Webpilot — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Webpilot (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The web, through the eyes of a machine.
A semantic terminal browser that renders web pages as structured, numbered, interactive text. Built for LLM agents (via MCP), CLI-native developers, and automation pipelines.
Key insight: LLMs don't need to see a website — they need to understand it. Webpilot uses the accessibility tree (the same structure screen readers use) to represent any website as numbered elements that both humans and machines can interact with.
$ wpilot https://github.com
┌──────────────────────────────────────────────────────────────┐
GitHub: Let's build from here
https://github.com
└──────────────────────────────────────────────────────────────┘
[1] › link Sign in
[2] › link Sign up
[3] ⌕ searchbox Search GitHub
[4] # h1 Build and ship software on a single platform
[5] _ textbox Enter your email address
[6] ◆ button ⟦ Sign up for GitHub ⟧
~ › click 1
Navigated: github.com -> github.com/login
[1] # h1 Sign in to GitHub
[2] _ textbox Username or email address
[3] _ textbox Password
[4] ◆ button ⟦ Sign in ⟧
[5] › link Forgot password?
[6] › link Create an account
~ › type 2 [email protected]
~ › type 3 ••••••••
~ › ss github-login.png
Screenshot saved to github-login.pngThe screenshot webpilot saves:
<img src="assets/github-example.png" alt="Webpilot screenshot of GitHub login with filled credentials" width="700" />
| Browsh | Lynx | Carbonyl | Webpilot | |
|---|---|---|---|---|
| JavaScript support | Yes | No | Yes | Yes |
| SPAs (React, Next.js, Vue) | Yes | No | Yes | Yes |
| LLM-parseable output | No | No | No | Yes |
| MCP server for AI agents | No | No | No | Yes |
| Element interaction by ID | No | No | No | Yes |
| State diffs | No | No | No | Yes |
| Semantic (a11y tree) | No | Partial | No | Yes |
| No pixels, no rendering | No | Yes | No | Yes |
| Zero cost (runs locally) | Yes | Yes | Yes | Yes |
npm install -g webpilot-cli
npx playwright install chromium # one-time browser setup# Interactive REPL
wpilot https://google.com
# JSON output for LLM agents
wpilot --agent https://google.com
# Pipe mode for scripting
echo 'goto https://example.com
extract --links' | wpilot --pipe
# Shorthand URLs
wpilot :3000 # → http://localhost:3000
wpilot google.com # → https://google.comWebpilot ships as an MCP server — any LLM agent that supports the Model Context Protocol can browse the web through it.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"webpilot": {
"command": "npx",
"args": ["-y", "webpilot-cli", "--mcp"]
}
}
}Add to your .vscode/mcp.json:
{
"servers": {
"webpilot": {
"command": "npx",
"args": ["-y", "webpilot-cli", "--mcp"]
}
}
}| Tool | Description |
|---|---|
web_navigate | Open a URL and get page state |
web_snapshot | Get current page as numbered elements |
web_click | Click element by [n] ID |
web_type | Type into input/textarea by [n] ID |
web_select | Select dropdown option |
web_scroll | Scroll up/down/top/bottom |
web_back | Go back in history |
web_extract | Extract text, links, tables, forms, or metadata |
web_eval | Execute JavaScript in page context |
web_screenshot | Capture page as PNG image |
web_tabs | List open tabs |
web_newtab | Open new tab |
web_close | Close browser session |
Agent: web_navigate("https://news.ycombinator.com")
→ 280 elements: [1] link "Hacker News", [2] link "new", [3] link "past" ...
Agent: web_click(5)
→ Navigated to article page, 42 elements
Agent: web_extract({ type: "text" })
→ Full article text extracted
Agent: web_back()
→ Back to Hacker News front page| Command | Description | ||||
|---|---|---|---|---|---|
goto <url> | Navigate to URL | ||||
click [n] | Click element by ID | ||||
type [n] "text" | Type into form field | ||||
select [n] "option" | Select dropdown option | ||||
check [n] / hover [n] | Toggle checkbox / hover | ||||
press <key> | Press keyboard key (Enter, Tab, etc.) | ||||
back / forward | Browser history | ||||
refresh | Reload current page | ||||
| `scroll down\ | up\ | top\ | bottom` | Scroll the page | |
find "text" | Search for text in elements | ||||
show | Re-display current page state | ||||
| `extract --text\ | --links\ | --tables\ | --forms\ | --meta` | Extract structured content |
eval "js" | Execute JavaScript | ||||
screenshot [path] | Save screenshot | ||||
source | View page HTML | ||||
tabs / tab [n] / newtab / closetab | Tab management | ||||
help | Show all commands |
--agent) — JSON structured output for LLM consumptiongrep, awk, scriptingWebsite → Playwright (headless Chromium) → CDP Accessibility Tree → Numbered Elements → You[1], [2], [3]... for easy targetingclick [3], type [5] "hello"localhost:3000 — your dev servergit clone https://github.com/luckysolanki902/webpilot.git
cd webpilot
npm install
npx playwright install chromium
npm run build # → dist/index.js
npm run dev # Watch modeMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.