Borrowing it
Nothing to install: this file belongs to galiprandi/job-seeker. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/galiprandi/job-seeker/main/.agents/skills/browser-automation/SKILL.mdgit clone --depth 1 https://github.com/galiprandi/job-seekerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/galiprandi/job-seeker/browser-automation)<a href="https://agentmods.dev/skills/galiprandi/job-seeker/browser-automation"><img src="https://agentmods.dev/badge/skills/galiprandi/job-seeker/browser-automation/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/galiprandi/job-seeker/browser-automation"><img src="https://agentmods.dev/badge/skills/galiprandi/job-seeker/browser-automation.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high YARA Match · line 17 YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).Fix: Remove the malware payload or compromised file entirely. Investigate how it entered the skill and audit all other artifacts for additional indicators of compromise.
- medium MCP Rug Pull · line 37 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 96 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium Prompt Injection · line 151 Subtle instructions detected that may alter agent decision-making or introduce hidden biases.Fix: Review content for implicit steering or bias. Ensure instructions are explicit and align with the skill's stated purpose.
- medium Memory Poisoning · line 170 Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.Fix: Implement context-window management that detects and rejects padding or stuffing attempts. Prioritize system instructions over user-injected content.
- medium Rogue Agent · line 222 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00046 | $0.08144 |
| Opus 5.5 | $0.00018 | $0.03258 |
| Sonnet 5.5 | $0.00009 | $0.01629 |
| Haiku 4.5 | $0.00005 | $0.00814 |
Grade A, and why
browser-automation scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **Site returns 403 on curl/HTTP but works in browser:** Sites like Reddit block non-browser User-Agents on HTTP APIs (JSON, RSS) but do NOT block the agent-browser session in headed mode. If curl returns 403, do NOT as How it starts
The opening of the file, as written. The whole thing — 522 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Browser Automation
Control a dedicated Chrome browser via agent-browser from the terminal. Token-efficient: semantic snapshots expose interactive elements as stable refs (@eN) instead of verbose accessibility trees or fragile CSS selectors.
Purpose
Operate a real browser session: navigate, click, fill forms, extract data, and call internal site APIs using the browser's cookies. Covers generic browser operations plus site-specific guides (Gmail, LinkedIn, Teams, Jira, Teamtailor, Humand.co) loaded on demand.
Use for: automating web apps that require login, scraping authenticated sites, filling forms, extracting data, navigating SPAs, job search automation, inbox management.
Do NOT use for: desktop apps, mobile emulators, API-only integrations without a browser, or captcha solving (defer to the user).
Command hierarchy (semantic-first)
Choose commands in this order. Each level down is a fallback, not a preference:
- App/site keyboard shortcuts —
press,keyboard type(see KEYBOARD FIRST below) - Semantic locators —
find role|text|label|placeholder <value> <action>(e.g.find role button click --name "Enviar") - Snapshot refs —
snapshot -i(interactive elements only) →click @eN/fill @eN - eval / raw JS — LAST RESORT only. Fragile: pages expose decoy elements (e.g. Gmail shows TWO
contenteditableboxes — the real body and a Gemini "Describe tu mensaje" field; a.pop()on visible editors pasted into the wrong one and sent blank emails). If you must eval, target by exactaria-label/data-testid, never by position or "last visible".
KEYBOARD FIRST (non-negotiable)
Keyboard navigation is the DEFAULT. Clicks are the FALLBACK. This is not a preference — it is the core operating principle of this skill.
Why keyboard over clicks
- Stability: Keyboard shortcuts don't depend on CSS selectors, DOM structure, or
[ref=eXXX]identifiers that change on every page mutation. A shortcut that works today will work tomorrow. A selector that works today may break tonight. - Token efficiency:
press Enteris 1 command.snapshot+find "Send"+click e42is 3 commands and a huge snapshot. Shortcuts skip the snapshot-find-click pipeline entirely. - Reliability: Shortcuts fire the app's intended action handler directly. Clicks on synthetic DOM elements may not trigger the right event sequence (React apps, custom widgets, shadow DOM).
- Speed: One keypress vs. snapshot + parse + find + click. Less latency, fewer failure points.
