Real Chrome browser automation via Interceptor extension — controls the actual browser from inside (zero CDP fingerprint, passes all major bot detection checks including BrowserScan, Pixelscan, CreepJS, Fingerprint.com). Stays logged in, uses your real sessions. Compound commands (open, read, act, inspect) collapse multi-step flows into single calls. Unique capabilities: monitor/replay system (record user actions → export replayable plan scripts for regression), network log (auto-captures all fetch/XHR), scene graph for rich editors (Google Docs, Canva, Slides). Workflows: VerifyDeploy, Reproduce (open affected page BEFORE code analysis — mandatory per rules), RecordFlow, ReplayFlow, TestForm, Update. MANDATORY for all visual verification — never use agent-browser for deploy confirmation. USE WHEN verify deploy, confirm UI, check page, screenshot verification, interceptor, debug web, troubleshoot, visual check, authenticated page, bot detection bypass, agent-browser failing, reproduce bug, record flow, replay
Real Chrome browser automation via Interceptor extension — controls the actual browser from inside (zero CDP fingerprint, passes all major bot detection checks including BrowserScan, Pixelscan, CreepJS, Fingerprint.com). Stays logged in, uses your real sessions. Compound commands (open, read, act, inspect) collapse multi-step flows into single calls. Unique capabilities: monitor/replay system (record user actions → export replayable plan scripts for regression), network log (auto-captures all fetch/XHR), scene graph for rich editors (Google Docs, Canva, Slides). Workflows: VerifyDeploy, Reproduce (open affected page BEFORE code analysis — mandatory per rules), RecordFlow, ReplayFlow, TestForm, Update. MANDATORY for all visual verification — never use agent-browser for deploy confirmation. USE WHEN verify deploy, confirm UI, check page, screenshot verification, interceptor, debug web, troubleshoot, visual check, authenticated page, bot detection bypass, agent-browser failing, reproduce bug, record flow, replay flow, test form, QA test, regression check. NOT FOR batch headless automation (use Browser). NOT FOR multi-page crawling or scraping at scale with residential proxy needs (use BrightData).
version
2.0.0
effort
medium
Customization
Before executing, check for user customizations at:~/.claude/PAI/USER/SKILLCUSTOMIZATIONS/Interceptor/
If this directory exists, load and apply any PREFERENCES.md, configurations, or resources found there. These override default behavior. If the directory does not exist, proceed with skill defaults.
MANDATORY: Voice Notification (REQUIRED BEFORE ANY ACTION)
You MUST send this notification BEFORE doing anything else when this skill is invoked.
Send voice notification:
curl -s -X POST http://localhost:31337/notify \
-H "Content-Type: application/json" \
-d '{"message": "Running the WORKFLOWNAME workflow in the Interceptor skill to ACTION"}' \
> /dev/null 2>&1 &
Output text notification:
Running the **WorkflowName** workflow in the **Interceptor** skill to ACTION...
This is not optional. Execute this curl command immediately upon skill invocation.
Interceptor — Stealth Browser Automation
Tool:interceptor CLI — Chrome extension that controls the real browser from the inside.
Repo:https://github.com/Hacker-Valley-Media/slop-browserInstall:~/Projects/interceptor (built from source — see Workflows/Update.md)
Why Interceptor?
agent-browser (the Browser skill) uses CDP — sites can detect it. Interceptor is a Chrome extension that operates through the actual browser UI. No debugger, no automation flags, no separate browser instance. You stay logged in, you pass bot detection, the agent sees what you see.
Prerequisites
Chrome or Brave running with the Interceptor extension loaded
interceptor CLI in PATH (/opt/homebrew/bin/interceptor)
interceptor-daemon in PATH (/opt/homebrew/bin/interceptor-daemon)
(Optional, macOS) interceptor-bridge helper app — see "Bridge" section below
Bridge — macOS Native Helper App
The bridge is an optional Swift helper that runs as a LaunchAgent and unlocks
capabilities the Chrome extension can't provide on its own: OS-level synthetic
input (act --os), accessibility tree of native macOS apps, app control,
clipboard, screen capture beyond Chrome, audio/speech, files, notifications,
HealthKit, Apple Intelligence. ~95% of typical work doesn't need it.
