/browser-harness-js:52High confidence
and 202 more
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Compatible | Standard SKILL.md SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.