Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/keon/browser-control/agents-mdgit clone --depth 1 https://github.com/keon/browser-controlWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00484 | $0.00484 |
| Opus 5 | $0.00242 | $0.00242 |
| Sonnet 5 | $0.00097 | $0.00097 |
| Haiku 4.5 | $0.00048 | $0.00048 |
Grade A, and why
browser-control AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
browser-control agent guide
Use this project as a tiny browser pipe, not an agent framework.
Quick loop:
browser-control launch about:blank
export BROWSER_CONTROL_CDP_URL=http://127.0.0.1:9222
browser-control open https://example.com
browser-control inspect # compact title/url/text/headings/actions/links
browser-control snapshot # observe also works
browser-control click @e1
browser-control eval 'document.title'
browser-control events
browser-control network
browser-control console
browser-control cdp Browser.getVersion
Rules:
- Use
snapshotbefore ref actions. - Use
inspectfirst when you need compact page text + candidate links/actions. - Use refs for simple actions, selectors/coordinates when needed.
- Use
--wait Nonclick/fillfor late-rendered elements;wait-elementfor explicit polling. - Use
press ctrl+a/press cmd+shift+tstyle combos; editing combos (select-all/copy/paste/undo) work headless and on macOS. - Use
scroll --at x,yfor inner scrollable containers; plainscrollfor the window. - Use
screenshot --fullfor full-page captures;click --clicks 2/--button rightfor double/context clicks. page-inforeports a pending{dialog}instead of hanging; clear it withdialog accept|dismiss.evalaccepts top-levelreturn(auto-wrapped in an IIFE).- Use
evalorcdpas the raw escape hatch. - Use
events,network, andconsolewhen diagnosing flaky waits/pages. - Use
--frame <target-id|url-substring>oneval,click, orfillfor OOPIF/frame targets. - Put reusable scripts in
.browser-control/scripts. - Verify with
text,eval,screenshot, or raw CDP before saying done. - Check
.browser-control/traces/*after failures. - Short env aliases
BU_CDP_WSandBU_CDP_URLare accepted.
Lifecycle:
browser-control stop # stop browser launched by browser-control
browser-control reload # same minimal lifecycle reset
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 45 lines · 484 tokens per session scan A f193bb0318af
browser-control AGENTS.md is an instructions file published in the GitHub repository keon/browser-control (3,135 stars, last pushed 5d ago), licensed MIT. It adds 484 tokens to every session, about $0.0024 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
moli AGENTS.md
Instructions for lexmount/moli: Before committing changes that modify Rust source code or Rust build metadata (such as Cargo.toml, Cargo.lock, or rust-toolchain), run all of the following from the repository root and ensure they pass.
actionbook CLAUDE.md
Instructions for actionbook/actionbook, covering claude.md, project overview, architecture, domain model hierarchy and module structure.
playwright-rust CLAUDE.md
Instructions for padamson/playwright-rust, covering claude.md, project, repository layout, skills (procedural reference) and documentation hierarchy.
barebrowse CLAUDE.md
Instructions for hamr0/barebrowse, covering dev rules and project specifics.
codex-browser-bridge AGENTS.md
Instructions for DeliciousBuding/codex-browser-bridge, covering agents.md, 仓库级 skill, mcp 工具设计规范, 1. browser 层(src/browser.rs) and 2. mcp 层(src/mcp/ 目录).
worbrow AGENTS.md
AGENTS.md instructions for noisystreet/worbrow, covering agents.md, project identity, hard constraints (revert on violation), modifying architecture docs and commit conventions.