dev-browser
A Claude Skill to give your agent the ability to use a web browser
Install / Use
npx skills add SawyerHood/dev-browserInstalls into whichever agent you are using.
CLAUDE.md
Claude Code project instructions
Quality Score
Category
Development & EngineeringSupported Platforms
Tags
Our assessment of dev-browser
dev-browser scores 92/100 on our quality scale, 777th of 4,617 Development & Engineering skills we index (top 17%).
Its CLAUDE.md is 7.6 KB long, well organised into 14 sections with 14 code examples: a thorough specification that gives an agent plenty to work with.
With 6,719 GitHub stars, it is one of the more widely adopted skills in the catalogue.
Maintenance, license and trust
- The repository was last updated 2 days ago, so dev-browser is actively maintained.
- Our last check on 2026-10-17 found the source still online.
- It is released under the MIT license, a permissive license that allows use, modification and commercial use with attribution.
- Its trust signals score 95/100, with 1 caution from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
ReviewOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review judged it risky: The README includes a section titled 'Allowing dev-browser in Claude Code without permission prompts' that tells users to add 'Bash(dev-browser *)' to the permissions.allow list in .claude/settings.json or ~/.claude/settings.json, which dis.
AI review: risky
- The README includes a section titled 'Allowing dev-browser in Claude Code without permission prompts' that tells users to add 'Bash(dev-browser *)' to the permissions.allow list in .claude/settings.json or ~/.claude/settings.json, which dis
- It explicitly recommends pre-approving arbitrary 'dev-browser' invocations (and 'npx dev-browser *'), meaningfully weakening the agent's safeguard checks.
- While the tool's own npm install and normal usage examples are benign, the allow-list instructions fall under the risky category regardless of file type.
AI review by kimi-k2.7-code on 2026-09-24. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
dev-browser compared with similar skills
All 4 of these similar skills score higher than dev-browser; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| dev-browser (this skill)by SawyerHood | 92 | 6.7k | 2d ago | CLAUDE.md |
| claude-memby thedotmack | 100 | 113.5k | today | CLAUDE.md |
| taste-skillby Leonxlnx | 100 | 110.6k | today | CLAUDE.md |
| Agent-Reachby Panniantong | 100 | 109.2k | today | CLAUDE.md |
| Understand-Anythingby Egonex-AI | 100 | 90.9k | 10d ago | CLAUDE.md |
Frequently asked questions
- How do I install dev-browser?
- Run
npx skills add SawyerHood/dev-browser. The install tabs above show the steps for each supported agent. - Which AI agents does dev-browser work with?
- It is written for Claude Code, as a CLAUDE.md file. Other agents that read the same format can often use it too.
- Is dev-browser safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review judged it risky: The README includes a section titled 'Allowing dev-browser in Claude Code without permission prompts' that tells users to add 'Bash(dev-browser *)' to the permissions.allow list in .claude/settings.json or ~/.claude/settings.json, which dis. It is MIT-licensed and scores 95/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is dev-browser still maintained?
- The repository was last updated 2 days ago, so dev-browser is actively maintained.
Skill content
View source on GitHubBrought to you by Do Browser.
A browser automation tool that lets AI agents and developers control browsers with sandboxed JavaScript scripts.
Key features:
- Sandboxed execution - Scripts run in a QuickJS WASM sandbox with no host access
- Persistent pages - Navigate once, interact across multiple scripts
- Auto-connect - Connect to your running Chrome or launch a fresh Chromium
- Full Playwright API - goto, click, fill, locators, evaluate, screenshots, and more
Demo
https://github.com/user-attachments/assets/c6cf7fb9-b1dc-46ed-93b9-6e7240990c53
CLI Installation
npm install -g dev-browser
dev-browser install # installs Playwright + Chromium
Quick start
# Launch a headless browser and run a script
dev-browser --headless <<'EOF'
const page = await browser.getPage("main");
await page.goto("https://example.com", { waitUntil: "domcontentloaded" });
console.log(await page.title());
EOF
# Connect to your running Chrome (enable at chrome://inspect/#remote-debugging)
dev-browser --connect <<'EOF'
const tabs = await browser.listPages();
console.log(JSON.stringify(tabs, null, 2));
EOF
PowerShell (Windows)
@"
const page = await browser.getPage("main");
await page.goto("https://example.com", { waitUntil: "domcontentloaded" });
console.log(await page.title());
"@ | dev-browser
With --connect:
@"
const page = await browser.getPage("main");
console.log(await page.title());
"@ | dev-browser --connect
Windows notes
PowerShell install:
npm install -g dev-browser
dev-browser install
To attach to a running Chrome instance on Windows:
chrome.exe --remote-debugging-port=9222
dev-browser --connect
Windows npm installs download the native dev-browser-windows-x64.exe release asset during postinstall, and the generated npm shims invoke that executable directly.
Using with AI agents
After installing, tell your agent to run dev-browser --help — the help output includes the current LLM usage guide and API reference.
