stealth-extension

Patch browser fingerprint vectors at document_start to prevent headless automation detection.

2|Updated Apr 30, 2026

Search Tags:#extension #chrome #waf-bypass #manifest-v3 #stealth #fingerprint

Ready to run

npx skills add https://github.com/ShaggyD/agent-toolkit --skill stealth-extension

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: stealth-extension
Source: https://github.com/ShaggyD/agent-toolkit/tree/main/extensions/stealth-extension
Command: npx skills add https://github.com/ShaggyD/agent-toolkit --skill stealth-extension

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill solves the issue of headless browser detection by web application firewalls (WAFs) that identify and block automation tools based on fingerprinting signals like navigator.webdriver.

Core Features & Use Cases

Fingerprint Patching: Overrides automation flags at document_start to ensure the browser appears as a standard user session.
WAF Bypass: Enables seamless interaction with sites like LinkedIn, Indeed, and Cloudflare-protected pages that typically block headless agents.
Use Case: Use this extension when running automated research or data collection tasks to prevent your agent from being flagged or blocked by anti-bot security measures.

Quick Start

Launch your browser with the stealth extension loaded by passing the path to the extension directory in your agent browser arguments.

Frequently Asked Questions about stealth-extension

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I bypass WAF detection when running headless browser automation?▼

To bypass WAF detection, this extension patches browser fingerprint vectors at document_start, overriding automation flags like navigator.webdriver so headless browsers appear as standard user sessions. This prevents web application firewalls from identifying and blocking automated browsing tools.

Does this stealth extension work with Manifest V3 compliance requirements?▼

Yes, this stealth extension satisfies Manifest V3 compliance requirements. It uses early-execution script injection at document_start to patch navigator properties and runtime signals, ensuring compatibility with modern Chrome extension security layers while masking automation.

Can I use fingerprint patching to scrape Cloudflare-protected pages and LinkedIn?▼

Yes, fingerprint patching enables seamless interaction with Cloudflare-protected pages, LinkedIn, and Indeed. By masking headless automation signals at document_start, it prevents anti-bot security measures from flagging or blocking your automated data collection tasks.

How do I load a stealth extension into my automated browser agent?▼

Launch your browser with the stealth extension loaded by passing the path to the extension directory in your agent browser arguments. This ensures fingerprint patching scripts execute at document_start before any page-level detection scripts can run.

What browser fingerprint vectors does this extension patch to prevent headless detection?▼

The extension patches browser fingerprint vectors including navigator.webdriver and other runtime signals at document_start. These patches override automation flags to ensure the browser appears as a standard user session to web application firewalls.

Why does my headless browser get flagged by web application firewalls during scraping?▼

Headless browsers get flagged because web application firewalls detect fingerprinting signals like navigator.webdriver. This extension patches those automation flags at document_start, masking the browser's headless status to prevent WAF blocking.