| name | authenticated-web-research |
| description | Use stronger lawful workflows for sites the user is authorized to access, including local browser login, session-aware browsing, JS-heavy pages, and post-login extraction. Do not bypass access controls. |
Authenticated Web Research
Use this skill when the target site requires login, renders content dynamically, or is available only after the user signs in with their own account.
Hard Rule
Do not bypass access controls, paywalls, or anti-bot protections.
This skill is for user-authorized access only:
- the user logs in with their own account
- the browser session stays local
- extraction continues only after access is legitimately available
When To Use
- direct fetch returns login pages or partial shells
- search results show content exists, but direct fetch is blocked
- the site depends on client-side rendering
- the user explicitly wants help with a site they can access themselves
Workflow
1. Diagnose the failure mode
Classify the blocker:
- login required
- JS-heavy rendering
- geo or locale mismatch
- thin snippet-only indexing
- temporary fetch incompatibility
2. Use browser-based loading
Before concluding the page is unavailable:
- open the page in the local browser
- wait for client-side content to render
- inspect visible text, links, and network behavior where appropriate
- prefer the browser path over plain fetch for JS-heavy pages
3. Let the user complete login locally
If login is required and the user is authorized:
- open the login flow in the local browser
- ask only for the minimum interaction needed, such as "please complete login in the opened page"
- do not ask for raw passwords or secrets in chat when browser login is possible
4. Continue within the authenticated session
After user login:
- navigate to the target page
- search within the site or account area
- extract the needed facts, links, or structured results
- note which facts came from authenticated views
5. Prefer official post-login surfaces
If available, prefer:
- account dashboards
- export pages
- official APIs
- RSS or feeds
- site search
- sitemaps
- downloadable reports
Output Pattern
Return:
- what was reachable publicly
- what required authenticated access
- whether the user completed login locally
- what was extracted after authorized access
- what still remains unavailable
