Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/5dive-ai/5dive-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/5dive-ai/5dive-plugins/browser)<a href="https://agentmods.dev/plugins/5dive-ai/5dive-plugins/browser"><img src="https://agentmods.dev/badge/plugins/5dive-ai/5dive-plugins/browser/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/5dive-ai/5dive-plugins/browser"><img src="https://agentmods.dev/badge/plugins/5dive-ai/5dive-plugins/browser.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade B, and why
browser scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 16d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
"command": "sudo 5dive browser setup" What it actually says
{
"name": "browser",
"version": "1.32.0",
"description": "Browse and act on any website with nothing connected; where it must be you, persistent human-authenticated sessions you log into once by hand (several accounts per site). Paying stops for your approval by default; posting, sending and deleting go ahead and are logged for you; set careful and all four wait for your yes. Never solves a security challenge; it stops and asks you.",
"author": {
"name": "5dive",
"email": "[email protected]",
"url": "https://5dive.ai"
},
"homepage": "https://github.com/5dive-ai/5dive-browser",
"license": "MIT",
"skills": "./skills/",
"keywords": [
"browser",
"channel",
"automation"
],
"fivedive": {
"contract": "1",
"capabilities": [
"channel",
"verb",
"skill"
],
"verbs": [
{
"name": "browser",
"summary": "log into a site once, then let adapters operate it",
"installs": "channel"
}
],
"grants": [
"browser-profiles"
],
"trust": {
"publisher": "5dive",
"did": "did:key:5dive",
"review": "official"
},
"setup": {
"hint": "browser needs a root-created profile store that 5dive will not create behind your back, and a Chrome on the box.",
"command": "sudo 5dive browser setup"
}
}
}
What it installs
The manifest is a name and a version. 2 skills travel with it, and installing the plugin installs all of them — 240 tokens a session between them. Each is measured on its own page, and each can be installed alone.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 16d ago Changed 77a9dbe68eea
- 17d ago Changed 8c92249b3e97
- 19d ago Changed a19b25924885
- 20d ago Changed scan A → B 47e0206009f6
- 21d ago Changed 7a5459915093
- 23d ago Changed 55dd539bd74d
- 26d ago Changed scan B → A 6d0dd3b5ea0c
- 28d ago Changed scan A → B 203e4d663e01
- 29d ago Changed 38152370d9d8
- 1mo ago First seen · 46 lines scan A 7a286345b8f5
browser is a plugin published in the GitHub repository 5dive-ai/5dive-plugins (2 stars, last pushed today), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-14.
Other plugins, from other repositories
firecrawl
Search the web, developer sources, and scientific papers with Firecrawl.
graph-it-live
Dependency, call-graph, impact, and architecture analysis for codebases.
antigravity
Antigravity plugin for Claude Code with TRAID Design System: 5 canonical HTML templates (traid-dark, traid-light, stripe-press, notion-docs, magazine) for branded report generation from markdown. Plus audio & video transcription (/agy:transcribe, /agy:media), a local NotebookLM (/agy:notebook — sweep a folder of…
slack-workspace
The entire Slack Web API for Claude Code — 201 methods, approval-gated sending, a cached workspace reference, and scheduled-job alerting. Backed by the elnora-slack CLI.
ed3d-playwright
Playwright automation toolkit with MCP integration, specialized agent for browser control, and best practice skills.
vibelens
Gives Claude eyes on localhost. Captures a screenshot, console/network errors and a token-optimized DOM snapshot of your dev server so UI bugs get fixed from evidence instead of guesswork.