Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/neodrew/chromeflow/claude-mdgit clone --depth 1 https://github.com/NeoDrew/chromeflowWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/neodrew/chromeflow/claude-md)<a href="https://agentmods.dev/instructions/neodrew/chromeflow/claude-md"><img src="https://agentmods.dev/badge/instructions/neodrew/chromeflow/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.08218 | $0.08218 |
| Opus 5 | $0.04109 | $0.04109 |
| Sonnet 5 | $0.01644 | $0.01644 |
| Haiku 4.5 | $0.00822 | $0.00822 |
Grade A, and why
chromeflow CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 484 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Chromeflow — Claude Instructions
What chromeflow is
Chromeflow is a browser guidance tool. When a task requires the user to interact with a website (create accounts, set up billing, retrieve API keys, configure third-party services), use chromeflow to guide them through it visually instead of giving text instructions.
When to use chromeflow (be proactive)
Use chromeflow automatically whenever a task requires:
- Creating or configuring a third-party account (Stripe, SendGrid, Supabase, Vercel, etc.)
- Retrieving API keys, secrets, or credentials to place in
.env - Setting up pricing tiers, webhooks, or service configuration in a web UI
- Any browser-based step that is blocking code work
Do NOT ask "should I open the browser?" — just do it. The user expects seamless handoff.
Never end a response with a "you still need to" list of browser tasks. If code changes are done and browser steps remain (e.g. creating a Stripe product, adding an env var), continue immediately with chromeflow — don't hand them back to the user.
HARD RULES — never break these
-
Never use Bash as a fallback for browser tasks. If
click_elementfails, usescroll_to_elementthen retry, or usehighlight_regionto show the user. Never useosascript,applescript, or any shell command to control the browser. -
Never use
take_screenshotto read page content. Afterclick_element, after navigation — always callget_page_text(orfind_textif you only need to check for a specific phrase).get_page_textreturns up to 10,000 characters; if truncated it tells you the nextstartIndexto paginate. Screenshots are only for locating an element's pixel position when DOM queries have already failed. Never take more than 1–2 screenshots in a row. -
Use
wait_for(selector=…)to wait for async page changes (build completion, modals, toasts). Never poll with repeatedtake_screenshotcalls. -
Form submits on social/auth platforms require a real human click. Reddit, X / Twitter, GitHub device-code, mcp.so, and most modern anti-bot-protected sites silently reject synthetic submit clicks —
click_elementreturns success but nothing happens. For known anti-bot platforms: pre-fill the form viafill_form/fill_input, thenhighlight_regionthe submit button and callwait_for_click()so the user's real gesture fires the submit. To detect this case on an unknown form, passexpect_submit: trueon the submit click — chromeflow returnssuccess=falsewith "submit silently rejected" when no URL change / toast / alert / modal appears within 4s. Do NOT retry a silent rejection; switch straight to highlight + wait_for_click.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 484 lines · 8,218 tokens per session scan A 584542ca1fe3
chromeflow CLAUDE.md is an instructions file published in the GitHub repository NeoDrew/chromeflow (2 stars, last pushed 3mo ago), licensed MIT. It adds 8,218 tokens to every session, about $0.0411 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
browser-bridge AGENTS.md
Instructions for koltyakov/browser-bridge, covering project guide, data flow, package map, where to find things and method dispatch (extension side).
codex-browser-bridge AGENTS.md
AGENTS.md instructions for DeliciousBuding/codex-browser-bridge, covering agents.md, 仓库级 skill, mcp 工具设计规范, 1. browser 层(src/browser.rs) and 2. mcp 层(src/mcp/ 目录).
browser-agent AGENTS.md
Instructions for uiuing/browser-agent, covering agents.md — guide for ai coding agents, setup & commands, tests — run these before claiming done, repository layout and architecture invariants (do not break these).
grok-chrome-bridge AGENTS.md
AGENTS.md instructions for davidsolheim/grok-chrome-bridge, covering grok chrome bridge, verify and do not.
ai-invictum-browser-bridge AGENTS.md
AGENTS.md instructions for invictumhr/ai-invictum-browser-bridge: The phrases use IBB, use IBG, use Invictum Browser Bridge, and use Invictum Browser Gate all mean the same thing. Croatian equivalents such as koristi IBB, koristi IBG, koristi Invictum Browser Bridge, and koristi Invictum Browser Gate are recognized…
chrome-tab-remote AGENTS.md
AGENTS.md instructions for ai-4-you/chrome-tab-remote, covering agents.md — chrome-tab-remote, what this repo is, collaboration rules (durable), scope decisions (durable) and design principles.