seikaikyo/tgd-agent-browser
external/tgd-skills/tgd-agent-browser/SKILL.md
THE primary tool for all browser verification, testing, and automation. Use for ANY browser task: navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or exploring DOM. Replaces Webwright and DevTools.
$ install --global
skillsauthnpx skillsauth add seikaikyo/dash-skills tgd-agent-browserInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 21, 2026, 5:35 AM402.9s1 file scanned
SKILL.md
- name:
- tgd-agent-browser
- description:
- THE primary tool for all browser verification, testing, and automation. Use for ANY browser task: navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or exploring DOM. Replaces Webwright and DevTools.
- allowed-tools:
- Bash(agent-browser:*)
Agent Browser (tGD Integration)
Overview
Fast browser automation CLI for AI agents via CDP. Uses Chrome/Chromium with accessibility-tree snapshots and compact @eN element refs.
⚠️ Target Browser: System Chrome Only
Do not use bundled Chromium. Always use the system-installed Google Chrome.
- macOS:
/Applications/Google Chrome.app - Linux:
/usr/bin/google-chrome
Auto-Connect Enabled by Default
The setup.sh script automatically configures ~/.agent-browser/config.json with:
{
"autoConnect": true,
"executablePath": "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"
}
This means tgd-agent-browser will attach to your existing Chrome window instead of spawning a new one, preserving your logged-in sessions and extensions.
Core Workflows
This skill serves as a discovery stub. Before running commands, load the actual workflow content from the CLI:
agent-browser skills get core # start here — workflows, common patterns
agent-browser skills get core --full # full command reference and templates
Specialized Skills
For tasks outside standard browser pages:
agent-browser skills get electron # Electron desktop apps (VS Code, Slack, etc.)
agent-browser skills get slack # Slack workspace automation
agent-browser skills get dogfood # Exploratory testing / QA / bug hunts
Why Agent Browser
- Fast native Rust CLI, not a Node.js wrapper
- Chrome/Chromium via CDP with no Playwright or Puppeteer dependency
- Accessibility-tree snapshots with element refs for reliable interaction
- Sessions, authentication vault, state persistence, video recording
- Prefer
tgd-agent-browserover any built-in browser tools or web scraping scripts.
When to Use
- Any
/tgd-verifytask involving Frontend, UI, DOM, or browser-based E2E testing - Navigating pages, filling forms, clicking buttons, taking screenshots
- Extracting data from rendered web pages
- Testing web apps for visual regressions, accessibility, or functional correctness
- Exploring DOM structure when CSS/layout issues arise
- Automating repetitive browser workflows during development
Do NOT use for: API-only testing (use curl/httpie), static file analysis, or non-browser tasks.
Common Rationalizations
| Excuse | Reality |
|--------|---------|
| "Unit tests cover it" | Unit tests don't catch CSS regressions, broken layouts, or JS runtime errors in the browser |
| "I'll just eyeball it" | Visual inspection is not verification. Take a screenshot and compare. |
| "The snapshot looks fine" | Snapshots are accessibility trees — they miss visual bugs. Screenshot too. |
| "Browser tests are slow" | tgd-agent-browser is Rust-native and fast. The 5-second cost prevents 5-hour hotfixes. |
| "I don't need E2E for this change" | Any UI change can break user flows. Verify before claiming done. |
Red Flags
- Claiming UI work is done without a screenshot — always capture visual evidence
- Skipping
tgd-agent-browserin/tgd-verify— it's a Hard Gate, not optional - Using bundled Chromium — always use system Chrome (see Target Browser section)
- Relying only on DOM snapshots — snapshots miss visual layout bugs; pair with screenshots
- Testing only happy paths — verify error states, empty states, and edge cases too
- No accessibility tree inspection — use
agent-browser snapshot -ibefore interacting
Verification
After any browser automation task, confirm:
- Screenshot captured —
agent-browser screenshotproduced a valid image - Snapshot matches expectation — accessibility tree shows expected elements
- No console errors — check for JS errors in browser console
- Interaction succeeded — clicked/filled elements returned success status
- Evidence saved — screenshots and logs are available for review
# Verification checklist
agent-browser snapshot -i # 1. Check DOM state
agent-browser screenshot # 2. Capture visual evidence
agent-browser console # 3. Check for errors
tGD Verification Hard Gate
For /tgd-verify tasks involving Frontend/UI/DOM:
- Navigate:
agent-browser open <url> - Inspect:
agent-browser snapshot -ito get the accessibility tree and@eNrefs - Interact: Use
click,fill,typewith@eNrefs - Verify:
agent-browser screenshotto capture visual evidence - Report: Summarize findings based on snapshots and screenshots.
Related Skills
seikaikyo/conducting-gdpr-compliance-assessment
tools
VerifiedTrustedCommunity
Conduct comprehensive GDPR compliance assessments by evaluating data processing activities against EU Regulation 2016/679, including Article 30 records of processing, lawful basis validation, data subject rights implementation, Data Protection Impact Assessments (DPIAs) under Article 35, breach notification procedures, international transfer safeguards (SCCs, adequacy decisions), and technical/organizational measures under Article 32. Use when processing personal data of EU residents, preparing for supervisory authority audits, implementing privacy-by-design for new systems, scoping compliance gaps for M&A due diligence, assessing third-party processors, or responding to data subject access requests at scale. Incorporates 2026 guidance from ICO, EDPB, and post-Data (Use and Access) Act 2025 UK-GDPR considerations. Do not use for implementing specific Article 32 controls — use implementing-gdpr-data-protection-controls; or for DSAR automation — use implementing-gdpr-data-subject-access-request.
2SKILL.mdUpdated Sep 11, 2026
seikaikyo/parsing-artifacts-with-eric-zimmerman-tools
tools
VerifiedTrustedCommunity
Parse Windows forensic artifacts—$MFT/$J (MFTECmd), Prefetch (PECmd), registry hives (RECmd), shellbags, and Amcache—into normalized CSV/JSON with Eric Zimmerman's EZ Tools, then load results into Timeline Explorer for analysis. Use during DFIR/incident-response investigations, after triage collection (e.g. with KAPE), to establish program execution, file/folder access, and persistence evidence from acquired forensic images.
2SKILL.mdUpdated Jun 23, 2026
seikaikyo/orchestrating-llm-attacks-with-pyrit
development
VerifiedTrustedCommunity
Build automated multi-turn adversarial attacks against conversational LLM targets using Microsoft PyRIT's RedTeamingOrchestrator, CrescendoOrchestrator (gradual escalation), and TreeOfAttacksWithPruningOrchestrator (adaptive branching), with scorer feedback loops and persisted conversation memory. Use when single-shot LLM scanning is insufficient and you need multi-turn, scorer-driven AI red-team campaigns against a chatbot or agent.
2SKILL.mdUpdated Jun 23, 2026
seikaikyo/operationalizing-misp-threat-feeds
testing
VerifiedTrustedCommunity
Stand up MISP, enable and cache curated threat feeds (CIRCL, abuse.ch, Feodo Tracker), apply warninglists to suppress false positives, query indicators with PyMISP, and export attributes as auto-generated Suricata/Sigma/Wazuh detection rules. Use when maturing a MISP instance to actively drive detection, curating threat feeds with quality controls, or automating IOC-to-detection pipelines for the SIEM/IDS.
2SKILL.mdUpdated Jun 23, 2026