name: agent-browser-core description: OpenClaw skill for the agent-browser CLI (Rust-based with Node.js fallback) enabling AI-friendly web automation with snapshots, refs, and structured commands. description_zh: "基于 agent-browser CLI 的 AI 友好型网页自动化" description_en: "AI-friendly web automation via agent-browser CLI with snapshots & refs" version: 1.0.1 allowed-tools: Bash

Agent Browser Skill (Core)

Purpose

Provide an advanced, production-ready playbook for using agent-browser to automate web tasks via CLI and structured commands.

Best fit

• You need deterministic automation for AI agents.
• You want compact snapshots with refs and JSON output.
• You prefer a fast CLI with Node.js fallback.

Not a fit

• You require a full SDK or custom JS integration.
• You must stream large uploads or complex media workflows.

Quick orientation

• Read references/agent-browser-overview.md for install, architecture, and core concepts.
• Read references/agent-browser-command-map.md for command categories and flags.
• Read references/agent-browser-safety.md for high-risk controls and safe mode rules.
• Read references/agent-browser-workflows.md for recommended AI workflows.
• Read references/agent-browser-troubleshooting.md for common issues and fixes.

Required inputs

• Installed agent-browser CLI and browser runtime.
• Target URLs and workflow steps.
• Session or profile strategy if authentication is required.

Expected output

• A clear command sequence and operational guardrails for automation.

Operational notes

• Snapshot early, act via refs, then snapshot again after DOM changes.
• Use --json for machine parsing and scripting.
• Use waits and load-state checks before actions.
• Close tabs or sessions when done to release resources.

Safe mode defaults

• Do not use eval, --allow-file-access, custom --executable-path, or arbitrary --args without explicit approval.
• Avoid network route, set credentials, and cookie/storage mutations unless the task requires it.
• Allowlist domains and block localhost or private network targets.

Security notes

• Treat tokens and credentials as secrets.
• Avoid --allow-file-access unless explicitly required.