Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add redf0x1/camofox-browser --skill camofox-cligit clone --depth 1 https://github.com/redf0x1/camofox-browserWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/redf0x1/camofox-browser/camofox-cli)<a href="https://agentmods.dev/skills/redf0x1/camofox-browser/camofox-cli"><img src="https://agentmods.dev/badge/skills/redf0x1/camofox-browser/camofox-cli/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/redf0x1/camofox-browser/camofox-cli"><img src="https://agentmods.dev/badge/skills/redf0x1/camofox-browser/camofox-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00077 | $0.01681 |
| Opus 5.5 | $0.00031 | $0.00672 |
| Sonnet 5.5 | $0.00015 | $0.00336 |
| Haiku 4.5 | $0.00008 | $0.00168 |
Grade A, and why
camofox-cli scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 198 lines — stays where its author put it; the contents beside it link to each section on GitHub.
1. Overview
This skill documents the full verified CamoFox CLI surface (50 commands), grouped by category.
- Use
--format jsonfor machine-readable output - Most commands auto-resolve the active tab when
[tabId]is omitted - Keep
--user <user>stable across a workflow for consistent session state
2. Core Commands (5)
camofox open <url> [--user <user>] [--viewport <WxH>] [--geo <preset>]
camofox close [tabId] [--user <user>]
camofox snapshot [tabId] [--user <user>]
camofox click <ref> [tabId] [--user <user>]
camofox type <ref> <text> [tabId] [--user <user>]
3. Navigation Commands (4)
camofox navigate <url> [tabId] [--user <user>]
camofox screenshot [tabId] [--path <file>] [--output <file>] [--full-page] [--user <user>]
camofox go-back [tabId] [--user <user>]
camofox go-forward [tabId] [--user <user>]
4. Content Commands (7)
camofox get-text [tabId] [--selector <selector>] [--user <user>]
camofox get-url [tabId] [--user <user>]
camofox get-links [tabId] [--user <user>]
camofox get-tabs [--user <user>]
camofox eval <expression> [tabId] [--user <user>]
camofox wait <condition> [tabId] [--timeout <ms>] [--user <user>]
camofox search <query> [tabId] [--engine <engine>] [--user <user>]
Search engines: google, youtube, amazon, bing, reddit, duckduckgo, github, stackoverflow.
5. Interaction Commands (6)
camofox fill '<assignments>' [tabId] [--user <user>]
camofox scroll [direction] [tabId] [--amount <N>] [--user <user>]
camofox select <ref> <value> [tabId] [--user <user>]
camofox hover <ref> [tabId] [--user <user>]
camofox press <key> [tabId] [--user <user>]
camofox drag <fromRef> <toRef> [tabId] [--user <user>]
Assignment format for fill:
[e1]="value1" [e2]="value2"
6. Console & Error Capture (2)
camofox console [tabId] [--user <user>] [--type <type>] [--limit <N>] [--clear]
camofox errors [tabId] [--user <user>] [--limit <N>] [--clear]
7. Tracing Commands (5)
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 198 lines · 77 tokens per session scan A 41c67a65f83f
camofox-cli is a skill published in the GitHub repository redf0x1/camofox-browser (428 stars, last pushed 1mo ago), licensed MIT. It adds 77 tokens to every session and 1,681 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
skill
Anti-detection browser automation MCP skill for OpenClaw agents with 47 tools for navigation, interaction, observation, extraction, downloads, profiles, sessions, and stealth web search.
camoufox-cli
Anti-detect browser automation CLI & Skills for AI agents. Use when the user needs to interact with websites with bot detection, CAPTCHAs, or anti-bot blocks, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task that requires…
navvi
Use when asked to scrape a site, automate a website flow, log in and click through pages, or when you are about to write a Playwright script to extract data. Compile it once so you never drive it again.
web-crawl
Get data from websites with the least necessary complexity. Use for quick lookups, visible-page extraction, search results, tables, pagination, detail-page traversal, downloadable files (Excel/CSV/PDF/ZIP), embedded page state, internal JSON/XHR APIs, bulk collection, reusable crawler generation, and delivery in any…
vibatchium
Drive a real stealth Chrome when plain HTTP/WebFetch won't work — sites behind Cloudflare/DataDome/PerimeterX, JavaScript SPAs, logged-in or authenticated pages, multi-step form/checkout flows, and parallel multi-site automation. Use whenever the user wants to browse, scrape, research, screenshot, log into, or click…
fortress-stealth-browser
Use when a web fetch is blocked — Cloudflare, DataDome, PerimeterX, Akamai, a 403/429, a CAPTCHA/"Press & Hold", "Access denied", an empty JavaScript shell, or a page whose data only appears after client-side rendering. Drives a real recompiled-Chromium stealth engine (Fortress) via the Fortress MCP to fetch, extract…