Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/stickerdaniel/browserjack/setupnpx skills add stickerdaniel/browserjack --skill setupgit clone --depth 1 https://github.com/stickerdaniel/browserjackWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00013 | $0.00157 |
| Opus 5 | $0.00006 | $0.00078 |
| Sonnet 5 | $0.00003 | $0.00031 |
| Haiku 4.5 | $0.00001 | $0.00016 |
Grade A, and why
setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Explain the trust boundary before installation: the bridge can control authenticated browser sessions, uses undocumented local OpenAI interfaces, and is currently an experimental macOS developer preview.
For a published release, install an exact reviewed version:
npx --yes [email protected] setup --client plugin --scope user
For a source checkout, run:
npm run build
node dist/cli.js setup --client plugin --scope user
Do not use @latest for a reviewed or reproducible installation. Do not enable global all-sites, file-upload, file-URL, or raw node_repl approval as part of setup.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 22 lines · 13 tokens per session scan A f4eca5b459eb
setup is a skill published in the GitHub repository stickerdaniel/browserjack (2 stars, last pushed 3d ago), licensed MIT. It adds 13 tokens to every session and 157 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
fill-form
Fill out web forms with human-like anti-detection typing. Applications, registration, checkout, surveys, contact forms. Use when: "fill out form", "complete application", "register on", "submit form", "fill in details", "checkout", "sign up on".
macos-harness
Control a whole Mac from one persistent Python session with screenshots, PID-targeted input, an animated virtual pointer, targeted Apple Accessibility, Apple Events, Browser Harness CDP, and filesystem access. Use for native, Electron, browser, dialog, file, or cross-app tasks without moving the physical cursor or…
Agent Browser Automation
Fast Rust-based headless browser automation CLI with Node.js fallback for AI agents, featuring navigation, clicking, typing, snapshots, and structured commands optimized for agent workflows.
host-computer-use
Beta desktop control through the connected A0 CLI host. Use for the user's host/local computer screenshots, screen inspection, menus, native app UI, OS-level clicking, scrolling, typing, or checking computeruseremote status. Use instead of linux-desktop for host/local machine control. Do not use for ordinary browser…
video-gen
Video creation and local composition: join existing clips or render mixed image/video timelines with videocompose, generate one AI clip with videogenerate, or make a multi-shot AI film with videorender. Use when the deliverable is a video. Do NOT use for still images (use pi-image-gen directly).
install-shellby-mcp
Install and verify Shellby MCP on a Mac using terminal access only. Use when a user asks an agent to install, set up, configure, or finish a new Shellby MCP installation from this repository.