Menu
Reuse your real Chrome's logged-in cookies in the browse daemon, so authenticated pages work without re-logging-in.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Fast headless browser for QA testing and site dogfooding. Navigate any URL, interact with elements, verify page state, diff before/after actions, take annotated screenshots, check responsive layouts, test forms and uploads, handle dialogs, and assert element states. ~100ms per command.
Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification. Two modes: daily (zero-noise, 8/10 confidence gate) and comprehensive (monthly deep scan, 2/10 bar). Trend tracking across audit runs.
CEO/founder-mode plan review. Rethink the problem, find the 10-star product, challenge premises, expand scope when it creates a better product. Four modes: SCOPE EXPANSION (dream big), SELECTIVE EXPANSION (hold scope + cherry-pick expansions), HOLD SCOPE (maximum rigor), SCOPE REDUCTION (strip to essentials).
Update the installed vibestack pack to the latest release — detect the install (global git checkout or a project-local vendored copy), run the upgrade, run version migrations, and show what changed.
Safety guardrails for destructive commands. Warns before rm -rf, DROP TABLE, force-push, git reset --hard, kubectl delete, and similar destructive operations. User can override each warning.
Generate missing documentation from scratch for a feature, module, or entire project. Uses the Diataxis framework (tutorial / how-to / reference / explanation) to produce complete, structured documentation. Can be invoked standalone or called by /document-release when it finds coverage gaps.
| name | connect-chrome |
| description | Reuse your real Chrome's logged-in cookies in the browse daemon, so authenticated pages work without re-logging-in. |
| allowed-tools | ["Bash"] |
| triggers | ["connect to chrome","use my chrome session","reuse browser login","import chrome cookies","browse as me"] |
Use when the browse daemon needs to act as your logged-in self — reuse the cookies/sessions from your real Chrome (e.g. QA-ing a page behind a login) without typing credentials into the automated browser.
{{include lib/snippets/browse-setup.md}}
If BROWSE_NOT_AVAILABLE: tell the user the browse shim is required and stop.
Ask the user to launch (or relaunch) Chrome with a debugging port — this exposes its cookies over CDP without leaking the password:
"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" --remote-debugging-port=9222google-chrome --remote-debugging-port=9222chrome.exe --remote-debugging-port=9222Confirm it is reachable:
curl -s http://127.0.0.1:9222/json/version >/dev/null 2>&1 && echo "CHROME_CDP_OK" || echo "CHROME_CDP_UNREACHABLE"
If CHROME_CDP_UNREACHABLE: the port differs or Chrome isn't in debug mode — ask
the user to confirm the launch flag and port.
"$B" daemon >/dev/null 2>&1 & # persistent session (skip if already running)
sleep 1
"$B" cookies import-cdp http://127.0.0.1:9222
Navigate to a page that requires login and confirm you're signed in:
"$B" goto <authenticated-url>
"$B" snapshot # look for signed-in markers (account name, logout link)
Report whether the session carried over. Stop the daemon with "$B" daemon-stop
when done. Cookies stay in the daemon's session only — they are never written to
the repo or logged.