chromeflow CLAUDE.md

chromeflow CLAUDE.md is an instructions file for coding agents from NeoDrew/chromeflow. It costs 8,218 tokens per session, scanned A, original, MIT.

Instructions for Chromeflow, a browser guidance tool that helps users complete tasks in websites. It is intended for account setup, billing, API-key retrieval, and other third-party service configuration.

In plain words
What is it for?
Use it when code work depends on configuring services such as Stripe, SendGrid, Supabase, or Vercel, including pricing, webhooks, credentials, and environment settings.
Why use it?
It keeps browser-based setup connected to the coding task instead of leaving the user with text-only directions. The instructions also define how to continue when a browser action is blocked.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/neodrew/chromeflow/claude-md
Clone the repo
git clone --depth 1 https://github.com/NeoDrew/chromeflow

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for chromeflow CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/neodrew/chromeflow/claude-md.svg)](https://agentmods.dev/instructions/neodrew/chromeflow/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/neodrew/chromeflow/claude-md"><img src="https://agentmods.dev/badge/instructions/neodrew/chromeflow/claude-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 8,218 This file is loaded in full into every session.
When invoked 8,218 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.08218 $0.08218
Opus 5 $0.04109 $0.04109
Sonnet 5 $0.01644 $0.01644
Haiku 4.5 $0.00822 $0.00822

Measured 4d ago against content hash 584542ca1fe3, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

chromeflow CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 484 lines

How it starts

The opening of the file, as written. The whole thing — 484 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Chromeflow — Claude Instructions

What chromeflow is

Chromeflow is a browser guidance tool. When a task requires the user to interact with a website (create accounts, set up billing, retrieve API keys, configure third-party services), use chromeflow to guide them through it visually instead of giving text instructions.

When to use chromeflow (be proactive)

Use chromeflow automatically whenever a task requires:

  • Creating or configuring a third-party account (Stripe, SendGrid, Supabase, Vercel, etc.)
  • Retrieving API keys, secrets, or credentials to place in .env
  • Setting up pricing tiers, webhooks, or service configuration in a web UI
  • Any browser-based step that is blocking code work

Do NOT ask "should I open the browser?" — just do it. The user expects seamless handoff.

Never end a response with a "you still need to" list of browser tasks. If code changes are done and browser steps remain (e.g. creating a Stripe product, adding an env var), continue immediately with chromeflow — don't hand them back to the user.

HARD RULES — never break these

  1. Never use Bash as a fallback for browser tasks. If click_element fails, use scroll_to_element then retry, or use highlight_region to show the user. Never use osascript, applescript, or any shell command to control the browser.

  2. Never use take_screenshot to read page content. After click_element, after navigation — always call get_page_text (or find_text if you only need to check for a specific phrase). get_page_text returns up to 10,000 characters; if truncated it tells you the next startIndex to paginate. Screenshots are only for locating an element's pixel position when DOM queries have already failed. Never take more than 1–2 screenshots in a row.

  3. Use wait_for(selector=…) to wait for async page changes (build completion, modals, toasts). Never poll with repeated take_screenshot calls.

  4. Form submits on social/auth platforms require a real human click. Reddit, X / Twitter, GitHub device-code, mcp.so, and most modern anti-bot-protected sites silently reject synthetic submit clicks — click_element returns success but nothing happens. For known anti-bot platforms: pre-fill the form via fill_form/fill_input, then highlight_region the submit button and call wait_for_click() so the user's real gesture fires the submit. To detect this case on an unknown form, pass expect_submit: true on the submit click — chromeflow returns success=false with "submit silently rejected" when no URL change / toast / alert / modal appears within 4s. Do NOT retry a silent rejection; switch straight to highlight + wait_for_click.

Read the full file on GitHub · 484 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 484 lines · 8,218 tokens per session scan A 584542ca1fe3

Subscribe to this mod's changes

chromeflow CLAUDE.md is an instructions file published in the GitHub repository NeoDrew/chromeflow (2 stars, last pushed 3mo ago), licensed MIT. It adds 8,218 tokens to every session, about $0.0411 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

browser-bridge AGENTS.md

Instructions for koltyakov/browser-bridge, covering project guide, data flow, package map, where to find things and method dispatch (extension side).

koltyakov/browser-bridge · 2,959 tokens

codex-browser-bridge AGENTS.md

AGENTS.md instructions for DeliciousBuding/codex-browser-bridge, covering agents.md, 仓库级 skill, mcp 工具设计规范, 1. browser 层(src/browser.rs) and 2. mcp 层(src/mcp/ 目录).

DeliciousBuding/codex-browser-bridge · 1,730 tokens

browser-agent AGENTS.md

Instructions for uiuing/browser-agent, covering agents.md — guide for ai coding agents, setup & commands, tests — run these before claiming done, repository layout and architecture invariants (do not break these).

uiuing/browser-agent · 1,806 tokens

grok-chrome-bridge AGENTS.md

AGENTS.md instructions for davidsolheim/grok-chrome-bridge, covering grok chrome bridge, verify and do not.

davidsolheim/grok-chrome-bridge · 152 tokens

ai-invictum-browser-bridge AGENTS.md

AGENTS.md instructions for invictumhr/ai-invictum-browser-bridge: The phrases use IBB, use IBG, use Invictum Browser Bridge, and use Invictum Browser Gate all mean the same thing. Croatian equivalents such as koristi IBB, koristi IBG, koristi Invictum Browser Bridge, and koristi Invictum Browser Gate are recognized…

invictumhr/ai-invictum-browser-bridge · 1,054 tokens

chrome-tab-remote AGENTS.md

AGENTS.md instructions for ai-4-you/chrome-tab-remote, covering agents.md — chrome-tab-remote, what this repo is, collaboration rules (durable), scope decisions (durable) and design principles.

ai-4-you/chrome-tab-remote · 1,006 tokens