SKILL PLAN · DETERMINISTIC
A small plan for a real job
Start with the minimum useful stack. Add nothing unless it has a clear responsibility in the run.
- Task
- Browser automation
- Agent
- Codex
- Priority
- Balanced
Rules + reviewed metadata only. No LLM. Same inputs produce the same plan.
01Core execution
Native · Codex
agent-browser
Performs the browser navigation and interaction sequence. Open profile and install guide ↗Review permissions, limitations, and evidence
- Agent fit
- Native · Codex
- Main limitation
- The checked-in SKILL.md is a discovery stub; full instructions come from the installed CLI version.
- First risk
- Browser-side actions · High
- Source
- Pinned source · 548b159b
02Guardrail
Native · Codex
minimal-run-and-audit
Limits the first run to the smallest useful path. Open profile and install guide ↗Review permissions, limitations, and evidence
- Agent fit
- Native · Codex
- Main limitation
- It does not choose the reproduction target, train a model, conduct broad paper analysis, or hide scientific-meaning changes.
- First risk
- Scientific changes hidden as setup fixes · High
- Source
- Pinned source · 3ab50525
03Evidence
Native · Codex
playwright-workflows
Checks the final state and preserves repeatable evidence. Open profile and install guide ↗Review permissions, limitations, and evidence
- Agent fit
- Native · Codex
- Main limitation
- Detailed package files are not fully catalogued.
- First risk
- Review before install · Medium
- Source
- Editorial source
Combined permission budget
This is the union of declared permissions across the plan. Review each package before installation.
Browser controlNetwork accessRun commandsReview package instructions before installWrite screenshots
Finish with evidence
Convert a repeatable browser workflow into a controlled run with visible success criteria.
Use test accounts where possible; do not submit irreversible actions without confirmation.
- 3-step acceptance check
- Run the workflow once with harmless test data.
- Verify the final page state and any created record.
- Repeat the run from a clean browser state.
- Stop conditions
- The flow reaches payment, publishing, deletion, or account changes.
- A selector depends on unstable visual position only.
- The site requests an undeclared credential or permission.