# Challenge Aware Webbridge

> Challenge-aware browser workflow for Kimi WebBridge sessions. Use when a site shows Cloudflare Turnstile, "Checking your browser", "Bir dakika lutfen", "verify you are human", or another anti-bot verification page and the agent needs to detect the interstitial, hand off safely to the user, wait for manual completion, and resume the original browsing task without losing session state. Also use whe…

- **Type:** Skill
- **Install:** `agentstack add skill-mucaktr-challenge-aware-webbridge-challenge-aware-webbridge`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Mucaktr](https://agentstack.voostack.com/s/mucaktr)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Mucaktr](https://github.com/Mucaktr)
- **Source:** https://github.com/Mucaktr/challenge-aware-webbridge/tree/main/challenge-aware-webbridge

## Install

```sh
agentstack add skill-mucaktr-challenge-aware-webbridge-challenge-aware-webbridge
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Challenge Aware WebBridge

## Overview

Use this skill to keep a browser task moving when a verification page interrupts normal automation. Detect challenge pages, hand control to the user cleanly, wait for the challenge to clear, then resume the original task from the same Kimi WebBridge session.

## Workflow

1. Reuse one stable `session` name for the whole user task. Do not split a single browsing task across multiple session names.
2. After navigation, run `scripts/detect_verification_page.py` if the page title, URL, or visible text looks suspicious.
3. If no challenge is detected, continue normal browsing.
4. If a challenge is detected:
   - Tell the user plainly that the site is waiting for manual verification.
   - Keep the current tab and session alive.
   - Bring the page into view if needed so the user can interact with it.
   - If the user explicitly asks for prep, only do non-submitting actions such as opening the page, waiting for layout, or focusing a neutral area outside the challenge.
   - Do not claim the skill can bypass, solve, or defeat the challenge automatically.
5. Run `scripts/wait_for_clearance.py` to poll until the interstitial is gone or the timeout expires.
6. When the page clears, take a fresh `snapshot` and resume the original task.

## Safe Defaults

- Prefer compact `snapshot` and `evaluate` probes over broad page dumps.
- Treat title or URL clues such as `checkLoading`, `turnstile`, `captcha`, `verify`, or `checking your browser` as strong signals.
- Keep all user-facing language calm and concrete. Explain what is blocking the task and what the user should do next.
- Never store secrets, cookies, or personal data in helper scripts or repo files.
- Never present this skill as an anti-bot evasion tool.

## Tooling

- Use `scripts/webbridge_request.py` for daemon calls, especially on Windows where request bodies should be posted from a UTF-8 temp file.
- Use `scripts/detect_verification_page.py` to classify the current page as clear or challenged.
- Use `scripts/wait_for_clearance.py` after user handoff to detect when the site is ready again.

## References

- Read `references/challenge-patterns.md` for detection cues and recovery patterns.
- Read `references/user-messaging.md` for short user-facing handoff language.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Mucaktr](https://github.com/Mucaktr)
- **Source:** [Mucaktr/challenge-aware-webbridge](https://github.com/Mucaktr/challenge-aware-webbridge)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-mucaktr-challenge-aware-webbridge-challenge-aware-webbridge
- Seller: https://agentstack.voostack.com/s/mucaktr
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.