chrome-devtools — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited chrome-devtools (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Browser automation via executable Puppeteer scripts. All scripts output JSON for easy parsing.
CRITICAL: Always check pwd before running scripts.
#### Step 1: Install System Dependencies (Linux/WSL only)
On Linux/WSL, Chrome requires system libraries. Install them first:
pwd # Should show current working directory
cd <skill-root>/scripts
./install-deps.sh # Auto-detects OS and installs required libsSupports: Ubuntu, Debian, Fedora, RHEL, CentOS, Arch, Manjaro
macOS/Windows: Skip this step (dependencies bundled with Chrome)
#### Step 2: Install Node Dependencies
npm install # Installs puppeteer, debug, yargs#### Step 3: Install ImageMagick (Optional, Recommended)
ImageMagick enables automatic screenshot compression to keep files under 5MB:
macOS:
brew install imagemagickUbuntu/Debian/WSL:
sudo apt-get install imagemagickVerify:
magick -version # or: convert -versionWithout ImageMagick, screenshots >5MB will not be compressed (may fail to load in AI vision APIs with 5MB limits).
node navigate.js --url <page-url>
# Output: {"success": true, "url": "<page-url>", "title": "Page Title"}All scripts are in <skill-root>/scripts/
CRITICAL: Always check pwd before running scripts.
./scripts/README.mdnavigate.js - Navigate to URLsscreenshot.js - Capture screenshots (full page or element)click.js - Click elementsfill.js - Fill form fieldsevaluate.js - Execute JavaScript in page contextsnapshot.js - Extract interactive elements with metadataconsole.js - Monitor console messages/errorsnetwork.js - Track HTTP requests/responsesperformance.js - Measure Core Web Vitals + record tracespwd # Should show current working directory
cd <skill-root>/scripts
node screenshot.js --url <page-url> --output ./docs/screenshots/page.png
node screenshot.js --url <page-url> --output ./docs/screenshots/page.pngImportant: Always save screenshots to ./docs/screenshots directory.
Screenshots are automatically compressed if they exceed 5MB to ensure compatibility with common multimodal APIs that impose upload limits. This uses ImageMagick internally:
# Default: auto-compress if >5MB
node screenshot.js --url <page-url> --output page.png
# Custom size threshold (e.g., 3MB)
node screenshot.js --url <page-url> --output page.png --max-size 3
# Disable compression
node screenshot.js --url <page-url> --output page.png --no-compressCompression behavior:
Output includes compression info:
{
"success": true,
"output": "/path/to/page.png",
"compressed": true,
"originalSize": 8388608,
"size": 3145728,
"compressionRatio": "62.50%",
"url": "<page-url>"
}# Keep browser open with --close false
node navigate.js --url <login-url> --close false
node fill.js --selector "#email" --value "[email protected]" --close false
node fill.js --selector "#password" --value "secret" --close false
node click.js --selector "button[type=submit]"# Extract specific fields with jq
node performance.js --url <page-url> | jq '.vitals.LCP'
# Save to file
node network.js --url <page-url> --output /tmp/requests.jsonBEFORE executing any script:
pwdscripts/ directorycd to correct locationExample:
pwd # Should show: .../chrome-devtools/scripts
# If wrong:
cd <skill-root>/scriptsAFTER screenshot/capture operations:
ls -lh <output-path>Example:
node screenshot.js --url <page-url> --output ./docs/screenshots/page.png
ls -lh ./docs/screenshots/page.png # Verify file exists
# Then use Read tool to visually inspectIf script fails:
Example:
# CSS selector fails
node click.js --url <page-url> --selector ".btn-submit"
# Error: waiting for selector ".btn-submit" failed
# Discover correct selector
node snapshot.js --url <page-url> | jq '.elements[] | select(.tagName=="BUTTON")'
# Try XPath
node click.js --url <page-url> --selector "//button[contains(text(),'Submit')]"❌ Wrong working directory → output files go to wrong location ❌ Skipping output validation → silent failures ❌ Using complex CSS selectors without testing → selector errors ❌ Not checking element visibility → timeout errors
✅ Always verify pwd before running scripts ✅ Always validate output after screenshots ✅ Use snapshot.js to discover selectors ✅ Test selectors with simple commands first
node evaluate.js --url <page-url> --script "
Array.from(document.querySelectorAll('.item')).map(el => ({
title: el.querySelector('h2')?.textContent,
link: el.querySelector('a')?.href
}))
" | jq '.result'PERF=$(node performance.js --url <page-url>)
LCP=$(echo $PERF | jq '.vitals.LCP')
if (( $(echo "$LCP < 2500" | bc -l) )); then
echo "✓ LCP passed: ${LCP}ms"
else
echo "✗ LCP failed: ${LCP}ms"
finode fill.js --url <page-url> --selector "#search" --value "query" --close false
node click.js --selector "button[type=submit]"node console.js --url <page-url> --types error,warn --duration 5000 | jq '.messageCount'All scripts support:
--headless false - Show browser window--close false - Keep browser open for chaining--timeout 30000 - Set timeout (milliseconds)--wait-until networkidle2 - Wait strategySee ./scripts/README.md for complete options.
All scripts output JSON to stdout:
{
"success": true,
"url": "<page-url>",
... // script-specific data
}Errors go to stderr:
{
"success": false,
"error": "Error message"
}Use snapshot.js to discover selectors:
node snapshot.js --url <page-url> | jq '.elements[] | {tagName, text, selector}'"Cannot find package 'puppeteer'"
npm install in the scripts directory"error while loading shared libraries: libnss3.so" (Linux/WSL)
./install-deps.sh in scripts directorysudo apt-get install -y libnss3 libnspr4 libasound2t64 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdrm2 libxkbcommon0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 libgbm1"Failed to launch the browser process"
ls <user-cache-dir>/puppeteernpm rebuild then npm installChrome not found
npm installnpx puppeteer browsers install chromeElement not found
node snapshot.js --url <url>Script hangs
--timeout 60000--wait-until load or --wait-until domcontentloadedBlank screenshot
--wait-until networkidle2--timeout 30000Permission denied on scripts
chmod +x *.shScreenshot too large (>5MB)
--max-size 3--format jpeg --quality 80--selector .main-contentCompression not working
magick -version or convert -version"compressed": true--selector to capture only needed areaDetailed guides available in ./references/:
Create custom scripts using shared library:
import { getBrowser, getPage, closeBrowser, outputJSON } from './lib/browser.js';
// Your automation logicconst client = await page.createCDPSession();
await client.send('Emulation.setCPUThrottlingRate', { rate: 4 });See reference documentation for advanced patterns and complete API coverage.
Use this skill for the capability described in this document.
Use this skill when the request matches the capability, constraints, and activation cues described below.
Follow the primary workflow, commands, and decision points documented in the sections below.
Use the examples and snippets already present in this document whenever they apply to the task.
Follow the constraints, conventions, and cautions documented below, and prefer the documented path over improvisation.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.