open-browser — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited open-browser (Agent Skill) and scored it 87/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 3 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 3 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use when asked to "open browser", "launch browser", "connect chrome", "open chrome", "real browser", "launch chrome", "side panel", or "control my browser".
eval "$("${VIBESTACK_HOME:-$HOME/.vibestack}/bin/vibe-slug" 2>/dev/null)" 2>/dev/null || SLUG="unknown"
_LEARN_FILE="${VIBESTACK_HOME:-$HOME/.vibestack}/projects/${SLUG:-unknown}/learnings.jsonl"
if [ -f "$_LEARN_FILE" ]; then
_LEARN_COUNT=$(wc -l < "$_LEARN_FILE" 2>/dev/null | tr -d ' ')
echo "LEARNINGS: $_LEARN_COUNT entries loaded"
if [ "$_LEARN_COUNT" -gt 5 ] 2>/dev/null; then
"${VIBESTACK_HOME:-$HOME/.vibestack}/bin/vibe-learnings-search" --limit 5 2>/dev/null || true
fi
else
echo "LEARNINGS: none yet"
fi{{include lib/snippets/session-host.md}}
{{include lib/snippets/decision-brief.md}}
{{include lib/snippets/working-protocols.md}}
{{include lib/snippets/state-protocols.md}}
Launch vibestack Browser — AI-controlled Chromium with the sidebar extension, anti-bot stealth, and real-time visibility. You see every action as it happens.
_ROOT=$(git rev-parse --show-toplevel 2>/dev/null)
B=""
# install renders each skill to <root>/skills/<name>/ and links its bin/ — there
# is no skills/vibestack/ directory and no dist/browse, so the previous paths
# could never resolve and this skill always dead-ended at NEEDS_SETUP.
[ -n "$_ROOT" ] && [ -x "$_ROOT/.claude/skills/browse/bin/vibe-browse" ] && B="$_ROOT/.claude/skills/browse/bin/vibe-browse"
[ -z "$B" ] && [ -x "${CLAUDE_SKILL_DIR:-$HOME/.claude/skills/open-browser}/../browse/bin/vibe-browse" ] && B="${CLAUDE_SKILL_DIR:-$HOME/.claude/skills/open-browser}/../browse/bin/vibe-browse"
[ -z "$B" ] && B="$(command -v vibe-browse || true)"
if [ -x "$B" ]; then echo "READY: $B"; echo "BROWSE_BIN: $B"; else echo "NEEDS_SETUP"; fiEvery Bash call starts a fresh shell, so $B is unset in every later block. A block that runs a browse command starts with B='<BROWSE_BIN>': replace <BROWSE_BIN> with the path printed on the BROWSE_BIN: line.
If NEEDS_SETUP, stop and tell the user: "The browse daemon is required for this skill but is not installed. vibestack does not bundle the browse daemon — it's a separate dependency. See docs/external-tools.md for current options."
A running browse daemon may hold open tabs, cookies and signed-in sessions — cookies imported with /setup-browser-cookies, a remote agent paired through /pair-agent — and replacing it loses all of them. Never kill it, and never delete its state file, to get it out of the way. Probe without starting one (BROWSE_NO_AUTOSTART=1 keeps status from booting a daemon):
B='<BROWSE_BIN>'
_STATUS=$(BROWSE_NO_AUTOSTART=1 $B status 2>&1); _STATUS_RC=$?
printf '%s\n' "$_STATUS" | head -5
if [ "$_STATUS_RC" -ne 0 ]; then echo "DAEMON: none"
elif printf '%s' "$_STATUS" | grep -q 'Mode: headed'; then echo "DAEMON: headed"
else echo "DAEMON: live"; fi$B connect. Donot delete the Chromium profile's lock files yourself: another project's vibestack Browser may hold them. The CLI cleans up stale state itself — a lock whose browser is gone, or an orphaned browser whose daemon died — and it refuses, killing and deleting nothing, when a live browser it does not own holds the profile or a daemon is alive but too busy to answer. If it refuses, show its output and stop.
$B connect reports that; continue to Step 2.
spawned or headless`, do not ask and do not replace it. Print this and stop:
B='<BROWSE_BIN>'
printf 'Live browse daemon left running. Run %s stop, then re-run /open-browser to replace it.\n' "$B"Otherwise AskUserQuestion. Replacing the daemon cannot be undone:
"A browse daemon is already running (tabs and logins may be active). Opening vibestack Browser replaces it, and everything in that daemon is lost."
>
RECOMMENDATION: Choose B unless you are done with the running session.
Options:
$B connect --force-restart; its tabs, cookies and logins are lost)Only an explicit A runs Step 1 with --force-restart. On B, or on a reply that is not clearly A, print the "Live browse daemon left running" line above and stop.
B='<BROWSE_BIN>'
$B connectAfter an explicit A in Step 0, and only then:
B='<BROWSE_BIN>'
$B connect --force-restartThis launches vibestack Browser (rebranded Chromium) in headed mode with:
launchPersistentContextThe connect command auto-discovers the extension from the install directory. It always uses port 34567 so the extension can auto-connect.
