Build local constrained-browser agents with a safe_browser tool that owns CDP, enforces a domain allowlist with Fetch interception, and lets a runtime Claude…
Safe Browser Build a local browser-agent demo where the generated runtime agent has exactly one browser capability: safe_browser. The tool owns the Playwright/CDP session, enables Fetch interception for all requests, and fails any request whose host is not allowlisted. This skill is a builder guide. The skill itself is not the runtime boundary; the generated Claude Agent SDK app is. When to Use The user asks for a browser agent that must stay on an allowlisted site. The user wants to demonstrate prompt-injection or link-following containment. The user asks to build a scraper or browser workflow with domain policy. The user asks for a Claude Agent SDK example first. Keep OpenAI Agents SDK variants out unless requested. Default Approach Use the Claude Agent SDK local template:
don't have the plugin yet? install it then click "run inline in claude" again.