browser-automation

Bypass WAF bot detection for headless browser automation on protected domains.

2|Updated Apr 30, 2026
One-click install
npx skills add https://github.com/ShaggyD/agent-toolkit --skill browser-automation-shaggyd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: browser-automation
Source: https://github.com/ShaggyD/agent-toolkit/tree/main/browser/browser-automation
Command: npx skills add https://github.com/ShaggyD/agent-toolkit --skill browser-automation-shaggyd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This skill solves the issue of headless browsers being blocked by WAFs like Cloudflare, LinkedIn, and Akamai, which detect and reject standard automation tools.

Core Features & Use Cases

  • Stealth Automation: Uses a custom Chrome extension and specific browser flags to patch fingerprint vectors like navigator.webdriver, allowing access to protected sites.
  • Complex Interaction: Supports multi-step flows including snapshots, form filling, JavaScript evaluation, and full-page screenshots.
  • Use Case: Scrape job listings from LinkedIn or extract pricing data from WAF-protected SaaS portals without triggering CAPTCHAs or login walls.

Quick Start

Use the browser-automation skill to open a protected URL with stealth flags and take a full-page screenshot.

Frequently Asked Questions about browser-automation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I bypass Cloudflare WAF bot detection during headless browser automation?

To bypass WAF bot detection during headless browser automation, this skill patches fingerprinting vectors like navigator.webdriver using custom Chrome extensions and specific browser flags. It simulates realistic user behavior to prevent triggering CAPTCHAs and login walls on protected domains.

What's the best way to scrape data from WAF-protected web applications?

The best way to scrape WAF-protected web applications is using stealth automation that patches browser fingerprint vectors. This skill enables multi-step interactions including form filling, JavaScript evaluation, and data extraction on dynamic sites like LinkedIn or Akamai-protected portals.

Can I automate multi-step form submissions on sites with anti-bot protection?

Yes, you can automate multi-step form submissions on sites with anti-bot protection. This skill facilitates complex web workflows including form filling, JavaScript evaluation, and data extraction across dynamic web applications while maintaining stealthy navigation to avoid detection.

Does headless browser automation work for taking full-page screenshots of protected sites?

Yes, headless browser automation works for taking full-page screenshots of protected sites. This skill opens protected URLs with stealth flags to bypass WAF-based detection, enabling visual auditing and full-page screenshots on dynamic web applications.

Why does standard headless browser automation get blocked by Akamai or LinkedIn?

Standard headless browser automation gets blocked by Akamai or LinkedIn because WAFs detect default browser fingerprinting vectors. This skill solves the issue by patching vectors like navigator.webdriver and simulating realistic user behavior to satisfy stealthy navigation requirements.

Are there limitations when using stealth automation for web scraping on protected domains?

Limitations of stealth automation for web scraping include the constant evolution of WAF-based bot detection mechanisms. While this skill patches current fingerprinting vectors to bypass protections, highly dynamic or custom anti-bot systems may still require additional manual configuration to avoid triggering CAPTCHAs.