Week 45, updated 2 Nov 2026

AI use cases Agent skills & MCP Browser automation for AI agents

Browser automation for AI agents

Let an AI agent open pages, click, fill forms and read results in a real browser. Example prompts, workflow and ranked tools with safety labels.

Tools compared
3
Open source
3of 3
Reviewed
16 Oct

For: Developers · Researchers and analysts

Best-scored tools for this jobscore, safety
  1. 1Browser UseAI tool62Caution
  2. 2Playwright MCPMCP server45No issues found
  3. 3OpenBotAI tool41Caution
What the score and shapes mean

Score = public maintenance, adoption and docs signals, as a percentile of 52 tools. Nobody here tested these hands-on. Shapes are the separate safety label: No issues found, No dependencies scanned, Caution.

What it does for you

Developers, testers and researchers who need an agent to operate websites.

  • Test your own web app by describing the flow in plain language
  • Fill in repetitive web forms
  • Extract information from pages that need clicking or logging in
  • Reproduce front-end bugs and capture console errors
  • Give a coding agent eyes on the page it is building
More about this job

A browser connector or browser agent lets a model operate websites the way you would: navigate, read the page and act. It is useful for testing, data collection and repetitive web tasks, and it needs careful limits.

Workflow in 5 steps

  1. Use a separate browser profile or test account, never your own logged-in profile.
  2. Start with your own site or a staging environment.
  3. Give a precise goal and tell the agent when to stop.
  4. Watch the first runs and check the results against the page.
  5. Limit which domains the agent may visit.
Full steps
  1. Use a separate browser profile or test account, never your own logged-in profile.
  2. Start with your own site or a staging environment.
  3. Give a precise goal and tell the agent when to stop.
  4. Watch the first runs and check the results against the page.
  5. Limit which domains the agent may visit.

Prompts to copy

Starting points we wrote, not tested results.

Open http://localhost:3000, sign in with the test account, add an item to the cart and tell me what the page shows at each step.

2 more prompts

On this page, list every product name and price in a table. If there is a next page button, go through all pages.

Go to the settings page and check whether the Save button stays disabled when the name field is empty. Report what you see.

Watch out for

  • Text an agent reads from the web, issues or documents can contain hidden instructions (prompt injection).
  • Keep API keys, tokens and customer data out of prompts and out of files the agent can read.
  • Respect each site's terms of service and robots.txt, rate-limit your crawler, and do not collect personal data you have no right to hold.
  • Agents that can run commands can delete or overwrite files.
  • A web page can contain text that tries to give the agent new instructions.
  • CautionBrowser UseSkill/agent file instructs piping a remote script into a shell: skills/cloud/references/quickstart.md
  • No issues foundPlaywright MCPNo issues found in this week’s scan
  • CautionOpenBot5 critical-severity known vulnerabilities in runtime dependencies (OSV)
Why these warnings?
  • Text an agent reads from the web, issues or documents can contain hidden instructions (prompt injection). Do not give an agent that reads untrusted content write access to anything important.
  • Keep API keys, tokens and customer data out of prompts and out of files the agent can read. Use a separate, low-privilege key for any agent.
  • Respect each site's terms of service and robots.txt, rate-limit your crawler, and do not collect personal data you have no right to hold.
  • Agents that can run commands can delete or overwrite files. Work in a branch or sandbox, commit first, and approve destructive commands by hand.
  • A web page can contain text that tries to give the agent new instructions. Never let a browsing agent operate logged-in sessions that can spend money or send messages.
  • Browser Use: Skill/agent file instructs piping a remote script into a shell: skills/cloud/references/quickstart.md — curl -fsSL https://browser-use.com/profile.sh | sh
  • OpenBot: 5 critical-severity known vulnerabilities in runtime dependencies (OSV)

Recommended tools

From our ranked data, highest score first. A high score does not mean a clean scan.

Related jobs

Sources for tool facts

browser-use/browser-use · microsoft/playwright-mcp · CopilotKit/OpenBot. Data fetched 2 Nov 2026. Scores and labels are automated, relative and not a hands-on test.

Get the board every Monday

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.