Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add eigenlegal/counsel-os --skill browsegit clone --depth 1 https://github.com/eigenlegal/counsel-osWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/eigenlegal/counsel-os/browse)<a href="https://agentmods.dev/skills/eigenlegal/counsel-os/browse"><img src="https://agentmods.dev/badge/skills/eigenlegal/counsel-os/browse/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/eigenlegal/counsel-os/browse"><img src="https://agentmods.dev/badge/skills/eigenlegal/counsel-os/browse.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high YARA Match · line 136 YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).Fix: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise.
- medium Tool Misuse · line 48 Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface.Fix: Override unsafe defaults with secure settings (verify=True, auth required, restrictive permissions). Review and harden all tool configurations.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.03057 |
| Opus 5 | $0.00014 | $0.01528 |
| Sonnet 5 | $0.00006 | $0.00611 |
| Haiku 4.5 | $0.00003 | $0.00306 |
Grade A, and why
browse scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 246 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Browse — Document Extraction & Web Research
You are using a headless browser to access web resources for legal work. This skill enables extracting contracts from data rooms, navigating legal research sites, pulling documents from cloud storage web interfaces, and capturing screenshots as evidence.
Use Cases
- Data room extraction: Pull contracts and exhibits from virtual data rooms (Intralinks, Datasite, Box, etc.)
- Legal research: Navigate case law databases, regulatory agency sites, corporate registries
- Cloud storage access: Download documents from Google Drive, SharePoint, Dropbox web interfaces
- Portal navigation: Access client portals, filing systems, government databases
- Evidence capture: Take full-page screenshots of web pages for litigation or compliance purposes
- Contract import: Extract agreement text from web-based contract management platforms
Setup
Setup is automatic for most installs: browse/bin/find-browse downloads three assets from the plugin's GitHub release on first use (~320MB total, one time) — the prebuilt binary, the playwright runtime packages, and the matching Chromium builds. No bun, node, or build step required. Set COUNSEL_OS_NO_DOWNLOAD=1 to disable the download fallback (airgapped or build-from-source-only environments).
To build from source instead (development, or when no prebuilt binary exists for the platform), run from the plugin root:
cd [counsel-os directory]
bun install
bun run build
bunx playwright install chromium # the headless browser itself
Finding the Binary
The helper script browse/bin/find-browse locates (or installs) the browse binary, in order:
browse/dist/browsein the current git repo (development build)- The active plugin root's
browse/dist/browse ~/counsel-os/browse/dist/browse~/.counsel-os/browse/dist/browse(a previously downloaded prebuilt binary)- Download fallback: the prebuilt
counsel-browse-{platform}from the release matching the plugin VERSION (or latest), installed under the plugin root (or~/.counsel-osif the plugin tree is read-only).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 246 lines · 28 tokens per session scan A 32fe57ed1d49
browse is a skill published in the GitHub repository eigenlegal/counsel-os (24 stars, last pushed yesterday), licensed MIT. It adds 28 tokens to every session and 3,057 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
policy-creation
Guide for adding new enterprise policies to Chromium. Complete guide for policy definitions, pref mapping, and writing tests.
privacy
Action-oriented guidelines for privacy by design, data minimization, third-party audits, and modern browser privacy APIs. Use this skill when dealing with user data, cookies, tracking, third-party scripts, or browser privacy APIs.
e-tax
A guide for entering Japanese tax-return data into the National Tax Agency's online tax-return preparation site, known as e-Tax, using browser automation.
legal-iros-registry-automation
A guide for helping automate bulk requests for company or property registry certificates from South Korea’s Supreme Court Internet Registry Office (IROS). The user handles login, authentication, and payment in the browser, while the workflow assists with collecting, saving, and reporting the documents.
browser-automation-expert
Drive a real browser to navigate, extract data and complete flows on sites without an API: scraping, crawling, authentication, dynamic content and anti-bot handling. Use when the user mentions web scraping, crawling, browser automation, Puppeteer or headless Chrome, wants data pulled from a website, needs a login or…
capturar-sessao-pje
Captura sessao do PJE via Chrome MCP com login automatico. Use antes de baixar processos.