跳转到主要内容
此内容尚未提供您的语言版本,正在以英文显示。

Safe Browser

技能 已验证 活跃
属于:Browse

Build local constrained-browser agents with a safe_browser tool that owns CDP, enforces a domain allowlist with Fetch interception, and lets a runtime Claude Agent SDK agent complete browsing tasks without raw browser, shell, or CDP access. Use when the user wants an agent to browse or scrape while staying on approved domains, demo blocked off-domain navigation, or generate a safe browser client.

目的

To enable users to build and demonstrate browser agents that operate within strict domain boundaries, ensuring safety and control during web browsing and scraping tasks.

功能

  • Builds local constrained-browser agents
  • Enforces domain allowlist with CDP Fetch interception
  • Provides a `safe_browser` tool with restricted capabilities
  • Includes example for Hacker News scraping with security checks
  • Generates audit logs and artifacts for verification

使用场景

  • Browsing or scraping while staying on approved domains
  • Demonstrating prompt-injection or link-following containment
  • Building scrapers or browser workflows with domain policy
  • Generating a Claude Agent SDK example for browser tasks

非目标

  • Providing a general-purpose browser automation tool
  • Allowing agents raw browser, shell, or CDP access
  • Supporting off-domain navigation or arbitrary web requests

工作流

  1. Copy the local template and set up the environment.
  2. Run the provided Node.js script (`hn-scraper-demo.mjs`).
  3. Observe the agent interacting with the `safe_browser` tool.
  4. Verify browser navigation stays within the allowlist.
  5. Review generated artifacts (audit log, screenshots) for proof of concept.

先决条件

  • Node.js installed
  • Chromium browser installed (or will be installed via Playwright)

安装

请先添加 Marketplace

/plugin marketplace add browserbase/skills
/plugin install skills@browserbase

质量评分

已验证
99 /100
1 day ago 分析

信任信号

最近提交2 days ago
星标3.2k
许可证MIT
状态
查看源代码

类似扩展

使用我的浏览器

100

当工作依赖于用户实时浏览器会话或可见的渲染状态,而不是静态抓取时使用,尤其是在浏览器调试上下文或 DevTools 选择的元素或请求、登录仪表板或 CMS 流程、localhost 应用、上传、下载、媒体检查、DOM 或 iframe 检查、Shadow DOM,或看起来像软 404、身份验证墙、反机器人检查或速率限制的浏览器故障时。

技能
xixu-me

Skillify

97

Codify the most recent successful /scrape flow into a permanent browser-skill on disk. Future /scrape calls with the same intent run the codified script in ~200ms instead of re-driving the page. Walks back through the conversation, synthesizes script.ts + script.test.ts + fixture, runs the test in a temp dir, and asks before committing. Use when asked to "skillify", "codify", "save this scrape", or "make this permanent". (gstack)

技能
garrytan

Project Session Manager

100

Worktree-first dev environment manager for issues, PRs, and features with optional tmux sessions

技能
Yeachan-Heo

Public Google Drive

100

无需 OAuth 即可创建公开的 Google Docs 或 Google Sheet 文件。使用此技能创建和编辑 Google Docs 和 Sheets,无需登录 Google。文档可通过共享链接查看。首次使用时自动注册。

技能
zagmoai

Oh My Claudecode

100

Process-first advisor routing for Claude, Codex, or Gemini via `omc ask`, with artifact capture and no raw CLI assembly

技能
Yeachan-Heo

X Twitter Scraper

100

当用户需要通过 Xquik 获取 X (Twitter) 数据或执行需要确认的 X 操作时使用:推文搜索、用户查找、关注者提取、媒体下载、监控、Webhook、MCP、SDK、发布、点赞、私信和个人资料更新。需要 Xquik API 密钥。切勿索要 X 登录凭据。

技能
Xquik-dev