Skills Explorer Add Skills

dev-browser

An agent skill by SawyerHood, from SawyerHood/dev-browser. Tags: automation, cli, developer-tools, testing, web.

What it does

Browser automation with persistent named pages via the dev-browser CLI. Use when users ask to navigate websites, fill forms, take screenshots, extract web data, test web apps, log into sites, or automate browser workflows. Trigger phrases include "go to [url]", "click on", "fill out the form", "take a screenshot", "scrape", "automate", "test the website", "log into", "open the browser", or any browser interaction request.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add SawyerHood/dev-browser --skill dev-browser

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/SawyerHood/dev-browser
cp -r dev-browser/skills/dev-browser ~/.claude/skills/dev-browser

Safety box score

Grade D, elevated risk: 49 of 100 risk points, rated 2026-09-23. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill automates a real Chrome browser with Puppeteer-style JavaScript snippets and persistent named pages. The main risks are arbitrary website interaction, reuse of logged-in browser sessions, and installing an external CLI/binary globally from npm.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution2 (moderate)It explicitly runs JavaScript snippets through the CLI, e.g. `dev-browser <<'EOF' ...` and `dev-browser -e '...'`, so the agent can execute code locally in the browser-automation context.
Network access2 (moderate)The skill is meant to `goto` arbitrary URLs, `fill forms`, `scrape`, and `log into sites`, which means it can send data to websites the user points it at.
Filesystem reach1 (low)It can read/write files relative to the current directory for browser uploads and outputs: `file paths resolve against your cwd (uploadFile, screenshot/pdf path)`.
Secrets & credentials2 (moderate)Because it controls `a real Chrome` and `log into sites` with `named pages persist between runs`, it can interact with existing browser sessions/cookies in that Chrome profile.
Privilege & persistence2 (moderate)Installation is system/user wide via `npm install -g dev-browser` and `dev-browser install`, which changes the user's environment and may fetch a browser binary.
Instruction hijack surface0 (none)The skill text does not tell the agent to ignore instructions, hide actions, or follow remote content; it is straightforward browser-automation guidance.
Irreversible actions1 (low)It can automate browser workflows like `navigate websites`, `fill forms`, and `log into sites`, but it does not itself request unattended posting, payments, or destructive actions.
Transparency2 (moderate)The repo ships only markdown, while the actual functionality comes from the external `dev-browser` package and a possible first-run downloaded binary: `the first run downloads the binary`.

Before installing

Rated 2026-09-23 by an automated review of 1 file from the skill's repository.

Source

Repository
SawyerHood/dev-browser (all skills from this repository)
Path
skills/dev-browser/SKILL.md
Branch
main
Updated
2026-09-19