AgentStack
SKILL verified MIT Self-run

X9 Browser Session

skill-xonika9-agent-skills-x9-browser-session · by xonika9

Use when browser work requires choosing between a connector, a local browser, and an existing authenticated session, or when an agent must safely operate the user's logged-in browser - «открой в моём браузере», «используй мою сессию», «поработай в залогиненном браузере», "use my logged-in browser". Do not use for ordinary web research that can be completed with direct HTTP/search tools or for bro…

No reviews yet
0 installs
0 views
view→install

Install

$ agentstack add skill-xonika9-agent-skills-x9-browser-session

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README — it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-xonika9-agent-skills-x9-browser-session)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
today

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming — see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps — measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of X9 Browser Session? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Browser session

Use this skill in Claude Code and Codex. It owns shared route selection, a portable authenticated Chromium/CDP contract, the Edge adapter, runtime-specific browser surfaces, and fallbacks. Re-check installed tool instructions and live schemas when a named surface is absent.

Choose the surface

  1. Prefer a purpose-built connector, API, or CLI when it can perform the semantic operation on the linked resource.
  2. Use the runtime's local-app browser surface or a clean automation browser for public pages, visual inspection, and UI testing. This is the normal route when the task should not depend on personal state.
  3. Use a dedicated authenticated Chromium automation profile for personal automation when account state, region, cart, saved data, personalized feeds, or private pages matter, or when the task-owning skill explicitly requires an authenticated platform interface. This route can produce materially different prices, content, and available actions from a clean browser.
  4. Once selected, keep one browser surface through ordinary stale-reference or timeout errors. Switch only when the surface is unavailable or the user changes the requested browser.

The distinction is task state, not browser brand: a clean browser answers “does this public interface work?”, while an authenticated profile answers “what does this account actually see or allow?”. Do not log a clean test browser into personal services merely to avoid selecting the authenticated route.

Authenticated Chromium over CDP

Treat the browser executable, dedicated user-data directory, localhost CDP endpoint, launcher, primary controller, and fallback controller as adapter parameters. Chrome, Edge, Brave, and other Chromium browsers can use the same contract when they support remote debugging:

  • use a dedicated automation profile rather than the user's default live profile;
  • bind CDP to localhost and do not expose the endpoint to the network;
  • attach controllers to the same existing profile instead of launching a clean browser;
  • create a task-owned page or tab and leave existing browser state untouched;
  • keep credentials, cookies, tokens, and local storage in the dedicated browser profile rather than copying them into prompts or repository files;
  • assume the controller and model can receive inspected page contents and network data; avoid opening unrelated private surfaces, do not capture network headers unless the task requires them, and never echo secret header values into chat, logs, or files.

Do not assume the Edge paths or port below on another machine. Read [references/setup.md](references/setup.md), substitute the local Chromium adapter parameters, and verify the discovery endpoint before browsing.

Verified Edge adapter

  • Profile: ~/Library/Application Support/Microsoft Edge Automation.
  • Launcher: ~/Applications/Edge (Agent).app with remote-debugging port 9222.
  • Primary: chrome-devtools MCP configured with --browserUrl http://127.0.0.1:9222.
  • Fallback only when that MCP is not attached: agent-edge, which wraps agent-browser --cdp 9222 against the same profile.
  • With chrome-devtools, call new_page, select that page, and operate only there. With agent-edge, create a task tab before the first snapshot.
  • Leave pre-existing tabs, windows, downloads, bookmarks, and settings untouched.
  • Re-snapshot after navigation, filtering, modal changes, and redraws because element references become stale.
  • If neither route attaches, launch Edge (Agent).app or ask the user to do so, then retry the same surface.

Read before mutating. Posting, purchasing, sending, deleting, or changing account data still requires authority from the user's request.

Claude Code

  • Local app UI: discover and follow the currently installed in-app browser integration when available; otherwise use headed agent-browser for clean public-page or UI-test work.
  • Logged-in Edge: use the chrome-devtools MCP from ~/.claude.json.
  • If its tools are absent after Edge is running, restart Claude Code before using agent-edge.

Codex

  • In-app browser: read and follow the installed browser:control-in-app-browser skill. It owns its current initialization and selection APIs.
  • Logged-in Edge: use the chrome-devtools MCP from ~/.codex/config.toml.
  • If its tools are absent after Edge is running, restart Codex before using agent-edge.

Install an adapter

Read [references/setup.md](references/setup.md) for the portable adapter contract and the verified Edge example. Never commit browser profile contents or credentials.

Failure behavior

Report cancelled or failed browser calls as failures. Do not substitute remembered data, a public page, or another browser when the task required the authenticated source. Return DEGRADED or BLOCKED with the failed route and missing prerequisite when the documented retry cannot attach.

Done

Report the surface used, the task-owned tab or page, the requested result, and any checks that could not be completed. For mutating work, verify the resulting UI state or server response before claiming completion.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.