Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add drisplabs/browser-mcp --skill drisp-browsergit clone --depth 1 https://github.com/drisplabs/browser-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/drisplabs/browser-mcp/drisp-browser)<a href="https://agentmods.dev/skills/drisplabs/browser-mcp/drisp-browser"><img src="https://agentmods.dev/badge/skills/drisplabs/browser-mcp/drisp-browser.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Prompt Injection · line 135 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 184 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- high Prompt Injection · line 320 Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
- medium MCP Rug Pull · line 26 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00213 | $0.04358 |
| Opus 5 | $0.00106 | $0.02179 |
| Sonnet 5 | $0.00043 | $0.00872 |
| Haiku 4.5 | $0.00021 | $0.00436 |
Grade A, and why
drisp-browser scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 425 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Drisp Browser Guide
Use this skill to open live web pages, carry out actions, move through multi-step flows, validate page state, and capture selectors for automation.
Common uses:
- Review a live page or multi-step flow
- Click through navigation, buttons, dialogs, and other actions
- Fill, submit, or inspect forms and validation states
- Add products to cart or complete other in-page actions
- Capture reliable Playwright selectors for key elements
Setup
This skill drives the Drisp Browser (@drisp/browser-mcp) MCP server — installing the skill does not install that server. If the mcp__drisp-browser__* tools aren't available, add the server first:
claude mcp add drisp-browser -- npx @drisp/browser-mcp@latest
For Claude Desktop / Cursor / VS Code, register it under the key drisp-browser:
{
"mcpServers": {
"drisp-browser": {
"command": "npx",
"args": ["@drisp/browser-mcp@latest"]
}
}
}
See the Drisp Browser README for browser modes (user, persistent, isolated) and options.
Why this skill must load before browser MCP calls: without it, browser work reliably produces brittle CSS selectors, narrative prose instead of structured observations, missed state transitions, and shallow page coverage. The selector-capture and state-observation patterns below are what the downstream exploration report, spec generation, and test-writing skills depend on.
Subagent dispatch: when a subagent is dispatched with browser MCP access, this is the first skill it should load — the exploration upstream of spec generation and test writing depends on the patterns below.
Input
Parse the target URL and exploration goal from: $ARGUMENTS
Workflow
- Navigate or recover the right page — use
list_pagesand explicitpage_idwhen session state may be ambiguous - Orient first — read the current state, active region, and visible controls before acting
- Choose the lightest useful tool
- Use page state or
snapshotoutput for quick orientation - Use
findwithlabel,kind, andregionto narrow targets - Use
get_formwhen the task is clearly form-driven - Use
get_elementfor a chosen target, offsets, or selector extraction
- Use page state or
- Act one step at a time — click, type, select, scroll, or drag only as needed to advance the task
- Reacquire state after meaningful changes — after navigation, overlays, search expansion, dialog opening, or large DOM updates, refresh your understanding before reusing old
eids - Inspect forms or extract selectors only when relevant — do this when asked for them or when they materially help complete the task
- Report what you did, what happened, and any selectors or form details that matter
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 425 lines · 213 tokens per session scan A e78681eef391
drisp-browser is a skill published in the GitHub repository drisplabs/browser-mcp (15 stars, last pushed 22d ago), licensed MIT. It adds 213 tokens to every session and 4,358 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
Browser-Use Automation
CLI tool for persistent browser automation with multi-session support, featuring Chromium/Real/Remote browser modes, cookie management, JavaScript execution, and long-running automation workflows.
opencode-browser-plugin
Use the provider-neutral browser runtime through its four MCP or OpenCode tools.
browser-automation
Use this skill when the user asks to interact with a browser, take screenshots, inspect a page, capture network traffic, detect frameworks, click elements, fill forms, record browser sessions, or automate any browser task. Orchestrates Crawlio Browser's 150 browser tools via the search + execute + connecttab interface.
extract
Extract structured data from a page — tables, JSON-LD, repeated patterns. Produces Finding[] evidence on data quality.
robot-training
Use this skill when the user wants to train an agent or robot from a real browser demonstration, record a full human-guided web flow, infer button-to-API contracts, build replay recipes, synthesize OpenAPI from captured traffic, or prepare timed automation runs.
monitor
Monitor a page for structural/content changes with extension-resident, bounded local snapshots that continue without MCP.