What is browser-reset?

A browser-control repair tool for changing the browser connection, replacing its access token, or removing the connection. It guides you through the browser extension steps and asks for approval before destructive changes.

Use it to rotate a Playwright browser-extension token, switch between browsers such as Chrome and Edge, or fully remove the browser-control setup.

It helps recover browser automation after a token, browser choice, or connection setup becomes invalid. It also reduces the risk of accidentally removing the connection.

browser-reset — Skill for Claude Code and Codex by jmagly/aiwg

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add jmagly/aiwg --skill browser-reset

Clone the repo

git clone --depth 1 https://github.com/jmagly/aiwg

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/jmagly/aiwg/browser-reset/github.svg)](https://agentmods.dev/skills/jmagly/aiwg/browser-reset)

Your own site

<a href="https://agentmods.dev/skills/jmagly/aiwg/browser-reset"><img src="https://agentmods.dev/badge/skills/jmagly/aiwg/browser-reset/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/jmagly/aiwg/browser-reset"><img src="https://agentmods.dev/badge/skills/jmagly/aiwg/browser-reset.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 55 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 929 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 4 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium Rogue Agent · line 42
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
medium Output Handling · line 73
Output size or generation rate is not bounded. Unbounded output enables denial-of-service through resource exhaustion, log flooding, or context-window stuffing.

Fix: Set explicit limits on output length, generation count, and rate. Use max_tokens and truncation to prevent unbounded output.
medium Agent Snooping · line 91
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
medium Agent Snooping · line 92
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00055	$0.00929
Opus 5.5	$0.00022	$0.00372
Sonnet 5.5	$0.00011	$0.00186
Haiku 4.5	$0.00006	$0.00093

Measured 1mo ago against content hash 965bf8fb92d3, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

browser-reset scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agentic/code/addons/browser-control/skills/browser-reset/SKILL.md · 95 lines

How it starts

The opening of the file, as written. The whole thing — 95 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Browser Reset Skill (DRAFT)

Status: DRAFT — scaffolded from PoC. Implementation pending Inception outputs.

Purpose

Recover from misconfiguration, rotate the per-install token, switch browsers, or fully tear down. Every destructive operation gated by human-authorization.

When This Skill Applies

User regenerated the token in the extension UI
User switching from Chrome to Edge (or vice versa)
User wants to fully uninstall browser-control wiring
browser-doctor reports irrecoverable state

Modes

Mode 1: Rotate token

Show current setup (browser, token-file path, registry entry — token redacted)
Confirm intent (AskUserQuestion)
Walk user through extension regeneration:
- Click extension icon in target browser
- Click "Regenerate token" (UI label may vary by extension version)
- Copy new token
Capture new token via interactive prompt
Atomic write to ~/.config/playwright-mcp/token (mode preserved)
Update AIWG MCP registry env block: aiwg mcp update playwright --env "PLAYWRIGHT_MCP_EXTENSION_TOKEN=<new>"
Re-inject: aiwg mcp inject --provider <p> --servers playwright
Probe verify; report pass/fail

Mode 2: Switch browser

Show current browser
Detect alternatives (same logic as browser-setup)
Confirm switch (AskUserQuestion)
Walk user through extension install in new browser (if not already installed there)
Capture token from the new browser's extension
Update token file
Update AIWG MCP registry (no path changes, just env)
Re-inject
Probe verify

Note: this mode does not remove the old browser's extension or token. User can do that manually; we don't touch user's other browsers without explicit authorization.

Mode 3: Tear down

Show what will be removed (registry entry, provider injection, token file path)
Explicit human-authorization gate (destructive)
aiwg mcp remove playwright
Provider config: remove playwright from mcpServers (we wrote it, we own removal)
Optionally delete ~/.config/playwright-mcp/token (prompt)
Optionally delete .aiwg/browser-allowlist.yaml (prompt)
Note: AIWG never uninstalls the browser extension itself — that's a user action in the browser UI

Read the full file on GitHub · 95 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 95 lines · 55 tokens per session scan A 965bf8fb92d3

Subscribe to this mod's changes

browser-reset is a skill published in the GitHub repository jmagly/aiwg (224 stars, last pushed today), licensed MIT. It adds 55 tokens to every session and 929 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.

Browser automation Claude Code Multi-Agent Workflow Automation developer-tools prompt-engineering sdlc

cue

Writing and producing product videos: scripts, storyboards, narration, and reproducible Playwright demo recordings. Use for explainers, onboarding, feature walkthroughs, multi-aspect exports, captions, and video quality checks.

simota/agent-skills · 46 tokens

vector

Automating browsers via Playwright and Chrome DevTools for data collection, form interaction, screenshot capture, and network monitoring. Task completion focus (vs Voyager for E2E testing).

simota/agent-skills · 38 tokens

agent-reach-wrapper

Thin wrapper around Panniantong/Agent-Reach for live web, YouTube transcripts, RSS, GitHub, Bilibili, Exa search, and optional login-state platforms (X, Reddit, Facebook, Instagram, Xiaohongshu, LinkedIn). Triggered by agent-reach, reach this URL, YouTube transcript, Reddit thread, Bilibili, Xiaohongshu, RSS feed, or…

Stijnman/grok-custom-skills · 138 tokens

browser-reset