What ships with it
57 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/agent-browser.md 4.6 KB
- references/api-capture.md 1.8 KB
- references/ats-patterns.md 4.5 KB
- references/custom-combobox.md 5.0 KB
- references/efficiency-patterns.md 2.6 KB
- references/golden-rules.md 5.7 KB
- references/key-patterns.md 4.4 KB
- references/network-console.md 1.2 KB
- references/parallel-agents.md 6.2 KB
- references/profile-management.md 6.3 KB
- references/token-extraction.md 2.8 KB
- scripts/agent-browser.template.json 332 B
- scripts/browser.js 16 KB runs code
- scripts/README.md 4.3 KB
- scripts/teams.js 7.1 KB runs code
- scripts/test-find-guide.js 6.3 KB runs code
- SETUP.md 3.0 KB
- sites/afip_gob_ar/guide.md 9.0 KB
- sites/app_web3forms_com/guide.md 7.1 KB
- sites/buk_co/guide.md 1.5 KB
- sites/calendar_google_com/calendar-deeplink.md 1.9 KB
- sites/calendly_com/guide.md 1001 B
- sites/careers_epam_com/guide.md 4.4 KB
- sites/CONTRIBUTING.md 9.1 KB
- sites/dash_cloudflare_com/guide.md 7.7 KB
- sites/discord_com/guide.md 9.9 KB
- sites/discord_com/login-flow.md 3.2 KB
- sites/docs_google_com/guide.md 7.3 KB
- sites/facebook_com/guide.md 9.8 KB
- sites/gmail_com/guide.md 36 KB
- sites/google_com/guide.md 1.1 KB
- sites/google_com/login-flow.md 3.3 KB
- sites/google_com/maps-guide.md 6.2 KB
- sites/google_maps_com/guide.md 5.7 KB
- sites/groq_com/signup-apikey.md 6.6 KB
- sites/humand_co/guide.md 6.9 KB
- sites/jira_com/guide.md 11 KB
- sites/LEARN.md 5.4 KB
- sites/linkedin_com/guide.md 27 KB
- sites/linkedin_com/outreach-strategy.md 1.2 KB
- sites/linkedin_com/posting.md 14 KB
- sites/linkedin_com/voyager-api.md 8.1 KB
- sites/onstrider_com/draftjs-editor-fill.md 2.3 KB
- sites/onstrider_com/guide.md 11 KB
- sites/onstrider_com/react-autocomplete-inputs.md 4.0 KB
- sites/outlook_office_com/calendar-deeplink.md 2.2 KB
- sites/outlook_office_com/guide.md 14 KB
- sites/property_directory/guide.md 3.7 KB
- sites/reddit_com/guide.md 16 KB
- sites/teams_com/guide.md 10 KB
- sites/teamtailor_com/guide.md 6.5 KB
- sites/vea_com_ar/guide.md 8.8 KB
- sites/whatsapp_com/guide.md 20 KB
- sites/whatsapp_com/login-flow.md 3.0 KB
- sites/whatsapp_com/message-extraction.md 5.7 KB
- sites/whatsapp_com/voice-notes.md 6.7 KB
- sites/workatastartup_com/guide.md 1.5 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +31 lines · +4 tokens per session scan C → A f4ad96e0b70f
- 18d ago Changed · +1 lines scan A → C dc620b070006
- 20d ago Changed · +29 lines 739e9f0b0109
- 1mo ago Changed · +94 lines 4ec8cab779c3
- 1mo ago First seen · 367 lines · 42 tokens per session scan A a8df12976a0c
browser-automation is a skill published in the GitHub repository galiprandi/job-seeker (58 stars, last pushed 2d ago), licensed MIT. It adds 46 tokens to every session and 8,144 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
job-search
A job-search skill that searches current public listings using an existing résumé and job requirements, checks sources, removes duplicates, and compares roles.
trackly-apply
Help users finish Trackly Apply setup, resolve missing profile or resume requirements, and fill user-approved applications in a controlled browser before manual review. Use when the user asks to set up Apply, fix an incomplete profile, or fill, continue, or review an approved application.
ai-dev-jobs-mcp
Search indexed AI and ML jobs, inspect listings and employers, match roles, and view salary and market stats via AI Dev Jobs MCP.
job-application-agent
JobAppAgent, the open-source AI job application agent. Finds, evaluates, fills, submits (only with the candidate's approval), and tracks a candidate's own job applications using a verified resume, evidence-based targeting, secure local profile storage, and browser automation. Use only when the user names JobAppAgent…
Cold Email Writer
Write personalized cold outreach emails to hiring managers and founders - specific, human, not a pitch deck.
solve-captcha
Solve a CAPTCHA on the current browser tab - free checkbox/text paths first, then a configured token service for image challenges. Returns solved or unsolved for the caller to fall back.