browser-replay — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited browser-replay (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Re-drive a recorded session trajectory. Used for regression testing, deterministic re-runs, and as the verification path that browser-record plus browser-selectors actually produces something replayable.
This skill is the load-bearing assumption of the v0.2.0 architecture. ADR-0001 Verification §4 requires ≥80% replay success across 10 distinct sites of varying drift profiles before the proposal moves fromProposed→Accepted. If you find replay unreliable, capture the failure modes infindings.mdand report them up the ADR.
browser-screenshot-diff./ruflo-browser fork) and replaying the parent before mutating. npx -y [email protected] rvf status <session-id>.rvf Read .../trajectory.ndjsonEach line is {ts, action, args, selector, result}.
mcp__claude-flow__browser_open (target URL = original or --url override).browser_click, browser_fill, browser_eval, etc.) with the recorded args.browser-selectors namespace for an embedding-similar selector for the same <host>:<intent> and retry once: npx -y @claude-flow/cli@latest memory search --namespace browser-selectors \
--query "<host> <intent>" --limit 5rvf derive).--tolerance). Verdict goes into findings.md.--mutate to inject expected variation or pin to a fixture.browser-screenshot-diff against the parent session id.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.