360 Secure SkillHub
360 安全技能中心

Agent Browser Core

面向 AI agent 的 agent-browser CLI 使用手册:提供安装与架构说明、命令与参数映射、安全模式与高风险控制、推荐自动化工作流及常见问题排查,强调快照取 refs、JSON 输出与操作后复检。

codedao12
codedao12
热度 99.19
最近更新 2026-05-11 15:54:00
分类:自动化依赖:联网浏览搜索 / 代码执行应用场景:自动化脚本 / 工作流 / 研究

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add agent-browser-core
Metadata
name
agent-browser-core
description
OpenClaw skill for the agent-browser CLI (Rust-based with Node.js fallback) enabling AI-friendly web automation with snapshots, refs, and structured commands.

Agent Browser Skill (Core)

Purpose

Provide an advanced, production-ready playbook for using agent-browser to automate web tasks via CLI and structured commands.

Best fit

  • You need deterministic automation for AI agents.
  • You want compact snapshots with refs and JSON output.
  • You prefer a fast CLI with Node.js fallback.

Not a fit

  • You require a full SDK or custom JS integration.
  • You must stream large uploads or complex media workflows.

Quick orientation

  • Read references/agent-browser-overview.md for install, architecture, and core concepts.
  • Read references/agent-browser-command-map.md for command categories and flags.
  • Read references/agent-browser-safety.md for high-risk controls and safe mode rules.
  • Read references/agent-browser-workflows.md for recommended AI workflows.
  • Read references/agent-browser-troubleshooting.md for common issues and fixes.

Required inputs

  • Installed agent-browser CLI and browser runtime.
  • Target URLs and workflow steps.
  • Session or profile strategy if authentication is required.

Expected output

  • A clear command sequence and operational guardrails for automation.

Operational notes

  • Snapshot early, act via refs, then snapshot again after DOM changes.
  • Use --json for machine parsing and scripting.
  • Use waits and load-state checks before actions.
  • Close tabs or sessions when done to release resources.

Safe mode defaults

  • Do not use eval, --allow-file-access, custom --executable-path, or arbitrary --args without explicit approval.
  • Avoid network route, set credentials, and cookie/storage mutations unless the task requires it.
  • Allowlist domains and block localhost or private network targets.

Security notes

  • Treat tokens and credentials as secrets.
  • Avoid --allow-file-access unless explicitly required.