ebay

ebay is a skill for Claude Code, Codex from AgentComputerAI/torch. It costs 78 tokens per session (1,893 once invoked), scanned A, original, MIT.

A scraping guide for eBay search pages, which list items matching a search query. It explains how to pass eBay’s one-time browser challenge using a real Chrome session and then parse the page’s HTML.

In plain words
What is it for?
Use it to collect item data from anonymous eBay searches such as /sch/i.html?_nkw=... once the browser session has cleared the challenge.
Why use it?
It avoids the interruption page returned to first-time basic requests, without requiring a login, proxy, or CAPTCHA-solving service.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to collect item data from anonymous eBay searches such as /sch/i.html?_nkw=... once the browser session has cleared the challenge.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/agentcomputerai/torch/ebay
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add AgentComputerAI/torch --skill ebay
Clone the repo
git clone --depth 1 https://github.com/AgentComputerAI/torch

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ebay

README.md
[![agentmods](https://agentmods.dev/badge/skills/agentcomputerai/torch/ebay/github.svg)](https://agentmods.dev/skills/agentcomputerai/torch/ebay)
Your own site
<a href="https://agentmods.dev/skills/agentcomputerai/torch/ebay"><img src="https://agentmods.dev/badge/skills/agentcomputerai/torch/ebay/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ebay

Your own site · 80×15
<a href="https://agentmods.dev/skills/agentcomputerai/torch/ebay"><img src="https://agentmods.dev/badge/skills/agentcomputerai/torch/ebay.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 78 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,893 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00078 $0.01893
Opus 5.5 $0.00031 $0.00757
Sonnet 5.5 $0.00016 $0.00379
Haiku 4.5 $0.00008 $0.00189

Measured 1mo ago against content hash ed6f12543b4b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

ebay scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- **Phase 0 (curl)** — blocked by splash challenge (`Pardon Our Interruption`). Skipped Phase 1.
skills/sites/ebay/SKILL.md · 152 lines

How it starts

The opening of the file, as written. The whole thing — 152 lines — stays where its author put it; the contents beside it link to each section on GitHub.

eBay (ebay.com)

eBay search pages are server-rendered HTML behind a one-time JS splash challenge (splashui/challenge, "Pardon Our Interruption"). With puppeteer.connect() to the user's real Chrome the challenge auto-redirects in under a second and the ul.srp-results list is fully populated. No captcha, no proxies.

Detection

Signal Value
Server ebay-proxy-server
Challenge 307 → /splashui/challenge?ap=1&appName=orch&ru=... (title: "Pardon Our Interruption...")
Framework Marko-rendered SSR HTML + eBay RUM client JS
Anti-bot Custom splash challenge (uzm* cookies, _crefId JOSE token) — clears on real Chrome automatically
Auth Not required for search
robots.txt /sch/ allowed for anonymous crawling

Architecture

  • URL template: https://www.ebay.com/sch/i.html?_nkw=<query>
  • First anonymous hit returns 307 → splash challenge HTML; the JS on that page sets __uzm* cookies, POSTs a token, and redirects back to the original URL.
  • Once cookies are set (which happens instantly in a real Chrome profile) the SRP is plain SSR HTML. All items are present on load — no infinite scroll — but images/below-the-fold cards are lazy-loaded, so scroll before extracting.
  • Listing cards are <li class="s-card"> inside ul.srp-results. Newer layout — the legacy .s-item selectors no longer exist on /sch/i.html (2026).

Strategy used

  • Phase 0 (curl) — blocked by splash challenge (Pardon Our Interruption). Skipped Phase 1.
  • Phase 2 (browser) — puppeteer.connect({ browserURL: "http://127.0.0.1:9222" }) cleared the challenge in one redirect. Extraction is pure DOM scraping; no API replay needed.

Stealth config that works

No stealth plugin needed when using the real Chrome profile. Minimal connect:

const browser = await puppeteer.connect({ browserURL: "http://127.0.0.1:9222" });
const page = await browser.newPage();
await page.setViewport({ width: 1400, height: 900 });
await page.goto(url, { waitUntil: "domcontentloaded", timeout: 45000 });

// If first hit landed on the splash page, wait for the auto-redirect
if ((await page.title()).includes("Pardon")) {
  await page.waitForNavigation({ timeout: 30000 }).catch(() => {});
}
await page.waitForSelector("ul.srp-results > li.s-card", { timeout: 30000 });

Read the full file on GitHub · 152 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 152 lines · 78 tokens per session scan A ed6f12543b4b

Subscribe to this mod's changes

ebay is a skill published in the GitHub repository AgentComputerAI/torch (5 stars, last pushed 6mo ago), licensed MIT. It adds 78 tokens to every session and 1,893 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

chrome-extension

Use when building or shipping a Manifest V3 browser extension and hitting its quirks — service worker dying and losing state, permission warnings, a Chrome Web Store rejection, content-script/worker/popup messaging, or an MV2-to-V3 migration. NOT a generic web app (that is nextjs), NOT a desktop shell (that is…

ericrisco/rsc-harness · 76 tokens

data-scraper

Use when data lives on a website with no usable API — listings, prices, public records — and the scrape must stay legal and not get blocked: legal gate, extraction path, durable selectors, pacing, resilience. NOT parsing bytes you already hold into fields (that is structured-extraction), NOT a documented API or key…

ericrisco/rsc-harness · 77 tokens

nodejs

Use when building or operating a plain Node.js / Express 5 backend service: project layout, async correctness, central error middleware, fail-fast config, graceful shutdown on SIGTERM. NOT DI modules/providers/guards (that is nestjs), NOT the type system or tsconfig (that is typescript), NOT REST contract design (that…

ericrisco/rsc-harness · 77 tokens

checking-a-page

Check that a web page you wrote or changed actually works, by opening it in a browser and driving every control on it. Use after creating or editing an HTML page, or the JavaScript or CSS that a page loads.

awss1i/assay · 49 tokens

browser-qa

Testing web apps through a real browser: reconnaissance before acting, selector discovery, state capture, console errors and screenshot evidence. Use on a web surface end to end, or to reproduce a front-end bug.

damianvtran/local-operator · 45 tokens

browser-automation

A browser-automation workflow that detects the terminal environment and chooses a browser control tool. It supports opening pages, taking snapshots, clicking, filling fields, and other checks.

Insajin/autopus-adk · 34 tokens