Status check:interceptor status reports bridge: running with PID + socket
when it's up, or bridge: not running when it isn't.
Lifecycle (install / verify / troubleshoot / uninstall) lives entirely in
Workflows/Update.md section 6. Future updates flow through the Update
workflow — never reach for the upstream install-bridge.sh directly; that
script breaks on Apple Silicon (/usr/local/bin needs sudo, but sudoing the
whole script makes launchctl bootstrap target uid 0 instead of the user).
The skill's procedure is the canonical one.
Security model — read before installing:
Transport is a UNIX domain socket at /tmp/interceptor-bridge.sock.
Local-only; no network listener; not reachable from another machine.
No authentication on the socket. Any local process running as your user
can connect and execute every bridge action — including synthetic input,
clipboard read, audio capture, screenshots. macOS TCC permissions
(Accessibility, Input Monitoring, Screen Recording, Microphone) are granted
to the bridge once and inherited by every socket client.
Marginal risk is supply-chain: a malicious package installed via
bun/brew/npm gains a one-step path to OS-level input/screen/clipboard without
needing its own permission grants — the bridge has them.
Single-user Mac threat model: acceptable, since anything running as you can
already do this with effort. Multi-user Macs need socket hardening (see
Update.md section 6c).
Binary built locally from ~/Projects/interceptor/interceptor-bridge/Sources/,
not a downloaded prebuilt. Provenance is Swift source we just compiled.
Compound Commands (Preferred)
These collapse multi-step patterns into single invocations — fewer tool calls, fewer tokens:
interceptor open "https://example.com"# Open URL, wait, return tree + text
interceptor open <url> --tree-only|--text-only|--full|--no-wait
interceptor read# Tree + text for active tab
interceptor read <ref> # Tree + text for element subtree
interceptor read --include-style|--include-frames
interceptor act <ref> # Click + wait + return updated tree + diff
interceptor act <ref> "value"# Type + wait + return updated tree
interceptor act <ref> --os # OS-level trusted input (requires bridge)
interceptor act <ref> --keys "Enter"# Send keyboard shortcut
interceptor inspect # Tree + text + network log + headers
interceptor inspect --net-only # Network only
Core Commands
# State + discovery
interceptor state [--full] # DOM tree + metadata
interceptor tree [--filter all] [--depth N] [--max-chars N]
interceptor diff # Changes since last state/tree read
interceptor find "query" [--role button] # Find elements by name
interceptor text [<index|ref>]
interceptor html <index|ref>
# Element interaction
interceptor click <ref> # Click by ref (eN)
interceptor click <ref> --at X,Y # Click at coordinates
interceptor dblclick <ref> --at X,Y
interceptor rightclick <ref> --at X,Y
interceptor type <ref> <text> [--append]
interceptor type"role:name" <text> # Semantic selector
interceptor select <ref> <value> # Dropdown
interceptor focus|hover <ref>
interceptor drag <ref> --from X,Y --to X,Y [--steps N] [--duration MS]
interceptor keys "<combo>"# e.g. "Control+A"# Navigation + tabs
interceptor navigate <url>
interceptor back | forward
interceptor scroll <up|down|top|bottom>
interceptor wait <ms> | wait-stable [--ms N] [--timeout N]
interceptor tabs
interceptor tab new [url] | tab close [id] | tab switch <id>
# Capture
interceptor screenshot [--save] [--format png|jpeg] [--full] [--clip X,Y,W,H] [--element N]
interceptor eval <code> [--main] # JS in isolated or main world
interceptor capture start | frame | stop # tabCapture stream# Style injection (test redesigns live)
interceptor style inject --css "<rules>" [--top-only]
interceptor style remove <handle>
# Cookies
interceptor cookies <domain>
interceptor cookies set <json>
interceptor cookies delete <url> <name>
Record real user actions on the active tab, replay as a deterministic plan script.
