Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/scrolldynasty/browsermesh/claude-mdgit clone --depth 1 https://github.com/scrollDynasty/BrowserMeshWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01713 | $0.01713 |
| Opus 5 | $0.00856 | $0.00856 |
| Sonnet 5 | $0.00343 | $0.00343 |
| Haiku 4.5 | $0.00171 | $0.00171 |
Grade A, and why
BrowserMesh CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 136 lines — stays where its author put it; the contents beside it link to each section on GitHub.
BrowserMesh
Local isolated multi-session browser runtime, driven by external MCP clients.
AGENTS.md is the full charter. This file is the working subset; when the two disagree, AGENTS.md
wins.
Responsibility boundary
User → external AI client → MCP → BrowserMesh → isolated browser sessions
The external client (Claude Code, Codex, Cursor, Qwen, …) does the reasoning, planning, and orchestration. BrowserMesh only executes browser work.
Never add internal Agent entities or registries, browser_agent_* / browser_message_* tools,
agent mailboxes or messaging, LLM-owned session principals, internal LLM calls, or reasoning loops
inside BrowserMesh. Session name and metadata are neutral workflow labels — not principals,
permissions, identities, or leases.
Architecture invariants
BrowserMesh is an independent runtime, not a wrapper around Playwright MCP. MCP is a transport adapter; Playwright is a browser-engine adapter. Domain, application, and runtime code import neither.
- Explicit addressing. Every browser operation targets an explicit
sessionId; every page-specific operation an explicitpageId. There is never a globalcurrentSession,activeSession,currentPage,activePage, orcurrentTab. - Context isolation. Each ready session owns its own non-persistent Chromium
BrowserContext. - Page isolation. A
pageIdfrom another session is rejected. - Per-session serialization. Everything touching one session's live browser state goes through that session's serial queue — including read-style operations (snapshot, URL, title, visible text). They must not bypass an in-progress operation.
- Cross-session parallelism. Different sessions run concurrently. Never introduce one global browser-operation mutex.
- Queue recovery. A rejected, failed, or timed-out operation must not poison a session queue; subsequent accepted operations still execute.
- Lifecycle safety. Close and shutdown must not race initialization into leaked contexts or pages. An unexpected Chromium disconnect must not silently rebuild live sessions.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 136 lines · 1,713 tokens per session scan A 4618de87907e
BrowserMesh CLAUDE.md is an instructions file published in the GitHub repository scrollDynasty/BrowserMesh (4 stars, last pushed 2d ago), licensed Apache-2.0. It adds 1,713 tokens to every session, about $0.0086 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
browser-harness CLAUDE.md
Instructions for browser-use/browser-harness, a project described as: Browser Harness | Self-healing harness that enables LLMs to complete any task.
eric-task-master AGENTS.md
AGENTS.md instructions for npcworkspace-cmyk/eric-task-master: Read ARCHITECTURE.md before changing code.
AgentLimb AGENTS.md
AGENTS.md instructions for hooosberg/AgentLimb, covering agentlimb development notes, commands and boundaries.
AgentLimb CLAUDE.md
Claude Code instructions for hooosberg/AgentLimb, covering agentlimb development notes, commands and boundaries.
obscura AGENTS.md
Instructions for h4ckf0r0day/obscura, covering agents.md, build, rendering and stealth, no rendering, with rustls or stealth and test.
stealth-browser-mcp AGENTS.md
Instructions for vibheksoni/stealth-browser-mcp, covering agent instructions, start here, recommended proxy services, environment and validation.