Connect or launch

• Test the standard endpoint:

• If unavailable, inspect running browser processes and listening ports. A Chrome process without a remote-debugging endpoint cannot be attached in place.

• If the user wants you to launch a controllable instance, call get_scratchpad_folder, create a profile folder there, and launch:

• Explain that a scratchpad profile persists across immediate restarts only while that scratchpad exists. For durable use, offer a dedicated persistent profile and obtain permission before writing outside the workspace.

• Never expose the CDP port beyond loopback.

Use the bundled helper

Resolve scripts/cdp.mjs relative to this SKILL.md. It uses Node's built-in WebSocket and has no third-party dependencies.

node <skill-folder>/scripts/cdp.mjs list
node <skill-folder>/scripts/cdp.mjs body --target-url 'example.com/path'
node <skill-folder>/scripts/cdp.mjs navigate --target-url 'example.com' --url 'https://example.com/new'
node <skill-folder>/scripts/cdp.mjs new --url 'https://example.com/'
node <skill-folder>/scripts/cdp.mjs click-text --target-url 'example.com' --text 'Continue'
node <skill-folder>/scripts/cdp.mjs type --target-url 'example.com' --selector 'input[name=email]' --text 'person@example.com'
node <skill-folder>/scripts/cdp.mjs eval --target-url 'example.com' --expression 'document.title'
node <skill-folder>/scripts/cdp.mjs screenshot --target-url 'example.com' --output '/absolute/scratchpad/page.png'
node <skill-folder>/scripts/cdp.mjs clear-cookies --domains 'example.com,login.example.com'

--target-url is a case-sensitive URL substring. If it matches zero or multiple page targets, inspect list and use a more specific substring.

Interaction workflow

• Run list and identify the exact page target.
• Run body to inspect the title, URL, and visible text. For complex controls, use eval to inspect labels, ARIA attributes, roles, inputs, and buttons without reading secret-field values.
• Use navigate, new, click-text, or type as needed.
• Wait for async rendering when necessary, then run body or a focused eval to verify.
• For controls not covered by the helper:
  • Evaluate the target element's bounding rectangle.
  • Send Input.dispatchMouseEvent for mousePressed and mouseReleased at its center.
  • Focus text fields and use Input.insertText or key events.
  • For dropdowns, click the combobox, inspect [role=option], then click the exact option.
• Keep the user informed at meaningful checkpoints, especially when authentication or manual secret entry is required.

Tabs and screenshots

• Create a new tab with new when testing a path should not disrupt the user's current page.
• Screenshots must be written to the scratchpad, not the workspace. Inspect them with view_images if needed.
• Before taking a screenshot, ensure no password, verification code, payment credential, private key, or token is visible.

Cookies and site data

• clear-cookies --domains deletes only matching-domain cookies and never prints cookie names or values.
• Domain matching includes subdomains of each requested domain.
• Cookie deletion does not clear local storage, IndexedDB, caches, or service workers.
• To clear all storage for an origin, use CDP Storage.clearDataForOrigin only after explaining that it can reset an unfinished flow. Keep unrelated origins untouched.
• Clearing local browser data does not remove server-side sessions, fraud flags, account state, or remote data.

Troubleshooting

• If a click does nothing, inspect whether the text belongs to a wrapper or shadow/custom element. Use the smallest visible interactive element and real mouse events.
• If typed text appears but the app does not react, focus the field and use Input.insertText; follow with appropriate key events or blur.
• If a SPA is still loading, wait and inspect again rather than repeating a submission.
• If /json/list shows a changed target ID after authentication, rediscover the target instead of reusing an old WebSocket URL.
• If authentication redirects unexpectedly, inspect the active account indicator and URL before continuing.

Connect or launch

• Test the standard endpoint:

• If unavailable, inspect running browser processes and listening ports. A Chrome process without a remote-debugging endpoint cannot be attached in place.

• If the user wants you to launch a controllable instance, call get_scratchpad_folder, create a profile folder there, and launch:

• Explain that a scratchpad profile persists across immediate restarts only while that scratchpad exists. For durable use, offer a dedicated persistent profile and obtain permission before writing outside the workspace.

• Never expose the CDP port beyond loopback.

Use the bundled helper

Resolve scripts/cdp.mjs relative to this SKILL.md. It uses Node's built-in WebSocket and has no third-party dependencies.

node <skill-folder>/scripts/cdp.mjs list
node <skill-folder>/scripts/cdp.mjs body --target-url 'example.com/path'
node <skill-folder>/scripts/cdp.mjs navigate --target-url 'example.com' --url 'https://example.com/new'
node <skill-folder>/scripts/cdp.mjs new --url 'https://example.com/'
node <skill-folder>/scripts/cdp.mjs click-text --target-url 'example.com' --text 'Continue'
node <skill-folder>/scripts/cdp.mjs type --target-url 'example.com' --selector 'input[name=email]' --text 'person@example.com'
node <skill-folder>/scripts/cdp.mjs eval --target-url 'example.com' --expression 'document.title'
node <skill-folder>/scripts/cdp.mjs screenshot --target-url 'example.com' --output '/absolute/scratchpad/page.png'
node <skill-folder>/scripts/cdp.mjs clear-cookies --domains 'example.com,login.example.com'

--target-url is a case-sensitive URL substring. If it matches zero or multiple page targets, inspect list and use a more specific substring.

Interaction workflow

• Run list and identify the exact page target.
• Run body to inspect the title, URL, and visible text. For complex controls, use eval to inspect labels, ARIA attributes, roles, inputs, and buttons without reading secret-field values.
• Use navigate, new, click-text, or type as needed.
• Wait for async rendering when necessary, then run body or a focused eval to verify.
• For controls not covered by the helper:
  • Evaluate the target element's bounding rectangle.
  • Send Input.dispatchMouseEvent for mousePressed and mouseReleased at its center.
  • Focus text fields and use Input.insertText or key events.
  • For dropdowns, click the combobox, inspect [role=option], then click the exact option.
• Keep the user informed at meaningful checkpoints, especially when authentication or manual secret entry is required.

Tabs and screenshots

• Create a new tab with new when testing a path should not disrupt the user's current page.
• Screenshots must be written to the scratchpad, not the workspace. Inspect them with view_images if needed.
• Before taking a screenshot, ensure no password, verification code, payment credential, private key, or token is visible.

Cookies and site data

• clear-cookies --domains deletes only matching-domain cookies and never prints cookie names or values.
• Domain matching includes subdomains of each requested domain.
• Cookie deletion does not clear local storage, IndexedDB, caches, or service workers.
• To clear all storage for an origin, use CDP Storage.clearDataForOrigin only after explaining that it can reset an unfinished flow. Keep unrelated origins untouched.
• Clearing local browser data does not remove server-side sessions, fraud flags, account state, or remote data.

Troubleshooting

• If a click does nothing, inspect whether the text belongs to a wrapper or shadow/custom element. Use the smallest visible interactive element and real mouse events.
• If typed text appears but the app does not react, focus the field and use Input.insertText; follow with appropriate key events or blur.
• If a SPA is still loading, wait and inspect again rather than repeating a submission.
• If /json/list shows a changed target ID after authentication, rediscover the target instead of reusing an old WebSocket URL.
• If authentication redirects unexpectedly, inspect the active account indicator and URL before continuing.