github.comPublished
Stealth Headless Browser for AI Agents
camofox-browser
Summary: A REST API wrapper around Camoufox (a Firefox fork with C++-level fingerprint spoofing) that provides AI agents with a drop-in Puppeteer/Playwright replacement for bypassing Cloudflare, Google, and other bot detection. Features include accessibility snapshots (~90% smaller than raw HTML), stable element references (e1, e2, e3), session isolation with cookie persistence, proxy/geoIP routing, YouTube transcript extraction via yt-dlp, search macros for major sites, file upload without OS dialogs, download capture, DOM image extraction, VNC interactive login, OpenAPI docs, structured extraction with JSON Schema, per-session Playwright tracing, and anonymized crash telemetry. Runs at ~40MB idle memory on anything from Raspberry Pi to shared VPS. Deployable via Docker, Fly.io, Railway, or npm. Integrates with OpenClaw via @askjo/camofox-browser plugin.
Description: camofox-browser is an anti-detection browser server built for AI agents. It wraps Camoufox—a Firefox fork that spoofs navigator.hardwareConcurrency, WebGL renderers, AudioContext, screen geometry, WebRTC, and other fingerprints at the C++ implementation level (no JS shims). The server exposes a REST API optimized for agents: accessibility snapshots instead of full HTML, stable element refs for reliable interaction, and search macros (@google_search, @youtube_search, @amazon_search, @reddit_subreddit, etc.). Key capabilities include session isolation with separate cookies/storage per user, Netscape-format cookie import for authenticated browsing, proxy + GeoIP with automatic locale/timezone, file upload from a configured directory, download capture, DOM image extraction, YouTube transcripts (yt-dlp or browser fallback), snapshot screenshots, large-page pagination, OpenAPI docs at /docs, structured extraction mapping JSON Schema properties to snapshot refs via x-ref, and opt-in Playwright trace capture (screenshots + DOM + network + console) viewable in Playwright Trace Viewer. Persistence defaults to ~/.camofox/profiles/ (cookies + localStorage; IndexedDB optional). Telemetry is anonymized (private domains HMAC-hashed, paths/params stripped, tokens/IPs redacted) and opt-out via CAMOFOX_CRASH_REPORT_ENABLED=false. Deployment: make up (Docker, auto-detects arch), Fly.io, Railway (railway.toml + Dockerfile.ci), or npx @askjo/camofox-browser. Default port 9377. Auth via CAMOFOX_API_KEY env var. External Camoufox binary via CAMOUFOX_EXECUTABLE.
AI-generated
Interactive React UI Components & Micro-interactions
Bencho is a digital library providing interactive React UI components and micro-interactions. The platform features live demonstrations of various UI blocks, allowing developers to explore functionality and copy code to integrate directly into their own applications.
Top 5 Claude Skills for Cold Email Acquisitions
This guide presents a selection of the top five AI skills designed to streamline the cold email acquisition process for agency owners. Ranked by installation volume from skills.sh as of November 3, 2026, the recommended skills cover the entire sales funnel from initial lead discovery to conversion. The resource includes specific terminal commands to integrate these tools into AI environments such as Claude Code, enabling users to automate complex marketing tasks like drafting, prospecting, and managing multi-step email sequences. The primary focus is on leveraging AI capabilities to reduce the manual effort associated with client outreach and sales follow-up.
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings - cloudflare/security-audit-skill
This GitHub repository provides a coding-agent skill for conducting structured security audits. It operates through six phases: reconnaissance, coverage-led hunting, candidate validation, structured output, independent record verification, and target-neutral reporting. The system utilizes isolated agents and coverage critic feedback to find security vulnerabilities, ensuring findings are independently verified by agents separate from the discoverers. The skill employs a verdict system using labels such as 'confirmed', 'needs_validation', and 'rejected' based on source trace and observed impact. It supports repeated runs to iteratively improve coverage, with prior analyses used to target gaps and revalidate changed sources. Installation and execution are managed via the Skills CLI, requiring Node.js for validation and an OS-enforced sandbox for target code execution. The skill is noted as the initial prototype that seeded Cloudflare's broader vulnerability discovery harness.