Browser Opener Skill

Opens URLs in multiple browsers (Chrome, Firefox, Edge, Safari) across platforms, supporting default, specific browsers, incognito, new windows, and headless...

Security Scan

The skill's code, instructions, and requirements are consistent with a simple cross‑platform browser launcher and do not request unrelated credentials or privileged persistence.

Purpose & Capability

Name and description match the included code and examples: the bundle implements a Python BrowserOpener that finds browser executables and launches URLs with flags (incognito, new-window, headless). There are no unrelated environment variables, credentials, or install steps requested.

Instruction Scope

SKILL.md tells the agent to run the provided script with URL and options, which is exactly what the script does. The script searches PATH and common install paths and invokes browser executables via subprocess.run. It does not read unrelated user files or send data to external endpoints. Note: launching system executables depends on PATH and installed binaries — a malicious binary on PATH could be executed, which is an environment/configuration risk inherent to any tool that invokes external programs.

Install Mechanism

There is no install spec (instruction-only), so nothing is downloaded or executed by an installer. The repository includes Python scripts that will be present in the skill bundle. The README's suggested 'pip install webbrowser subprocess argparse' is incorrect (these are stdlib modules) — this is a documentation inaccuracy but not a direct security issue.

Credentials

The skill requests no environment variables, keys, or config paths. The code uses platform/os APIs and subprocess to locate and run browser executables only — no credentials or unrelated services are accessed.

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and contains no autonomous persistence or background agents. It only exposes command-line usage and a Python API.

Assessment

This skill appears to do what it says: open URLs in browsers. Before installing or running it consider: (1) review scripts/open_browser.py yourself to confirm no hidden behavior; (2) be aware it runs browser executables found on PATH or in common install locations — if an adversary has placed a malicious executable with a browser name on your PATH, that could be executed; (3) run in a sandbox if you are unsure, and do not provide secrets to this skill (it doesn't need any); (4) note the README incorrectly lists stdlib modules for pip installation — you only need Python to run the script. If you want extra assurance, run the examples locally in an isolated environment first.

This skill provides cross-platform browser opening capabilities with support for multiple browsers.

Quick Start

Open a URL with the default browser:

# Using the browser opener script
python scripts/open_browser.py --url https://www.google.com

Open a URL with a specific browser:

# Open with Chrome
python scripts/open_browser.py --url https://www.google.com --browser chrome

# Open with Firefox
python scripts/open_browser.py --url https://www.google.com --browser firefox

# Open with Edge
python scripts/open_browser.py --url https://www.google.com --browser edge

Supported Browsers

• Chrome: chrome, google-chrome, google-chrome-stable
• Firefox: firefox, mozilla-firefox
• Edge: edge, microsoft-edge
• Safari: safari, apple-safari
• Default: default (uses system default browser)

Usage Examples

See examples/ for comprehensive usage examples including:

• Basic URL opening
• Browser-specific launching
• Batch opening multiple URLs
• Error handling scenarios

Browser Support Details

For detailed information about browser support on different platforms, see references/browser_support.md.

Command Line Options

The scripts/open_browser.py script supports the following options:

• --url: URL to open (required)
• --browser: Browser to use (optional, defaults to 'default')
• --new-window: Open in new window (optional)
• --incognito: Open in incognito/private mode (optional)
• --headless: Open in headless mode (optional, for testing)

Error Handling

The script includes comprehensive error handling for:

• Invalid URLs
• Browser not found
• Permission issues
• Platform-specific errors