Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add EndymionLee/PilotBrowseMCP --skill website-explorergit clone --depth 1 https://github.com/EndymionLee/PilotBrowseMCPWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/endymionlee/pilotbrowsemcp/website-explorer)<a href="https://agentmods.dev/skills/endymionlee/pilotbrowsemcp/website-explorer"><img src="https://agentmods.dev/badge/skills/endymionlee/pilotbrowsemcp/website-explorer.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.00431 |
| Opus 5 | $0.00009 | $0.00216 |
| Sonnet 5 | $0.00003 | $0.00086 |
| Haiku 4.5 | $0.00002 | $0.00043 |
Grade A, and why
website-explorer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- website-explorer — 100% identical, 0 lines differ
What it actually says
Website Capability Learner
Explore websites, understand interaction capabilities, discover APIs, and generate reusable automation manuals.
Core Rules
- Record capabilities, not selectors
- API first, DOM second
- Explore incrementally
- Save knowledge into structured manual
Phases
| Phase | File | Purpose |
|---|---|---|
| 1. Exploration | exploration.md | Trigger behaviors, discover page structure |
| 2. API Discovery | api-discovery.md | Extract clean API definitions from network events |
| 3. Capability Learning | capability-learning.md | Bind API + automation into capability model |
| 4. Execution | execution.md | Execute capabilities, API first, workflow fallback |
| 5. Evolution | evolution.md | Improve implementations over time |
| 6. Batch Tasks | batch-tasks.md | Python scripts for bulk work |
| 7. Security Checks | sql-injection.md | SQL injection detection and security checklist management |
| 8. JS Reverse | js-reverse.md | Front-end JS analysis and encrypted API capability models |
Validation
Before saving any manual file, run workflow_validate_manual to check format compliance. See manual-schema.md for all schemas.
Output
website-manuals/<site>/
README.md # Root index
pages/ # Page interaction models
navigation/ # Navigation paths
workflows/
README.md # Workflow index
flows/ # Workflow JSON files
apis/
README.md # API index
endpoints/ # API JSON files
Every directory: index README + detail subdirectory. See: manual-schema.md
What ships with it
10 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 50 lines · 17 tokens per session scan A b0d9e9ad0ce1
website-explorer is a skill published in the GitHub repository EndymionLee/PilotBrowseMCP (100 stars, last pushed 1mo ago), licensed MIT. It adds 17 tokens to every session and 431 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
signed-in-browser
Drive the browser the user is already signed into, instead of a cold automation profile. Use when a task lives behind a login — a dashboard, an admin console, an internal tool, a ticket queue, a bank or billing page, webmail, a social account — or when a scripted login is failing on SSO, MFA, CAPTCHA or bot detection.…
post-to-hacker-news
Submit to Hacker News, including Show HN, by driving a signed-in browser. Use when launching a product, tool or MCP server, or when a submission needs its customary author comment. Covers the title rules, when a Show HN is allowed, the url-or-text choice, and how to tell a real submission from a silent failure.
chrome-bridge
Recipes for the user's real, logged-in Chrome through the chrome-bridge MCP tools and the zero-token chrome-bridge CLI. Use whenever the user wants to test, debug, audit, compare or automate something in a browser — a form "until the email arrives", a checkout with a test card, a pixel/GTM check, a cookie-banner…
chrome-actuator
Drive the user's real Chrome from the agent. Use when browsing, clicking, filling forms, or verifying a web UI in the already-logged-in Chrome profile. Compatible with Grok Build. Not affiliated with xAI.
neo
Browse websites, read web pages, interact with web apps, call website APIs, and automate web tasks. Use Neo when: user asks to check a website, read a web page, post on social media (Twitter/X), interact with any web app, look up information on a specific site, scrape data from websites, automate browser tasks, or…
aipex-browser
AI-powered browser automation using the AIPex Chrome Extension via MCP bridge. Use this skill when the agent needs to control a Chrome browser — navigating pages, clicking elements, filling forms, capturing screenshots, managing tabs, or downloading content — by connecting to the AIPex MCP bridge.