SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Tencent Open-Sources BrowserSkill to Connect AI Coding Agents to Live Browser Sessions

0
·110 views

Tencent has open-sourced BrowserSkill (bsk), a lightweight local tool that bridges AI coding agents such as Claude Code and Cursor to a developer's already authenticated browser. The tool addresses two longstanding problems: headless browsers that fail on login walls and bot-detection, and OS-level automation that hijacks the user's mouse and screen. BrowserSkill uses a three-tier architecture comprising a Rust-based CLI daemon, a Chromium extension for Chrome and Edge, and a dedicated agent window that runs tasks separately from the user's main browsing session. Because the agent inherits the developer's existing cookies and session storage, it can access authenticated services like GitHub, AWS Console, and internal dashboards without requiring fresh credentials or MFA workarounds. The project is aimed at developers building or using autonomous agents for tasks such as UI verification, staging dashboard checks, and repetitive web workflows.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Tutorial: Pulling Google Images results via an API using Python, Node or no-code tools

Google does not offer a public API for Google Images search results, so bulk collection of full-size URLs and source pages is difficult to do by hand. The tutorial uses Google Images Scraper, an Apify actor created by the author, which returns image URLs, dimensions, thumbnails, titles and source pages for each search. It supports filters for size, type, date and country, plus an only-new mode for scheduled runs. Use cases include gathering mood-board references, monitoring where a brand image appears online, and building size-filtered image datasets. Working examples in Python, Node and curl are available on GitHub.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Reverting AI agent edits in a CRM requires per-record before-images and run-level undo

An AI agent with write access to a CRM can make mistakes like bad merges or mass field overwrites, and an audit log alone does not restore the lost data. A safe undo needs before-and-after snapshots of each record, stored append-only with the actor, run identifier and request ID. Reverts should operate on whole agent runs rather than individual changes, and the agent's own credentials should be unable to undo its work. A reliable revert also skips records a person has edited since, reporting the reason, and keeps the full history visible. Emails that have already been sent cannot be recalled, so outbound workflows benefit from review queues and dry runs.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Tutorial Shows Python Method to Track New SAM.gov Contract Opportunities Without an API Key

A tutorial explains how companies selling to the US federal government can automatically monitor SAM.gov for new solicitations, sources-sought notices, and presolicitations. It describes using a hosted scraper on Apify, which requires an Apify account and API token but no SAM.gov account or key. The author provides a roughly 30-line Python script that pulls open IT-services opportunities by NAICS code and exports them to a CSV sorted by response deadline, including links to attached documents. The post notes that the synchronous Apify endpoint suits short runs, since runs over 300 seconds return an HTTP 408 error. In the author's test run on November 12, 2026, the script saved 48 open opportunities in about 20 seconds.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

HotGo CVE-2026-120447 Lets Attackers Bypass SMS Login for Admin Accounts

A security advisory describes CVE-2026-120447, affecting HotGo versions 2.8.4 through 2.15.1. The flaw allows an unauthenticated attacker to supply their own verification code via the SMS send endpoint and then sign in through the mobile login path. Successful exploitation requires only a target mobile number and can lead to takeover of an administrator account. The advisory does not state that any internet-facing HotGo host has been compromised. Researchers used ZoomEye counts to estimate candidate deployments, but the matches must be confirmed as live, owned installations. Recommended mitigations include restricting admin and mobile login endpoints and disabling SMS login for privileged users until a fixed build is verified.

0 comments Read more at DEV Community