
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@panerelay/browser-use
Advanced tools
Use browser-use CLI, Skill, and CLI MCP with authorized existing Chrome tabs through Panerelay.
@panerelay/browser-useUse the browser-use CLI, CLI MCP, and native helpers with your existing signed-in Chrome session. Browser Harness keeps its automation semantics; Panerelay supplies an Extension-backed connection to explicitly authorized tabs without enabling Chrome Remote Debugging or exporting login state.
This is an opt-in automation tool integration and a peer of agent-browser. It does not replace or modify browser-use.
Panerelay setup verifies browser-use but does not install, upgrade, downgrade, rewrite, or add it to PATH.
Copy this instruction into the Agent you already use:
Fetch this guide with curl -fsSL and follow the browser-use scenario: https://f-loat.github.io/panerelay/agent-setup.md
The version-controlled Agent setup instructions define the inspection, official upstream installation, Panerelay integration, user authorization stop, and acceptance report.
After browser-use --help confirms that the CLI is available, install and diagnose the Panerelay integration. Setup probes the installed browser-use and Browser Harness package versions directly and stops if they are unsupported:
npx --yes @panerelay/setup --browser-use
npx --yes @panerelay/setup doctor --browser-use
Open Panerelay in Chrome and authorize the current tab or all supported web tabs. Re-run the doctor command and require the browser-use compatibility and Extension-connection checks to pass.
Then use the official Browser Use CLI with the fixed Panerelay discovery URL. This works even when Extension mode is not saved as the default:
BU_CDP_URL=http://127.0.0.1:43827/cdp/browser-use browser-use <<'PY'
print(list_tabs())
PY
PowerShell:
$env:BU_CDP_URL = 'http://127.0.0.1:43827/cdp/browser-use'
@'
print(list_tabs())
'@ | browser-use
Command Prompt:
set "BU_CDP_URL=http://127.0.0.1:43827/cdp/browser-use"
echo print(list_tabs()) | browser-use
Success means the command lists only tabs authorized in Panerelay.
In Extension mode, setup manages Browser Harness's user-scoped environment file and writes the fixed discovery URL below:
BU_CDP_URL=http://127.0.0.1:43827/cdp/browser-use
You normally do not need to set this variable yourself. browser-use and browser-use --cli-mcp read it directly. The URL is a stable loopback discovery endpoint, not a permanent CDP credential: Panerelay selects the configured browser and creates a short-lived connection behind it for each Browser Harness daemon. Do not copy or persist the dynamic WebSocket/bootstrap URL returned during discovery.
The explicit BU_CDP_URL= prefix is a one-process override. After saving Extension mode, it can be omitted. Do not set Browser Harness's higher-priority BU_CDP_WS at the same time; it takes precedence over BU_CDP_URL.
Use the base CLI to change the durable mode:
panerelay connection use browser-use extension # manage BU_CDP_URL
panerelay connection use browser-use direct # remove Panerelay-managed Browser Harness keys
The managed environment file is the default for new Browser Use processes. An explicitly supplied process environment still takes precedence for that process.
Setup adds only Panerelay-owned integration files:
browser-use command);panerelay-browser-use Skill without replacing the official browser-use Skill;The official browser-use executable remains the user-installed command. This package supplies its connection environment and is not intended to be invoked directly by Agents.
| Surface | Support |
|---|---|
| Official browser-use CLI with setup-managed environment | Supported |
| Additive Panerelay browser-use Skill | Supported |
Official browser-use --cli-mcp | Supported |
| Saved Direct or Extension mode and one-run override | Supported |
| Arbitrary browser-use Python SDK construction | Not transparently intercepted; requires explicit connection integration |
Extension mode exposes only explicitly authorized tabs. Unsupported browser-wide, whole-profile, isolated-context, and top-level containment operations fail explicitly.
A private browser-use daemon persists across sequential commands and shares its current-page state; it is not per-Agent task isolation. Simultaneous canonical runs are serialized or fail busy. User release, authorization loss, Extension or Native Host disconnection, and WebSocket loss remove browser authority even if the detached upstream process remains alive.
browser-use 0.13.7 is the supported minimum. The exact verified baseline is browser-use 0.13.7 with Browser Harness 0.1.8. Newer supported versions meet the version floor but do not automatically inherit Verified status.
FAQs
Use browser-use CLI, Skill, and CLI MCP with current-tab or all-supported-tabs authorization through Panerelay.
The npm package @panerelay/browser-use receives a total of 677 weekly downloads. As such, @panerelay/browser-use popularity was classified as not popular.
We found that @panerelay/browser-use demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.