For agents that discover local skills, install or refresh the embedded skill explicitly:
dev-browser install-skill --codex # ~/.codex/skills/dev-browser/SKILL.md
dev-browser install-skill --claude # ~/.claude/skills/dev-browser/SKILL.md
dev-browser install-skill --agents # ~/.agents/skills/dev-browser/SKILL.md
Flags may be combined. With an interactive terminal, dev-browser install-skill prompts for targets. In non-interactive environments it updates all three locations, including Codex, so an older copied skill does not survive a CLI upgrade.
Idle browser cleanup
Daemon-launched named Chromium instances can be closed automatically after they have been idle for a configured duration:
dev-browser --idle-timeout 5m < script.js
DEV_BROWSER_IDLE_TIMEOUT_MS=300000 dev-browser status
The flag accepts 30s, 5m, 1h, or raw milliseconds. You can also set a user default in ~/.dev-browser/config.json:
{
"idleTimeout": "5m"
}
Precedence is --idle-timeout, then DEV_BROWSER_IDLE_TIMEOUT_MS, then idleTimeout in the user config, then disabled. Set any source to 0 to disable cleanup. The effective setting is sent to an already-running daemon and shown by dev-browser status.
Cleanup is applied independently to each named browser. Activity is measured from both the start and completion of each request, so running requests are never reaped. Only Chromium instances launched by dev-browser are eligible; browsers attached with --connect are never closed by idle cleanup. Closing an idle browser does not delete its profile directory, cookies, or login state, and the next request relaunches it from the same persistent profile. dev-browser stop keeps its existing behavior of stopping the daemon and all managed browser connections.
By default, Claude Code asks for approval each time it runs a bash command. You can pre-approve dev-browser so it runs without permission checks by adding it to the allow list in your settings.
Per-project — add to .claude/settings.json in your project root:
{
"permissions": {
"allow": [
"Bash(dev-browser *)"
]
}
}
Per-user (global) — add to ~/.claude/settings.json:
{
"permissions": {
"allow": [
"Bash(dev-browser *)"
]
}
}
The pattern Bash(dev-browser *) matches any command starting with dev-browser followed by arguments (e.g. dev-browser --headless, dev-browser --connect). This is safe because dev-browser scripts run in a sandboxed QuickJS WASM environment with no host filesystem or network access.
You can also allow related commands in the same list:
{
"permissions": {
"allow": [
"Bash(dev-browser *)",
"Bash(npx dev-browser *)"
]
}
}
</details> <details> <summary>Legacy Claude Code plugin installation</summary>Tip: If you've already been prompted and clicked "Always allow", Claude Code adds the specific command pattern automatically. The settings file approach lets you pre-approve it before the first run.
Claude Code
/plugin marketplace add sawyerhood/dev-browser
/plugin install dev-browser@sawyerhood/dev-browser
Restart Claude Code after installation.
</details>Script API
Scripts run in a sandboxed QuickJS runtime (not Node.js). Available globals:
// Browser control
browser.getPage(nameOrId) // Get/create named page, or connect to tab by targetId
browser.newPage() // Create anonymous page (cleaned up after script)
browser.listPages() // List all tabs: [{id, url, title, name}]
browser.closePage(name) // Close a named page
// File I/O (restricted to ~/.dev-browser/tmp/)
await saveScreenshot(buf, name) // Save screenshot buffer, returns path
await writeFile(name, data) // Write file, returns path
await readFile(name) // Read file, returns content
// Output
console.log/warn/error/info // Routed to CLI stdout/stderr
Pages are full Playwright Page objects — goto, click, fill, locator, evaluate, screenshot, and everything else, including page.snapshotForAI({ track?, depth?, timeout? }), which returns { full, incremental? } for AI-friendly page snapshots.
Every page also exposes two computer-use toolsets:
page.cua.*— pixel/vision tier:screenshot()saves a JPEG whose pixels map 1:1 onto CSS coordinates at any DPR and returns{ path, width, height };click,doubleClick,drag,move,scroll,keypress, andtypeact at those coordinates.page.domCua.*— DOM-id tier:getVisibleDom()snapshots visible interactive elements as pseudo-HTML lines withnode_id=N;click,doubleClick, andscrollact by node id (ids are only valid against the latest snapshot of the current document), plustypeandkeypressfor the focused element.
Benchmarks
| Method | Time | Cost | Turns | Success | | ----------------------- | ------- | ----- | ----- | ------- | | Dev Browser | 3m 53s | $0.88 | 29 | 100% | | Playwright MCP | 4m 31s | $1.45 | 51 | 100% | | Playwright Skill | 8m 07s | $1.45 | 38 | 67% | | Claude Chrome Extension | 12m 54s | $2.81 | 80 | 100% |
See dev-browser-eval for methodology.
License
MIT
Author
Related Skills
claude-mem
113.5kPersistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
taste-skill
110.6kAgent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages
Agent-Reach
109.2kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
Understand-Anything
90.9kGraphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about. Works with Claude Code, Codex, Cursor, Copilot, Gemini CLI, and more.
Languages
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.
