Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add redf0x1/camofox-browser --skill camofox-cligit clone --depth 1 https://github.com/redf0x1/camofox-browserWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/redf0x1/camofox-browser/camofox-cli)<a href="https://agentmods.dev/skills/redf0x1/camofox-browser/camofox-cli"><img src="https://agentmods.dev/badge/skills/redf0x1/camofox-browser/camofox-cli.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00077 | $0.01681 |
| Opus 5 | $0.00039 | $0.00840 |
| Sonnet 5 | $0.00015 | $0.00336 |
| Haiku 4.5 | $0.00008 | $0.00168 |
Grade A, and why
camofox-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 198 lines — stays where its author put it; the contents beside it link to each section on GitHub.
1. Overview
This skill documents the full verified CamoFox CLI surface (50 commands), grouped by category.
- Use
--format jsonfor machine-readable output - Most commands auto-resolve the active tab when
[tabId]is omitted - Keep
--user <user>stable across a workflow for consistent session state
2. Core Commands (5)
camofox open <url> [--user <user>] [--viewport <WxH>] [--geo <preset>]
camofox close [tabId] [--user <user>]
camofox snapshot [tabId] [--user <user>]
camofox click <ref> [tabId] [--user <user>]
camofox type <ref> <text> [tabId] [--user <user>]
3. Navigation Commands (4)
camofox navigate <url> [tabId] [--user <user>]
camofox screenshot [tabId] [--path <file>] [--output <file>] [--full-page] [--user <user>]
camofox go-back [tabId] [--user <user>]
camofox go-forward [tabId] [--user <user>]
4. Content Commands (7)
camofox get-text [tabId] [--selector <selector>] [--user <user>]
camofox get-url [tabId] [--user <user>]
camofox get-links [tabId] [--user <user>]
camofox get-tabs [--user <user>]
camofox eval <expression> [tabId] [--user <user>]
camofox wait <condition> [tabId] [--timeout <ms>] [--user <user>]
camofox search <query> [tabId] [--engine <engine>] [--user <user>]
Search engines: google, youtube, amazon, bing, reddit, duckduckgo, github, stackoverflow.
5. Interaction Commands (6)
camofox fill '<assignments>' [tabId] [--user <user>]
camofox scroll [direction] [tabId] [--amount <N>] [--user <user>]
camofox select <ref> <value> [tabId] [--user <user>]
camofox hover <ref> [tabId] [--user <user>]
camofox press <key> [tabId] [--user <user>]
camofox drag <fromRef> <toRef> [tabId] [--user <user>]
Assignment format for fill:
[e1]="value1" [e2]="value2"
6. Console & Error Capture (2)
camofox console [tabId] [--user <user>] [--type <type>] [--limit <N>] [--clear]
camofox errors [tabId] [--user <user>] [--limit <N>] [--clear]
7. Tracing Commands (5)
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 198 lines · 77 tokens per session scan A 41c67a65f83f
camofox-cli is a skill published in the GitHub repository redf0x1/camofox-browser (385 stars, last pushed 25d ago), licensed MIT. It adds 77 tokens to every session and 1,681 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
skill
Anti-detection browser automation MCP skill for OpenClaw agents with 47 tools for navigation, interaction, observation, extraction, downloads, profiles, sessions, and stealth web search.
unicli
Comprehensive guide to Uni-CLI — the open Agent-Computer Interface runtime for real software. Trigger when the user needs to fetch data from websites (Twitter, Bilibili, HackerNews, GitHub, Reddit, Bloomberg, Zhihu, WeChat, and hundreds more); interact with news, finance, social, academic, shopping, or video…
unicli-browser
Control broker-owned hidden, existing-Chrome, or remote browser targets with explicit Agent identity, visibility, profile partitions, and lifecycle.
unicli-smart-search
Route search queries to the best platform via unicli. Use when searching across websites, social media, tech forums, news, finance, shopping, or academic sources.
unicli-operate
Compatibility guide for unicli operate. Prefer unicli browser, which now exposes the same operator surface plus broker/session diagnostics.
playwright-bot-bypass
This skill should be used when the user asks to "bypass bot detection", "avoid CAPTCHA", "stealth browser automation", "undetected playwright", "bypass Google bot check", "rebrowser-playwright", or needs to automate websites that detect and block bots.