Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/browseros-ai/browseros/browserclawnpx skills add browseros-ai/BrowserOS --skill browserclawgit clone --depth 1 https://github.com/browseros-ai/BrowserOSWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00119 | $0.00717 |
| Opus 5 | $0.00060 | $0.00358 |
| Sonnet 5 | $0.00024 | $0.00143 |
| Haiku 4.5 | $0.00012 | $0.00072 |
Grade A, and why
browseros-neo scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
The source is not reproduced here
Licensed AGPL-3.0
The repository is licensed AGPL-3.0, which this catalogue does not treat as permission to reproduce the file. Read it at the source.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 44 lines · 119 tokens per session scan A a9799eef96e3
browseros-neo is a skill published in the GitHub repository browseros-ai/BrowserOS (13,451 stars, last pushed today), licensed AGPL-3.0. It adds 119 tokens to every session and 717 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
browser
Automate web browsers — navigate sites, fill forms, click buttons, extract data, take screenshots, and run multi-step web workflows.
web-navigator
Web 浏览器自动化路由规则。通过 webnavigator 将 Web 场景路由到 Playwright MCP 或 mcp-chrome。.
browser-extension
Open, read and drive any web page in the user's real browser — logins, paywalls and JS-heavy sites included. Reaches what webfetch cannot, and acts as well as reads — navigate, click, fill forms, screenshot, scrape, manage tabs, run JavaScript. Chrome, Edge, Brave, Firefox, several at once.
agent-computer-use
REQUIRED for any task that involves operating a desktop application — opening apps, clicking buttons, typing into fields, pressing keys, scrolling, dragging, reading what's on screen, moving or resizing windows, or verifying state after an action. Always use the agent-cu CLI commands (open, snapshot, click, type, key…
computer-use
Desktop automation — see the screen and control mouse/keyboard with a verified-aim loop. Screenshots, native-resolution zoom for precise targeting, clicks that return a magnified proof of where they landed, typing, shortcuts, scrolling, drag-and-drop.
jina-reader
Fetch a webpage as clean, structured Markdown via the jina.ai reader (r.jina.ai) instead of raw HTML — use whenever you need to read web content and want to save tokens, or when a normal fetch is blocked (HTTP 403/401), returns messy/boilerplate HTML, or the page is JavaScript-rendered (SPA, docs sites, wikis like…