interceptor monitor start ["instruction"] # Start recording
interceptor monitor pause | resume
interceptor monitor stop # End + emit summary
interceptor monitor status [--all]
interceptor monitor list # All sessions
interceptor monitor tail [--current] [--raw] # Live tail
interceptor monitor export <sessionId> # Aligned text
interceptor monitor export <sessionId> --plan # Replay script
interceptor monitor export <sessionId> --json
Canvas (Rich Web Apps)
For apps that render to <canvas> (Figma, Excalidraw, in-house editors):
interceptor canvas list | status
interceptor canvas log [N] [--kind fillText]
interceptor canvas objects [N] [--kind text]
interceptor canvas model | routes
interceptor canvas ocr N [--region X,Y,W,H]
interceptor canvas read N [--format png] [--region X,Y,W,H] [--webgl]
interceptor canvas diff <url1> <url2> [--threshold 10] [--image]
Scene Graph (Rich Editors — Google Docs/Slides, Canva)
interceptor scene profile [--verbose]
interceptor scene list [--type shape|text|image|page|embed|slide]
interceptor scene click <id> | dblclick <id> | select <id>
interceptor scene hit <x> <y> # ID object at coordinates
interceptor scene selected | text [--with-html]
interceptor scene insert "<text>"
interceptor scene cursor-to <x> <y>
interceptor scene slide list | current | goto <index> | notes [--slide N]
interceptor scene render <id> [--save]
interceptor scene zoom
interceptor scene ... --profile <name> # Force profile, bypass detection
LinkedIn
interceptor linkedin event [url] # Event + post data via DOM + network
interceptor linkedin attendees [url] # Attendees with override + enrichment
interceptor batch '<json_array>' [--stop-on-error] [--timeout MS]
interceptor status # Daemon + bridge state (local check)
interceptor help
Key Rules
Requires Chrome running — it's an extension, not a standalone binary.
Refs use eN syntax — e12 not @e12. No @ prefix.
Cross-frame refs — read --include-frames returns refs like e<frameId>_<n> for non-top frames.
--json is a global flag for structured output.
Daemon auto-starts — first command launches it; no manual start needed.
Bridge is optional — only needed for act --os and OS-trusted input. Without it, interceptor falls back to in-page synthetic events.
Delegating to Agents
When spawning agents for Interceptor work:
Agent(subagent_type="general-purpose", prompt="
Use interceptor CLI for all browser work.
Commands: open <url>, read, act eN, act eN 'text', inspect, screenshot.
Compound commands preferred — they return tree + text in one call.
Refs use eN syntax (no @ prefix) from tree output.
Use --json for structured output.
[your specific task instructions here]
")
Gotchas
Screenshot ignores scroll position.interceptor screenshot (with or without --full) captures from y=0 of the document — it does not honor window.scrollTo, scrollIntoView, scroll bottom, or keys End. For tall pages, content below the fold is unreachable through screenshot. Workaround: render the section of interest at its own short URL (/problems.html, /section-3.html) and screenshot that page directly. The --clip "x,y,w,h" flag returns "Cannot read properties of undefined" — broken in the current build. (2026-04-27)
Multiple tabs at the same URL confuse routing. When two tabs both load localhost:5180/, tab switch <id> reports ok but the visually-active Chrome tab may not change, and screenshot captures whatever Chrome is showing — not what interceptor text and interceptor navigate are routing to. Close duplicate tabs before screenshotting, or always work from a freshly-opened single tab.
eval is CSP-blocked on most sites. Use eval --main to run in the page's main world instead of the isolated extension world. Even with --main, sites with strict CSP (script-src 'self') will still block string-eval; pass small expressions only and avoid Function-constructor patterns.
