browser — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited browser (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Triggers: "open browser", "screenshot", "take a screenshot", "scrape page", "get page content", "fill form", "navigate to", "render page", "save as pdf", "web automation", "click on", "browser automation", "full page", "visit"
Browser: Browserless Chromium 145 at http://headless_browser:3000 Protocol: REST API (POST JSON) + OpenClaw native browser tool
Use for interactive navigation, clicking, form-filling. OpenClaw's browser tool is wired to BROWSERLESS_URL=http://headless_browser:3000.
# In OpenClaw tool call:
browser: navigate to https://example.com
browser: click on "Submit" button
browser: fill input[name=email] with "[email protected]"
browser: get page text
browser: take screenshotUse for precise control, bulk operations, or when native tool isn't enough.
# Full page screenshot → save PNG
curl -s -X POST http://headless_browser:3000/screenshot \
-H "Content-Type: application/json" \
-d '{
"url": "https://YOURURL.com",
"options": {
"fullPage": true,
"type": "png"
}
}' -o ~/.openclaw/workspace/logs/screenshot_$(date +%s).png
echo "Saved to workspace/logs/"curl -s -X POST http://headless_browser:3000/content \
-H "Content-Type: application/json" \
-d '{
"url": "https://YOURURL.com",
"rejectResourceTypes": ["image","font","stylesheet"],
"waitForSelector": "body"
}' | head -200# Extract structured data from page
curl -s -X POST http://headless_browser:3000/scrape \
-H "Content-Type: application/json" \
-d '{
"url": "https://YOURURL.com",
"elements": [
{"selector": "h1"},
{"selector": ".price"},
{"selector": "table tr"},
{"selector": "article p"}
]
}' | python3 -c "
import sys, json
data = json.load(sys.stdin)
for block in data['data']:
print(f\"=== {block['selector']} ===\")
for r in block['results'][:5]:
print(r['text'])
"curl -s -X POST http://headless_browser:3000/pdf \
-H "Content-Type: application/json" \
-d '{
"url": "https://YOURURL.com",
"options": {
"printBackground": true,
"format": "A4",
"margin": {"top":"20px","bottom":"20px","left":"20px","right":"20px"}
}
}' -o ~/.openclaw/workspace/logs/page_$(date +%s).pdf
echo "PDF saved"curl -s -X POST http://headless_browser:3000/function \
-H "Content-Type: application/json" \
-d '{
"code": "module.exports = async ({ page }) => {
await page.goto(\"https://YOURURL.com\");
const title = await page.title();
const links = await page.$$eval(\"a\", els => els.map(e => ({text: e.textContent.trim(), href: e.href})).filter(l => l.text).slice(0, 20));
return { title, links };
}"
}' | python3 -m json.toolcurl -s -X POST http://headless_browser:3000/scrape \
-H "Content-Type: application/json" \
-d '{"url":"https://TARGET.com","elements":[{"selector":"title"},{"selector":"h1"}]}' \
| python3 -c "import sys,json; d=json.load(sys.stdin); [print(b['selector'],':', b['results'][0]['text'] if b['results'] else 'empty') for b in d['data']]"for DOMAIN in arifosmcp.arif-fazil.com claw.arifosmcp.arif-fazil.com flow.arifosmcp.arif-fazil.com; do
STATUS=$(curl -s -o /dev/null -w "%{http_code}" "https://${DOMAIN}" --max-time 5)
echo "${DOMAIN}: HTTP ${STATUS}"
done# F11: Credential handling → state intent, get Arif confirmation
curl -s -X POST http://headless_browser:3000/function \
-H "Content-Type: application/json" \
-d '{
"code": "module.exports = async ({ page }) => {
await page.goto(\"https://app.example.com/login\");
await page.type(\"input[name=email]\", process.env.LOGIN_EMAIL);
await page.type(\"input[name=password]\", process.env.LOGIN_PASS);
await page.click(\"button[type=submit]\");
await page.waitForNavigation();
return { url: page.url(), title: await page.title() };
}"
}'curl -s -X POST http://headless_browser:3000/screenshot \
-H "Content-Type: application/json" \
-d '{"url":"http://arifos_grafana:3000","options":{"fullPage":true}}' \
-o ~/.openclaw/workspace/logs/grafana_$(date +%Y%m%d).pngheadless_browser:3000 is accessible from openclaw container via arifos_trinity network~/.openclaw/workspace/logs/ for git trackingrejectResourceTypes: ["image","font","media"] to speed uparifOS_bot — Chromium 145, Browserless REST API
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.