browser-automation
Automates web browsing and data extraction using vision-driven techniques, enabling interaction with web elements without DOM access.
Install this skill
Security score
The browser-automation skill was audited on May 12, 2026 and we found 20 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 60 | curl -s --max-time 2 -o /dev/null -w "%{http_code}" -H "Upgrade: websocket" -H "Connection: Upgrade" -H "Sec-WebSocket-Version: 13" -H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" http://127.0.0.1:92 |
Curl to non-GitHub URL
| 63 | curl -s --max-time 2 -o /dev/null -w "%{http_code}" http://127.0.0.1:3766/socket.io/?EIO=4&transport=polling |
Access to .env file
| 74 | Midscene requires models with strong visual grounding capabilities. The following environment variables must be configured — either as system environment variables or in a `.env` file in the current w |
Access to .env file
| 291 | - Check `.env` file contains `MIDSCENE_MODEL_API_KEY=<your-key>`. |
Prompting for password/secret input
| 266 | 4. **Batch related operations into a single `act` command**: For example, fill the email and password fields, then click Log In in one prompt. Use separate commands when you need to inspect the interm |
External URL reference
| 20 | Powered by Midscene.js (https://midscenejs.com) |
External URL reference
| 60 | curl -s --max-time 2 -o /dev/null -w "%{http_code}" -H "Upgrade: websocket" -H "Connection: Upgrade" -H "Sec-WebSocket-Version: 13" -H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" http://127.0.0.1:92 |
External URL reference
| 63 | curl -s --max-time 2 -o /dev/null -w "%{http_code}" http://127.0.0.1:3766/socket.io/?EIO=4&transport=polling |
External URL reference
| 79 | MIDSCENE_MODEL_BASE_URL="https://..." |
External URL reference
| 88 | MIDSCENE_MODEL_BASE_URL="https://generativelanguage.googleapis.com/v1beta/openai/" |
External URL reference
| 97 | MIDSCENE_MODEL_BASE_URL="https://dashscope.aliyuncs.com/compatible-mode/v1" |
External URL reference
| 103 | # MIDSCENE_MODEL_BASE_URL="https://openrouter.ai/api/v1" |
External URL reference
| 111 | MIDSCENE_MODEL_BASE_URL="https://ark.cn-beijing.volces.com/api/v3" |
External URL reference
| 117 | If the model is not configured, ask the user to set it up. See [Model Configuration](https://midscenejs.com/model-common-config) for supported providers. |
External URL reference
| 126 | npx -y @midscene/web@1 connect --cdp ws://127.0.0.1:9222/devtools/browser --url https://example.com |
External URL reference
| 144 | npx -y @midscene/web@1 --bridge connect --url https://example.com |
External URL reference
| 153 | - Install the extension from Chrome Web Store: https://chromewebstore.google.com/detail/midscenejs/gbldofcpkknbggpkmbdaefngejllnief |
External URL reference
| 157 | - See the [Bridge Mode documentation](https://midscenejs.com/bridge-mode-by-chrome-extension.html). |
External URL reference
| 164 | npx -y @midscene/web@1 connect --url https://example.com |
External URL reference
| 214 | "url": "https://github.githubassets.com/assets/GitHub-Mark-ea2971cee799.png" |