
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
pi-skill-agent-browser
Advanced tools
Pi skill for browser automation via Chrome DevTools Protocol — navigate, evaluate JS, screenshot, pick elements, dismiss cookies, and monitor console/network logs.
A pi skill package for browser automation via Chrome DevTools Protocol (CDP).
When pi needs to browse the web — clicking buttons, filling forms, navigating pages, taking screenshots — this skill provides a lightweight set of CDP scripts that remote-control Google Chrome or Chromium. No Puppeteer, no Playwright, just raw CDP over WebSocket.
| Command | Description |
|---|---|
agent-browser start | Launch Chrome with remote debugging on :9222 (fresh or with your profile) |
agent-browser nav | Navigate current tab or open a new tab |
agent-browser eval | Execute JavaScript in the active tab |
agent-browser screenshot | Capture viewport screenshot, returns temp file path |
agent-browser pick | Interactive element picker (click to select, Cmd/Ctrl+Click multi-select) |
agent-browser dismiss-cookies | Auto-dismiss EU cookie consent dialogs (accept or reject) |
agent-browser watch | Background logging of console, errors, and network to JSONL |
agent-browser logs-tail | Tail the latest log file |
agent-browser net-summary | Summarize network requests/responses from logs |
OneTrust, Cookiebot, Didomi, Quantcast, Usercentrics, TrustArc, Klaro, CookieYes, Google, YouTube, BBC, Amazon, and generic pattern matching for unlisted CMPs.
# From git (global)
pi install https://github.com/picassio/pi-skill-agent-browser
# Project-local install
pi install -l https://github.com/picassio/pi-skill-agent-browser
# From a local clone
pi install /path/to/pi-skill-agent-browser
After install, run npm install in the skill's scripts/ directory to get the ws dependency:
cd <package-location>/skills/agent-browser/scripts && npm install
Once installed, the skill is auto-discovered. Ask pi to browse the web:
> Go to https://example.com and take a screenshot
Or invoke explicitly:
/skill:agent-browser Navigate to https://news.ycombinator.com and get all article titles
# 1. Start Chrome
agent-browser start
# 2. Navigate
agent-browser nav https://example.com
# 3. Dismiss cookies
agent-browser dismiss-cookies
# 4. Evaluate JS
agent-browser eval 'document.title'
# 5. Screenshot
agent-browser screenshot
# 6. Pick an element interactively
agent-browser pick "Click the submit button"
pi-skill-agent-browser/
├── package.json
├── README.md
├── LICENSE
└── skills/
└── agent-browser/
├── SKILL.md
└── scripts/
├── package.json # ws dependency
├── cdp.js # Minimal CDP client
├── start.js # Launch Chrome
├── nav.js # Navigate tabs
├── eval.js # Evaluate JS
├── screenshot.js # Capture viewport
├── pick.js # Interactive element picker
├── dismiss-cookies.js # Cookie consent handler
├── watch.js # Background logger
├── logs-tail.js # Tail logs
└── net-summary.js # Network summary
Skill originally from badlogic/pi-skills web-browser skill, repackaged as a standalone pi package.
MIT
FAQs
Pi skill for browser automation via Chrome DevTools Protocol — navigate, evaluate JS, screenshot, pick elements, dismiss cookies, and monitor console/network logs.
The npm package pi-skill-agent-browser receives a total of 8 weekly downloads. As such, pi-skill-agent-browser popularity was classified as not popular.
We found that pi-skill-agent-browser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.