메뉴
Reuse your real Chrome's logged-in cookies in the browse daemon, so authenticated pages work without re-logging-in.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Fast headless browser for QA testing and site dogfooding. Navigate any URL, interact with elements, verify page state, diff before/after actions, take annotated screenshots, check responsive layouts, test forms and uploads, handle dialogs, and assert element states. ~100ms per command.
Chief Security Officer mode. Infrastructure-first security audit: secrets archaeology, dependency supply chain, CI/CD pipeline security, LLM/AI security, skill supply chain scanning, plus OWASP Top 10, STRIDE threat modeling, and active verification. Two modes: daily (zero-noise, 8/10 confidence gate) and comprehensive (monthly deep scan, 2/10 bar). Trend tracking across audit runs.
CEO/founder-mode plan review. Rethink the problem, find the 10-star product, challenge premises, expand scope when it creates a better product. Four modes: SCOPE EXPANSION (dream big), SELECTIVE EXPANSION (hold scope + cherry-pick expansions), HOLD SCOPE (maximum rigor), SCOPE REDUCTION (strip to essentials).
Update the installed vibestack pack to the latest release — detect the install (global git checkout or a project-local vendored copy), run the upgrade, run version migrations, and show what changed.
Safety guardrails for destructive commands. Warns before rm -rf, DROP TABLE, force-push, git reset --hard, kubectl delete, and similar destructive operations. User can override each warning.
Generate missing documentation from scratch for a feature, module, or entire project. Uses the Diataxis framework (tutorial / how-to / reference / explanation) to produce complete, structured documentation. Can be invoked standalone or called by /document-release when it finds coverage gaps.
| name | connect-chrome |
| description | Reuse your real Chrome's logged-in cookies in the browse daemon, so authenticated pages work without re-logging-in. |
| allowed-tools | ["Bash"] |
| triggers | ["connect to chrome","use my chrome session","reuse browser login","import chrome cookies","browse as me"] |
Use when the browse daemon needs to act as your logged-in self — reuse the cookies/sessions from your real Chrome (e.g. QA-ing a page behind a login) without typing credentials into the automated browser.
{{include lib/snippets/browse-setup.md}}
If BROWSE_NOT_AVAILABLE: tell the user the browse shim is required and stop.
Ask the user to launch (or relaunch) Chrome with a debugging port — this exposes its cookies over CDP without leaking the password:
"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" --remote-debugging-port=9222google-chrome --remote-debugging-port=9222chrome.exe --remote-debugging-port=9222Confirm it is reachable:
curl -s http://127.0.0.1:9222/json/version >/dev/null 2>&1 && echo "CHROME_CDP_OK" || echo "CHROME_CDP_UNREACHABLE"
If CHROME_CDP_UNREACHABLE: the port differs or Chrome isn't in debug mode — ask
the user to confirm the launch flag and port.
"$B" daemon >/dev/null 2>&1 & # persistent session (skip if already running)
sleep 1
"$B" cookies import-cdp http://127.0.0.1:9222
Navigate to a page that requires login and confirm you're signed in:
"$B" goto <authenticated-url>
"$B" snapshot # look for signed-in markers (account name, logout link)
Report whether the session carried over. Stop the daemon with "$B" daemon-stop
when done. Cookies stay in the daemon's session only — they are never written to
the repo or logged.