Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BlackBeltTechnology/pi-agent-dashboard --skill browsergit clone --depth 1 https://github.com/BlackBeltTechnology/pi-agent-dashboardWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/blackbelttechnology/pi-agent-dashboard/browser)<a href="https://agentmods.dev/skills/blackbelttechnology/pi-agent-dashboard/browser"><img src="https://agentmods.dev/badge/skills/blackbelttechnology/pi-agent-dashboard/browser/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/blackbelttechnology/pi-agent-dashboard/browser"><img src="https://agentmods.dev/badge/skills/blackbelttechnology/pi-agent-dashboard/browser.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 5 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 5 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00094 | $0.02127 |
| Opus 5.5 | $0.00038 | $0.00851 |
| Sonnet 5.5 | $0.00019 | $0.00425 |
| Haiku 4.5 | $0.00009 | $0.00213 |
Grade A, and why
browser scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
allowed-tools: Bash(agent-browser:*), Bash(npx agent-browser:*), Bash(npx @panerelay/setup:*), Bash(curl:*) How it starts
The opening of the file, as written. The whole thing — 166 lines — stays where its author put it; the contents beside it link to each section on GitHub.
browser
Composite skill that gives the agent eyes and hands for any browser-driven
task — web pages or Electron desktop apps — via the agent-browser CLI.
Three recipes:
- Web automation — generic web pages plus Pi Dashboard-specific helpers
(dashboard URL detection, responsive testing, console-error hunting).
Reference:
references/web.md. - Electron automation — drive any Chromium-based Electron app, including
a worked example for the Pi Dashboard's own shell via
--debug-cdp. Reference:references/electron.md. - The user's own logged-in browser — reach SSO/2FA-gated sites using the
user's real cookies. Two paths:
- Pi Dashboard browser (preferred when the pi session runs on the
dashboard host) —
browser_connecthands back a loopback CDP URL for the dedicated profile or a Chrome profile (Playwright Chrome Extension). Reference:references/dashboard-relay.md. - Panerelay extension bridge (legacy) — a native-messaging host for when
there is no loopback dashboard. Reference:
references/own-browser.md.
- Pi Dashboard browser (preferred when the pi session runs on the
dashboard host) —
Step 0a — Preflight: agent-browser CLI must be installed
The skill does not bundle the CLI. Verify it through the dashboard tool
registry — recommend-only, nothing installs without an explicit --install:
pi-dashboard-ensure <extension-package-root>/package.json
<extension-package-root> is the package that ships this skill — three levels
above this SKILL.md's .pi/skills/browser/ directory (in a global install:
$(npm root -g)/@blackbelt-technology/pi-dashboard/node_modules/@blackbelt-technology/pi-dashboard-extension).
The manifest (pi.tools) declares agent-browser (resolve) and chromium
(pw-browser); the registry answers present / recommended / blocked per
tool.
agent-browser: present→ continue to Step 0b.agent-browser: recommendedorblocked→ halt and tell the user:
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- LICENSE 11 KB
- references/challenge.md 7.5 KB
- references/challenge.md.AGENTS.md 1.3 KB
- references/dashboard-relay.md 18 KB
- references/dashboard-relay.md.AGENTS.md 2.3 KB
- references/electron.agent.md 4.3 KB
- references/electron.md 9.0 KB
- references/electron.md.AGENTS.md 316 B
- references/own-browser.agent.md 5.3 KB
- references/own-browser.md 12 KB
- references/own-browser.md.AGENTS.md 1.2 KB
- references/web.agent.md 24 KB
- references/web.md 81 KB
- references/web.md.AGENTS.md 294 B
- scripts/check-panerelay.sh 6.4 KB runs code
- scripts/check-panerelay.sh.AGENTS.md 928 B
- scripts/detect-dashboard.sh 1.7 KB runs code
- SKILL.md.AGENTS.md 931 B
- UPSTREAM.md 3.0 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +5 lines e00c88f0a7ed
- 1mo ago Changed · +28 lines · +2 tokens per session d5029ca247d8
- 1mo ago Changed · +13 lines 90dd7f82cc93
- 1mo ago First seen · 120 lines · 92 tokens per session scan A 433dc38a9bec
browser is a skill published in the GitHub repository BlackBeltTechnology/pi-agent-dashboard (329 stars, last pushed today), licensed MIT. It adds 94 tokens to every session and 2,127 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
creating-actions
This skill should be used when the user asks to "create an action", "save this flow as an action", "make this replayable", "record a reusable action", "author a Maestro flow as an action", "add a login/setup action", or when a verified UI walk should be persisted under .rn-agent/actions/ so future sessions can replay…
goga-cookbook
Principles for applying DSL specification in cell and CODEMANIFEST design.
goga-plan-by-design
Compile a design document into a ralphex execution plan.
goga-define-challenge
Challenge the complete product definition before the PRD is generated.
goga-review-plan
Verify execution plan completeness and correctness.
goga-prototype
Pipeline orchestrator for prototyping the cells architecture.