Ask anyone who's built browser automation what the hardest part is, and it's rarely clicking buttons or filling forms. It's login.
Captchas, SMS codes, QR scans, device fingerprints, risk control on new devices — a whole wall designed to keep machines out. The usual workarounds all hurt: test accounts (trigger even stricter risk control), cookie hijacking (fragile, expires), headless browsers (obvious fingerprints, instantly blocked).
BrowserSkill (1.8k stars, MIT, by Tencent) takes a different path: it doesn't open a new browser. It borrows the browser you already use, already logged in, already trusted by every site you visit.
The idea
BrowserSkill is two local components — a bsk CLI/daemon and a browser extension. Once installed, your existing agents (Cursor, Claude Code, Codex, and even WorkBuddy) can drive your real, logged-in browser through the bsk command.
