Agent Browser with Camoufox

One-click deployment of camoufox anti-detection browser with modified agent-browser. Patches agent-browser to auto-detect camoufox/firefox from executable pa...

Security Scan

The skill's steps match its stated purpose (install camoufox and patch agent-browser), but the provided installer executes remote bootstrap scripts and replaces a globally installed package — practices that are risky and deserve review before running.

Purpose & Capability

The name/description claim to deploy camoufox and patch agent-browser; the SKILL.md and install.sh perform exactly those actions (install camoufox, install/locate agent-browser, modify getBrowserType, recompile, replace global package). No unrelated credentials or unexplained capabilities are requested.

Instruction Scope

The runtime instructions ask the agent/user to run a script that will download and execute third-party installers, pip packages, clone GitHub repos, edit source files, compile Rust code, and replace the globally installed agent-browser. The script performs wide filesystem writes (overwriting global npm package directories) and network downloads; it does not include checksum or signature verification of downloaded artifacts. While these actions are coherent with the goal, they grant the script broad discretion over your system.

Install Mechanism

There is no formal install spec in registry metadata; the included install.sh uses curl | sh (astral.sh for uv, sh.rustup.rs for Rust), pip installs, and git clone from GitHub. These are traceable, but any install-that-pipes-remote-scripts-to-sh and automatically writes into global package locations is a higher-risk pattern and should be reviewed before execution.

Credentials

The skill does not request environment variables, credentials, or access to unrelated config paths. The required capabilities (network access, write access to npm global path, ability to install pip/Rust) are proportionate to compiling and replacing an npm package.

Persistence & Privilege

The skill will modify/replace an existing globally installed tool (agent-browser). Although always:false and not autonomously persistent, overwriting another package's installation is a privileged action that can affect other tools/skills on the system and should be treated as sensitive.

What to consider before installing

Do not run the installer blindly. The script executes remote installers (curl | sh), downloads packages and a browser binary, and will overwrite your globally installed agent-browser. Before installing: (1) inspect install.sh line-by-line and verify every remote URL (astral.sh, sh.rustup.rs, GitHub repos); (2) prefer manual steps (install uv, pip install camoufox, clone agent-browser yourself) or run the script inside a disposable VM/container; (3) back up the global agent-browser path as suggested and keep the backups offline; (4) verify sources/checksums of downloaded binaries where possible; (5) be aware this enables an anti-detection tool (may violate service ToS/legal constraints); (6) if unsure, ask the publisher for signed releases or a reproducible build process rather than running an automated replace of system packages.

🚀 一键部署 camoufox + agent-browser 反检测浏览器工具链。

解决的问题

agent-browser 默认只支持 Chromium，但我们需要：

1. 反检测能力: camoufox 能绕过 Bilibili、Cloudflare 等风控
2. Firefox 支持: 修改 agent-browser 自动识别 camoufox/firefox 路径
3. 一键部署: 自动化繁琐的安装、修改、编译流程

概述

这个 skill 帮助用户快速部署：

• camoufox: 基于 Firefox 的反检测浏览器
• agent-browser: 浏览器自动化工具（修改后支持 camoufox）

关键修改点

agent-browser 默认使用 Chromium，需要修改以支持 camoufox/firefox：

1. 修改 browser.ts: 自动检测 executablePath 中的 camoufox/firefox 关键字
2. 正确的 camoufox 路径: ~/Library/Caches/camoufox/Camoufox.app/Contents/MacOS/camoufox (macOS)
3. 重新编译: 需要重新编译 Rust CLI 并替换 npm 包中的二进制

使用方法

一键安装

运行安装脚本：

bash ~/.openclaw/workspace/skills/camoufox-deploy/scripts/install.sh

这个脚本会自动完成：

1. 安装 uv (Python 包管理器)
2. 用 uv 安装 camoufox Python 包
3. 下载 camoufox 浏览器二进制
4. 安装 agent-browser npm 包
5. 修改 agent-browser 源码（自动检测 firefox/camoufox）
6. 重新编译 Rust CLI
7. 替换系统版本

手动步骤（如果需要）

1. 安装 uv

curl -LsSf https://astral.sh/uv/install.sh | sh

2. 安装 camoufox

uv pip install camoufox --system

3. 下载 camoufox 浏览器

python3 -c "from camoufox.sync_api import Camoufox; Camoufox()"

或手动下载：

# macOS 路径
~/Library/Caches/camoufox/Camoufox.app/Contents/MacOS/camoufox

4. 安装 agent-browser

npm install -g agent-browser

5. 找到并修改 browser.ts

找到 agent-browser 的源码目录：

# 全局安装位置
npm root -g
cd $(npm root -g)/agent-browser

# 或克隆源码
git clone https://github.com/browser-use/agent-browser.git
cd agent-browser

修改 src/browser.ts 中的 getBrowserType 函数：

private getBrowserType(executablePath: string): 'chromium' | 'firefox' {
  const lowerPath = executablePath.toLowerCase();
  if (lowerPath.includes('firefox') || lowerPath.includes('camoufox')) {
    return 'firefox';
  }
  return 'chromium';
}

6. 重新编译

npm install
npm run build

7. 替换系统版本

# 找到全局安装位置
GLOBAL_PATH=$(npm root -g)/agent-browser

# 备份原版本
cp -r "$GLOBAL_PATH" "${GLOBAL_PATH}.backup"

# 替换为修改版本
cp -r ./ "$GLOBAL_PATH/"

验证安装

# 检查 camoufox
camoufox --version

# 检查 agent-browser
agent-browser --version

# 运行测试
agent-browser --executable-path ~/Library/Caches/camoufox/Camoufox.app/Contents/MacOS/camoufox

故障排除

问题: camoufox 找不到

解决: 确认路径正确

ls ~/Library/Caches/camoufox/Camoufox.app/Contents/MacOS/camoufox

问题: agent-browser 仍使用 chromium

解决: 确认修改生效

cat $(npm root -g)/agent-browser/dist/browser.js | grep -A5 "getBrowserType"

问题: Rust 编译失败

解决: 安装 Rust

curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
source ~/.cargo/env

文件位置

文件	位置
camoufox 可执行文件	~/Library/Caches/camoufox/Camoufox.app/Contents/MacOS/camoufox
agent-browser 全局安装	$(npm root -g)/agent-browser
安装脚本	~/.openclaw/workspace/skills/camoufox-deploy/scripts/install.sh

参考

• camoufox 文档
• agent-browser 仓库