After connecting, print the full output to the user. Confirm you see Mode: headed in the output.
If the output shows an error or the mode is not headed, run $B status and share the output with the user before proceeding.
B='<BROWSE_BIN>'
$B statusConfirm the output shows Mode: headed. Read the port from the state file:
_REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null)
_STATE_FILE=""
[ -n "$_REPO_ROOT" ] && [ -f "$_REPO_ROOT/.vibestack/browse.json" ] && _STATE_FILE="$_REPO_ROOT/.vibestack/browse.json"
[ -z "$_STATE_FILE" ] && _STATE_FILE="${VIBESTACK_HOME:-$HOME/.vibestack}/browse.json"
grep -o '"port":[0-9]*' "$_STATE_FILE" 2>/dev/null | grep -o '[0-9]*'The port should be 34567. If it's different, note it — the user may need it for the Side Panel.
Also find the extension path so you can help the user if they need to load it manually:
_EXT_PATH=""
_ROOT=$(git rev-parse --show-toplevel 2>/dev/null)
# Same correction as the binary above: the extension lives in the checkout, and
# the skill reaches it through the repo root, never through a skills/vibestack/
# directory that install does not create.
[ -n "$_ROOT" ] && [ -f "$_ROOT/extension/manifest.json" ] && _EXT_PATH="$_ROOT/extension"
[ -z "$_EXT_PATH" ] && [ -f "${CLAUDE_SKILL_DIR:-$HOME/.claude/skills/open-browser}/extension/manifest.json" ] && _EXT_PATH="${CLAUDE_SKILL_DIR:-$HOME/.claude/skills/open-browser}/extension"
echo "EXTENSION_PATH: ${_EXT_PATH:-NOT FOUND}"Use AskUserQuestion:
Chrome is launched with vibestack control. You should see Playwright's Chromium (not your regular Chrome) with a shimmer line at the top of the page.
>
The Side Panel extension should be auto-loaded. To open it: 1. Look for the puzzle piece icon (Extensions) in the toolbar 2. Click the puzzle piece → find vibestack browse → click the pin icon 3. Click the pinned icon in the toolbar 4. The Side Panel should open on the right showing a live activity feed
>
Port: 34567 (auto-detected — the extension connects automatically in the Playwright-controlled Chrome).
Options:
If B: Tell the user:
The extension is loaded into Playwright's Chromium at launch time, but sometimes it doesn't appear immediately. Try these steps:
>
1. Typechrome://extensionsin the address bar 2. Look for the vibestack browse extension — it should be listed and enabled 3. If it's there but not pinned, go back to any page, click the puzzle piece icon, and pin it 4. If it's NOT listed at all, click "Load unpacked" and navigate to: - Press Cmd+Shift+G in the file picker dialog - Paste this path:{EXTENSION_PATH}(use the path from Step 2) - Click Select
>
After loading, pin it and click the icon to open the Side Panel.
>
If the Side Panel badge stays gray (disconnected), click the icon and enter port 34567 manually.
If C:
$B status and show the outputreplacement) and then Step 1 connect
$B focusAfter the user confirms the Side Panel is working, run a quick demo:
B='<BROWSE_BIN>'
$B goto https://github.comWait 2 seconds, then:
B='<BROWSE_BIN>'
$B snapshot -iTell the user: "Check the Side Panel — you should see the goto and snapshot commands appear in the activity feed. Every command Claude runs shows up here in real time."
After the activity feed demo, tell the user about the sidebar chat:
The Side Panel also has a chat tab. Try typing a message like "take a snapshot and describe this page." A sidebar agent (a child Claude instance) executes your request in the browser — you'll see the commands appear in the activity feed as they happen.
>
The sidebar agent can navigate pages, click buttons, fill forms, and read content. Each task gets up to 5 minutes. It runs in an isolated session, so it won't interfere with this Claude Code window.
Tell the user:
You're all set! Here's what you can do with the connected Chrome:
>
Watch Claude work in real time: - Run any vibestack skill (/qa,/design-review,/benchmark) and watch every action happen in the visible Chrome window + Side Panel feed - No cookie import needed — the Playwright browser shares its own session
>
Control the browser directly: - Sidebar chat — type natural language in the Side Panel and the sidebar agent executes it (e.g., "fill in the login form and submit") - Browse commands —$B goto <url>,$B click <sel>,$B fill <sel> <val>,$B snapshot -i— all visible in Chrome + Side Panel
>
Window management: -$B focus— bring Chrome to the foreground anytime -$B disconnect— close headed Chrome and return to headless mode
>
What skills look like in headed mode: -/qaruns its full test suite in the visible browser — you see every page load, every click, every assertion -/design-reviewtakes screenshots in the real browser — same pixels you see -/benchmarkmeasures performance in the headed browser
Then proceed with whatever the user asked to do. If they didn't specify a task, ask what they'd like to test or browse.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.