drisp-browser

drisp-browser is a skill for Claude Code from drisplabs/browser-mcp. It costs 213 tokens per session (4,358 once invoked), scanned A, original, MIT.

A browser-control workflow for opening and operating real websites in a browser. It can inspect pages and capture selectors, which are references used to target page elements in automation.

In plain words
What is it for?
Use it to inspect websites, complete multi-step flows, test forms, add items to carts, and record reliable automation selectors.
Why use it?
It helps test live or staging pages through the same kinds of actions a user takes, including navigation, clicking, typing, and form submission. It also supports checking the resulting page state.

Skill for Claude Code

Written for Claude Code: user-invocable in frontmatter. Also seen: mentions subagents.

Part of the drisp-browser plugin — 1 skill, 1 command, 1 MCP server shipped together

Good fit Use it to inspect websites, complete multi-step flows, test forms, add items to carts, and record reliable automation selectors.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/drisplabs/browser-mcp/drisp-browser
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add drisplabs/browser-mcp --skill drisp-browser
Clone the repo
git clone --depth 1 https://github.com/drisplabs/browser-mcp

Made for: Claude Code.

Or install drisp-browser, the plugin that ships this one along with the rest of its 1 skill, 1 command, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for drisp-browser

README.md
[![agentmods](https://agentmods.dev/badge/skills/drisplabs/browser-mcp/drisp-browser.svg)](https://agentmods.dev/skills/drisplabs/browser-mcp/drisp-browser)
Your own site
<a href="https://agentmods.dev/skills/drisplabs/browser-mcp/drisp-browser"><img src="https://agentmods.dev/badge/skills/drisplabs/browser-mcp/drisp-browser.svg" alt="Measured on agentmods" height="20"></a>
Per session 213 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,358 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 4 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Prompt Injection · line 135
    Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
    Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
  • high Prompt Injection · line 184
    Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
    Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
  • high Prompt Injection · line 320
    Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
    Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
  • medium MCP Rug Pull · line 26
    npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
    Fix: Pin the version: npx @scope/[email protected]
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00213 $0.04358
Opus 5 $0.00106 $0.02179
Sonnet 5 $0.00043 $0.00872
Haiku 4.5 $0.00021 $0.00436

Measured 8d ago against content hash e78681eef391, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

drisp-browser scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/drisp-browser/SKILL.md · 425 lines

How it starts

The opening of the file, as written. The whole thing — 425 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Drisp Browser Guide

Use this skill to open live web pages, carry out actions, move through multi-step flows, validate page state, and capture selectors for automation.

Common uses:

  • Review a live page or multi-step flow
  • Click through navigation, buttons, dialogs, and other actions
  • Fill, submit, or inspect forms and validation states
  • Add products to cart or complete other in-page actions
  • Capture reliable Playwright selectors for key elements

Setup

This skill drives the Drisp Browser (@drisp/browser-mcp) MCP server — installing the skill does not install that server. If the mcp__drisp-browser__* tools aren't available, add the server first:

claude mcp add drisp-browser -- npx @drisp/browser-mcp@latest

For Claude Desktop / Cursor / VS Code, register it under the key drisp-browser:

{
  "mcpServers": {
    "drisp-browser": {
      "command": "npx",
      "args": ["@drisp/browser-mcp@latest"]
    }
  }
}

See the Drisp Browser README for browser modes (user, persistent, isolated) and options.

Why this skill must load before browser MCP calls: without it, browser work reliably produces brittle CSS selectors, narrative prose instead of structured observations, missed state transitions, and shallow page coverage. The selector-capture and state-observation patterns below are what the downstream exploration report, spec generation, and test-writing skills depend on.

Subagent dispatch: when a subagent is dispatched with browser MCP access, this is the first skill it should load — the exploration upstream of spec generation and test writing depends on the patterns below.

Input

Parse the target URL and exploration goal from: $ARGUMENTS

Workflow

  1. Navigate or recover the right page — use list_pages and explicit page_id when session state may be ambiguous
  2. Orient first — read the current state, active region, and visible controls before acting
  3. Choose the lightest useful tool
    • Use page state or snapshot output for quick orientation
    • Use find with label, kind, and region to narrow targets
    • Use get_form when the task is clearly form-driven
    • Use get_element for a chosen target, offsets, or selector extraction
  4. Act one step at a time — click, type, select, scroll, or drag only as needed to advance the task
  5. Reacquire state after meaningful changes — after navigation, overlays, search expansion, dialog opening, or large DOM updates, refresh your understanding before reusing old eids
  6. Inspect forms or extract selectors only when relevant — do this when asked for them or when they materially help complete the task
  7. Report what you did, what happened, and any selectors or form details that matter

Read the full file on GitHub · 425 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 425 lines · 213 tokens per session scan A e78681eef391

Subscribe to this mod's changes

drisp-browser is a skill published in the GitHub repository drisplabs/browser-mcp (15 stars, last pushed 22d ago), licensed MIT. It adds 213 tokens to every session and 4,358 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.