Grok Browser

Query Grok AI via browser automation. Use when you need to ask Grok questions, get AI responses, or use Grok's DeepSearch/Think features. Copies response tex...

Security Scan

The skill's instructions match its purpose (automating Grok in Chrome) but include execution of a hardcoded, user-specific local script and clipboard access while advising bypass of the agent profile — these elements are disproportionate and risky.

Purpose & Capability

The name/description align with the instructions: it automates Chrome to query Grok and copy responses. However the SKILL.md contains macOS-specific commands (open, pbpaste), a hardcoded user path (/Users/eason/clawd/scripts/attach-browser-relay.sh), and an explicit 'never profile=clawd' note — suggesting the author built it for a single developer environment rather than a generic skill.

Instruction Scope

Instructions explicitly tell the agent to execute a local attach script at a fixed path and to read the system clipboard (pbpaste). They also instruct avoiding the agent's profile, which may be an attempt to bypass sandboxing. Executing an arbitrary local script and reading clipboard contents go beyond simply driving a web UI and can exfiltrate or run arbitrary local code.

Install Mechanism

This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by the skill package itself. The scanner had no artifacts to analyze.

Credentials

The skill declares no credentials/env vars, which is appropriate, but its runtime instructions require access to a user-local script and the system clipboard. Those are sensitive resources not strictly necessary for a portable automation recipe and are disproportionate unless you explicitly control and inspect the local script.

Persistence & Privilege

always is false and there is no install or self-modification. The skill does not request permanent presence or modify other skills. The main privilege risk is runtime (executing local script / reading clipboard), not persistence.

What to consider before installing

This skill will drive your Chrome session to query Grok, but it asks you (in practice) to run a specific local script and to read the clipboard. Before installing or using it: 1) Inspect the file /Users/eason/clawd/scripts/attach-browser-relay.sh (or any attach script you are asked to run); don't run it unless you trust its contents. 2) Be cautious about pbpaste/clipboard reads — your clipboard can contain passwords or tokens. 3) Consider adapting the instructions to a path and profile on your machine instead of the hardcoded /Users/eason/... path. 4) Confirm what the 'Browser Relay' extension does and that it comes from a trusted publisher. 5) Avoid using this skill on shared or production machines; if you must test, do so in an isolated environment. If you cannot verify the attach script and extension, treat the skill as untrusted.

Grok Browser Skill

Query Grok (grok.com) via Chrome browser automation and copy responses.

Prerequisites

• Chrome with Browser Relay extension
• Use profile=chrome (never profile=clawd)

Quick Start

# 1. Open Chrome with Grok
open -a "Google Chrome" "https://grok.com"
sleep 3

# 2. Attach browser relay
/Users/eason/clawd/scripts/attach-browser-relay.sh

# 3. Check tabs
browser action=tabs profile=chrome

Input Method (IMPORTANT!)

Grok uses contenteditable, not a standard textbox. Use JavaScript evaluate:

// Type query via evaluate
browser action=act profile=chrome targetId=<id> request={
  "kind": "evaluate",
  "fn": "(() => { const editor = document.querySelector('[contenteditable=\"true\"]'); if(editor) { editor.focus(); editor.innerText = 'YOUR_QUERY_HERE'; return 'typed'; } return 'not found'; })()"
}

Then submit with Enter:

browser action=act profile=chrome targetId=<id> request={"kind":"press","key":"Enter"}

Complete Workflow

1. Open Grok & Attach Relay

open -a "Google Chrome" "https://grok.com"
sleep 3
/Users/eason/clawd/scripts/attach-browser-relay.sh

2. Get Tab ID

browser action=tabs profile=chrome

Look for Grok tab, note the targetId.

3. Input Query

browser action=act profile=chrome targetId=<id> request={
  "kind": "evaluate",
  "fn": "(() => { const e = document.querySelector('[contenteditable=\"true\"]'); if(e) { e.focus(); e.innerText = 'What is quantum computing?'; return 'ok'; } return 'fail'; })()"
}

4. Submit

browser action=act profile=chrome targetId=<id> request={"kind":"press","key":"Enter"}

5. Wait for Response

sleep 10-20  # Grok can take 10-30 seconds

6. Snapshot & Find Copy Button

browser action=snapshot profile=chrome targetId=<id>

Look for button with "Copy" in the response area (usually last message).

7. Click Copy

browser action=act profile=chrome targetId=<id> request={"kind":"click","ref":"<copy_button_ref>"}

8. Read Clipboard

pbpaste

Response Detection

After submitting, response is complete when:

• Copy button appears below the response text
• Response time indicator shows (e.g., "952ms")
• Suggested follow-up buttons appear

New Chat for New Topics

Always start fresh chats for unrelated queries to avoid context overflow:

browser action=navigate profile=chrome targetId=<id> targetUrl="https://grok.com"

Or use Cmd+J shortcut:

browser action=act profile=chrome targetId=<id> request={"kind":"press","key":"Meta+j"}

DeepSearch

To enable DeepSearch, click the button before submitting:

# In snapshot, find DeepSearch button
browser action=act profile=chrome targetId=<id> request={"kind":"click","ref":"<deepsearch_ref>"}
# Then type and submit as normal

Troubleshooting

Tab Not Found

Re-run attach script:

/Users/eason/clawd/scripts/attach-browser-relay.sh

Relay Not Working

Check status:

browser action=status profile=chrome

Should show cdpReady: true.

Context Overflow

Navigate to fresh grok.com, don't continue old chats.

Multiple Windows

Close extra Chrome windows. Keep only one for reliable relay.

Copy Button Not Found

Response may still be streaming. Wait longer and snapshot again.

Example Session

# Open and attach
exec: open -a "Google Chrome" "https://grok.com"
exec: sleep 3
exec: /Users/eason/clawd/scripts/attach-browser-relay.sh

# Get tab
browser action=tabs profile=chrome
# Returns targetId: ABC123...

# Type query
browser action=act profile=chrome targetId=ABC123 request={
  "kind":"evaluate",
  "fn":"(() => { const e = document.querySelector('[contenteditable=\"true\"]'); e.focus(); e.innerText = 'Explain quantum entanglement briefly'; return 'ok'; })()"
}

# Submit
browser action=act profile=chrome targetId=ABC123 request={"kind":"press","key":"Enter"}

# Wait
exec: sleep 15

# Snapshot to find Copy button
browser action=snapshot profile=chrome targetId=ABC123
# Find Copy button ref, e.g., e326

# Copy
browser action=act profile=chrome targetId=ABC123 request={"kind":"click","ref":"e326"}

# Read result
exec: pbpaste