Built from the ground-up for agents, Vessel Browser is an open source AI browser for Linux/Mac/Windows that provides a durable state, MCP control, and BYOK with full autonomous browsing. Use with Hermes Agent, OpenClaw, or connect to your favorite API provider.
# Add to your Claude Code skills
git clone https://github.com/unmodeled-tyler/vessel-browserGuides for using ai agents skills like vessel-browser.
Last scanned: 6/21/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@babel/core: @babel/core: Arbitrary File Read via sourceMappingURL Comment",
"severity": "low"
},
{
"type": "npm-audit",
"message": "dompurify: DOMPurify: Trusted Types policy survives `clearConfig()` and can poison later `RETURN_TRUSTED_TYPE` output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "esbuild: esbuild allows arbitrary file read when running the development server on Windows",
"severity": "low"
},
{
"type": "npm-audit",
"message": "form-data: form-data: CRLF injection in form-data via unescaped multipart field names and filenames",
"severity": "high"
},
{
"type": "npm-audit",
"message": "hono: Hono: IP Restriction bypasses static deny rules for non-canonical IPv6 ",
"severity": "high"
},
{
"type": "npm-audit",
"message": "js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "tar: node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "undici: undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent",
"severity": "high"
},
{
"file": "README.md",
"line": 54,
"type": "remote-install",
"message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://raw.githubusercontent.com/unmodeled-tyler/vessel-browser/main\"",
"severity": "low"
}
],
"status": "WARNING",
"scannedAt": "2026-06-21T08:34:11.562Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}vessel-browser is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by unmodeled-tyler. Built from the ground-up for agents, Vessel Browser is an open source AI browser for Linux/Mac/Windows that provides a durable state, MCP control, and BYOK with full autonomous browsing. Use with Hermes Agent, OpenClaw, or connect to your favorite API provider. It has 115 GitHub stars.
vessel-browser returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/unmodeled-tyler/vessel-browser" and add it to your Claude Code skills directory (see the Installation section above).
vessel-browser is primarily written in TypeScript. It is open-source under unmodeled-tyler on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh vessel-browser against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.

Vessel is a simple, clean web browser with an AI assistant built in. Browse the web normally, then ask Vessel to help research, navigate pages, summarize what you are reading, fill forms, or keep track of longer tasks.
Unlike invisible browser automation, Vessel shows you what the AI is doing in a real browser window. You can follow along, approve important actions, pause or redirect the work, and take over whenever you want.
Linux is the most mature install target today. macOS release packaging is available from source.
Vessel is in active development. Treat it as early software, especially for sensitive browsing or account access.
https://github.com/user-attachments/assets/0a72b48a-873a-4eb0-b8f2-23e34d8472c4
Want the complete AI toolkit from day one? Start a 7-Day Free Trial of Vessel Premium — $5.99/mo.
Linux AppImage from GitHub Releases:
Vessel-<version>-x64.AppImagechmod +x Vessel-*.AppImage./Vessel-*.AppImageCtrl+,) to choose your AI provider and review advanced connection optionsnpm install -g @quanta-intellect/vessel-browser
vessel-browser
Or run it directly without installing:
npx @quanta-intellect/vessel-browser
curl -fsSL https://raw.githubusercontent.com/unmodeled-tyler/vessel-browser/main/scripts/install.sh | bash
Vessel development uses Node.js 22. If you use fnm, run fnm use from the repo root to pick up .node-version.
fnm use
npm install
npm run dev
If you want extra local AI tracing in development, create an optional src/main/telemetry/trace-logger.local.cjs file. Vessel will load it only in local dev builds, and packaged production builds ignore it.
Most AI tools can answer questions about the web. Vessel is for actually working on the web: reading pages, following links, comparing information, filling forms, tracking changes, and keeping longer browsing sessions organized.
Vessel keeps that work visible. The AI uses a real browser, so you can see the pages it opens, the choices it makes, and the places where it needs your approval. You are never stuck watching a hidden automation run or guessing what happened after the fact.
For power users and developers, the same foundation also supports external agents, MCP clients, persistent sessions, checkpoints, and browser automation workflows.
Ctrl+L) — a secondary operator surface for harness-driven workflows and future runtime commandsCtrl+Shift+L) — live supervision across eight tabs: Supervisor, Bookmarks, Checkpoints, Chat, Skills, History, Changes, and ResearchF12) — inspect console output, network requests, and MCP/agent activity in a resizable panel at the bottom of the window; export logs by category and date range as JSONCtrl+N; print the active page with Ctrl+P or save it directly as PDF with Ctrl+Shift+Pundo_last_action toolintent (what the page is for), expectedContent (what to expect on the page), keyFields (important form fields), agentHints (arbitrary directives), and a stored pageSchema; humans can create and edit this metadata directly in the Bookmarks tab, and all fields are searchablepageType (article, product, form, search, checkout, login, dashboard), primaryEntity (structured fields for products and articles), formFields (with names, types, labels, selectors), and actionButtons (with inferred intents: submit, addToCart, login, etc.); schema is attached to every content extraction resultflow_start; progress is tracked step-by-step with flow_advance and visible in the sidebar throughout executionChanged badge in the address bar when the title, headings, or main