
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
ai-dom-agent
Advanced tools
Frontend package for AI DOM Agent.
Provides a floating widget that lets users control the DOM with natural language.
The frontend widget does not contain AI models.
When you enter a command, the widget captures the current page’s HTML and sends it to the backend (ai-dom-agent-backend).
The backend uses an AI provider (OpenAI by default, or DeepSeek/Ollama if configured) to parse the command + HTML and return structured JSON actions (click, fill, scroll, etc.).
The widget then executes these actions on the page.
👉 Without the backend running, the widget cannot generate or run commands.
npm install ai-dom-agent
import { initAgentWidget } from 'ai-dom-agent';
useEffect(() => {
initAgentWidget({ backendUrl: 'http://localhost:4000' });
}, []);
import { initAgentWidget } from 'ai-dom-agent';
initAgentWidget({ backendUrl: 'http://localhost:4000' });
<script type="module">
import { initAgentWidget } from 'ai-dom-agent';
initAgentWidget({ backendUrl: 'http://localhost:4000' });
</script>
initAgentWidget(options)
backendUrl — required (default: http://localhost:4000)buttonLabel — optional, floating button textdefaultCommand — optional, prefill inputInstall the backend package:
npm install ai-dom-agent-backend
Create a .env file in the backend project:
OPENAI_API_KEY=your_api_key_here
PORT=4000
Run the backend:
npm run dev
Now the frontend widget can connect to it at http://localhost:4000.
npm run build
FAQs
Framework-agnostic AI DOM agent widget and SDK
The npm package ai-dom-agent receives a total of 13 weekly downloads. As such, ai-dom-agent popularity was classified as not popular.
We found that ai-dom-agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.