authenticated-browser-session

Run authenticated browser tasks using a dedicated profile and CDP.

11|1|Updated Mar 3, 2026
One-click install
npx skills add https://github.com/ylxmf2005/AgentCorp --skill authenticated-browser-session
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: authenticated-browser-session
Source: https://github.com/ylxmf2005/AgentCorp/tree/main/agentcorp/authenticated-browser-session
Command: npx skills add https://github.com/ylxmf2005/AgentCorp --skill authenticated-browser-session

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Tasks requiring authenticated browser state can run without leaking credentials, by using a dedicated browser profile and in-browser execution that preserves cookies, CSRF tokens, and SSO behavior in a safe, observable way.

Core Features & Use Cases

  • Dedicated, isolated browser profile for each task to keep user credentials separate from daily browsing.
  • Page-context JavaScript execution via DevTools Protocol to prove authenticated behavior without exporting credentials.
  • Safety-guided workflow: explicit login confirmation, redacted evidence, and auditable traces for debugging, API probes, and end-to-end tests.

Quick Start

Log in once in the dedicated browser profile, then run your checks using the provided scripts.

Frequently Asked Questions about authenticated-browser-session

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run E2E tests with a real logged-in browser session without exposing credentials?

You can run E2E tests with a real logged-in browser session by using a dedicated, isolated browser profile. This method preserves cookies and SSO behavior while executing page-context JavaScript via the DevTools Protocol, ensuring credentials are never exposed.

What is the best way to debug internal web apps that require SSO and CSRF tokens?

The best way to debug internal web apps requiring SSO and CSRF tokens is using a dedicated browser profile that maintains authenticated state. It proves behavior in the wild without reading local credentials or exporting sensitive tokens.

Can I use a dedicated browser profile for API probes across authenticated internal apps?

Yes, you can use a dedicated browser profile for API probes across internal apps. You log in once within the isolated profile, then execute checks using provided scripts to observe authenticated behavior safely.

Does this authenticated browser session approach work with CDP-based page-context execution?

Yes, this approach uses CDP-based page-context execution to run tasks within the real browser environment. This allows you to prove authenticated behavior while enforcing safety and operational requirements like redacted evidence and auditable traces.

Why do I need explicit user confirmation for login during automated regression verification?

Explicit user confirmation for login is required during regression verification to enforce safety-guided workflows. It ensures the dedicated browser profile authenticates securely without exporting credentials or reading sensitive local data.

Are there limitations when using an isolated browser profile for debugging authenticated behavior?

The main limitation is strict no-read of local credentials, meaning it never exports or accesses stored passwords. It relies entirely on user-confirmed logins within the dedicated profile to maintain a safe, observable authenticated state.