跳到主要内容
知仓学习社ZHICANG

browser-mate

Use when automating a real, logged-in Chrome WITHOUT disturbing the user's open tabs — e.g. authenticated sessions like ChatGPT, LinkedIn, or any si…

写文件读凭据执行命令联网严重 0 · 高危 4glebis/claude-skills

它会碰到什么

扫了多少4 个文本文件,15 KB
它会碰到什么写文件读凭据执行命令联网
命中总数9 处
命中统计严重 0 · 高 4 · 中 4 · 低 1
逐条看命中(4 条严重或高危)
  • references/agent-browser.md:57fs-destructive
    - After upgrading agent-browser: `pkill -f agent-browser; rm -rf ~/.agent-browser/sockets/`
  • scripts/browser.py:33cred-envread
    CONFIG = os.path.expanduser(os.environ.get("BROWSER_MATE_CONFIG",
  • scripts/browser.py:104exec-spawn
    out = subprocess.run(["ps", "-ax", "-o", "pid=,command="],
  • scripts/browser.py:139exec-spawn
    subprocess.Popen(args, start_new_session=True,

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

browser-mate

Non-destructive Chrome automation. The problem it solves: to attach a CDP/agent-browser

session, Chrome must run with --remote-debugging-port. The real-browser skill achieves

this by quitting Chrome Beta first, destroying the user's open tabs. browser-mate

instead runs a dedicated debug Chrome instance (its own --user-data-dir + port) that

coexists with the user's main browser — Chrome permits concurrent instances when the

data dirs differ, so no quit is needed.

The one invariant (never violate)

Never quit, pkill, or osascript quit any browser. The skill only ever launches a

new dedicated instance or reuses an existing one. The single stop path sends SIGTERM only

to a process matched by BOTH our dedicated user_data_dir AND our debug port — never the

user's browser.

Usage

# Ensure a profile's debug Chrome is up (launch or reuse); prints the PORT on stdout
PORT=$(python3 scripts/browser.py chatgpt)

# Then drive it with agent-browser (always pass --cdp $PORT). See references/agent-browser.md
SID=$(LC_ALL=C tr -dc 'a-z0-9' < /dev/urandom | head -c 6)
agent-browser --cdp $PORT --session $SID open "https://chatgpt.com/"
agent-browser --cdp $PORT --session $SID snapshot -i

Other subcommands:

python3 scripts/browser.py list              # configured profiles
python3 scripts/browser.py status [profile]  # up/down
python3 scripts/browser.py stop chatgpt      # SIGTERM OUR instance only (graceful)

For the full agent-browser command set (click, fill, upload, screenshot, reliability,

upgrade gotchas), read references/agent-browser.md.

Profiles

Config: ~/.config/browser-mate/profiles.json (auto-created from assets/profiles.example.json

on first run). Each profile:

{ "default": "automation",
  "profiles": {
    "automation": { "binary": "<chrome binary>", "user_data_dir": "~/.browser-mate/automation", "port": 9222 },
    "chatgpt":     { "binary": "<chrome binary>", "user_data_dir": "~/.browser-mate/chatgpt", "port": 9223, "default_url": "https://chatgpt.com/" }
  } }
  • Each profile keeps its own login state — log in once per profile, it persists.
  • Add a profile by editing the JSON: pick a unique port and a dedicated user_data_dir

(the launcher validates uniqueness and refuses dirs that point at the user's real Chrome

profile).

Authentication

Cannot enter passwords (and must not). For a first-time login, launch the profile, then ask

the user to log in manually in that window once; the session persists in the profile's

user_data_dir for all future runs.

Safety & limits

  • Loopback only. The debug port binds to 127.0.0.1 (Chrome default). CDP has no auth

— anyone local can drive it. Use on trusted machines; never pass --remote-debugging-address.

  • Dedicated data dir. A profile's user_data_dir must never be the user's real Chrome

profile (~/Library/Application Support/Google/Chrome*) — the launcher refuses these.

  • Locked dir. If a profile's dir is already open in a non-debug Chrome window, the

launcher fails loudly rather than killing it.

  • Replaces real-browser's launch step; interaction still uses agent-browser.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。