Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add empir3hq/empir3-bridge --skill control-my-browsergit clone --depth 1 https://github.com/empir3hq/empir3-bridgeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/empir3hq/empir3-bridge/control-my-browser)<a href="https://agentmods.dev/skills/empir3hq/empir3-bridge/control-my-browser"><img src="https://agentmods.dev/badge/skills/empir3hq/empir3-bridge/control-my-browser/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/empir3hq/empir3-bridge/control-my-browser"><img src="https://agentmods.dev/badge/skills/empir3hq/empir3-bridge/control-my-browser.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00090 | $0.00816 |
| Opus 5.5 | $0.00036 | $0.00326 |
| Sonnet 5.5 | $0.00018 | $0.00163 |
| Haiku 4.5 | $0.00009 | $0.00082 |
Grade A, and why
control-my-browser scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 70 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Control my browser
The Bridge runs on the user's computer and owns a dedicated Chrome profile with
the user's logins. Every browser_* tool acts on that Chrome. Work in short
loops: observe, act once, observe again.
1. Check before you act
browser_status— the Bridge and its Chrome must report running. The MCP server starts the Bridge on the first call if it is installed but stopped; if the result still says it is not running, tell the user to start Empir3 Bridge and stop.bridge_safety_status— read-only is the default. Clicking and typing need the browser interact permission; JavaScript needs eval; recordings need the recording permission. If something you need is off, say which switch to turn on in the Bridge console athttp://localhost:3006/console(Permissions pane). Never look for another way around a disabled tool: the refusal is the correct result.- Loopback, private-network and
file:URLs are refused unless the user has approved that exact origin under Local & private origins. Say so instead of retrying.
2. The loop
browser_tab_state— see which tab is agent-controlled and which the user is looking at. Preferbrowser_tab_openwith the URL for independent work; it returns the exact tab target and leaves the user's tabs alone.browser_navigatemoves the current agent tab instead.browser_snapshot— returns refs such ase3_0for interactive elements. Refs belong to that snapshot only.- Act once:
browser_click_ref,browser_type_ref(ref + text),browser_press(Enter,Tab,Control+a),browser_scroll. - Verify: a fresh
browser_snapshot,browser_textfor the readable page, orbrowser_screenshotwhen layout matters. Then repeat from step 2 — refs from before the action are stale.
A tab id proves the tab exists, not that the page has loaded. If an observation
comes back empty during navigation, wait briefly and observe again. Do not
repeat a click, submission or typed text after an uncertain result; read
bridge_action_log to see what actually happened.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 70 lines · 90 tokens per session scan A 3f812b88b56f
control-my-browser is a skill published in the GitHub repository empir3hq/empir3-bridge (3 stars, last pushed yesterday), licensed MIT. It adds 90 tokens to every session and 816 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-19.
Other skills, from other repositories
unicli
Comprehensive guide to Uni-CLI — the open Agent-Computer Interface runtime for real software. Trigger when the user needs to fetch data from websites (Twitter, Bilibili, HackerNews, GitHub, Reddit, Bloomberg, Zhihu, WeChat, and hundreds more); interact with news, finance, social, academic, shopping, or video…
unicli-smart-search
Route search queries to the best platform via unicli. Use when searching across websites, social media, tech forums, news, finance, shopping, or academic sources.
unicli-browser
Control broker-owned hidden, existing-Chrome, or remote browser targets with explicit Agent identity, visibility, profile partitions, and lifecycle.
unicli-operate
Compatibility guide for unicli operate. Prefer unicli browser, which now exposes the same operator surface plus broker/session diagnostics.
unicli-usage
Command reference for Uni-CLI — the open Agent-Computer Interface runtime for real software. Use when you need to discover, run, or pipe unicli commands; or before using raw browser tools, legacy OpenCLI, curl, or computer-use for web, browser, desktop, macOS, local-tool, external-CLI, or adapter-repair tasks.
unicli-hermes
Use Uni-CLI to interact with the current website, desktop-app, and system-tool catalog. Trigger when: user asks to check a website, fetch data, control a desktop app, or interact with social media, news, finance, or AI platforms.