# Browser Extension Control

Build, edit, install or audit Chrome Web Store extensions in Agent Zero Browser.

- Repository: https://github.com/agent0ai/agent-zero (19630 stars)
- Category: AI and agents
- License: see repository
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add agent0ai/agent-zero --skill browser-extension-control -g -a claude-code -y`
Codex: `npx skills add agent0ai/agent-zero --skill browser-extension-control -g -a codex -y`
Cursor: `npx skills add agent0ai/agent-zero --skill browser-extension-control -g -a cursor -y`
Gemini CLI: `npx skills add agent0ai/agent-zero --skill browser-extension-control -g -a gemini-cli -y`

## Description

Build, edit, install or audit Chrome Web Store extensions in Agent Zero Browser.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Agent Zero Browser Extensions

Use this skill when the user wants to create a new Browser extension, modify an existing extension, or install a Chrome Web Store extension for Agent Zero's direct `_browser` plugin.

## Operating Model

- Agent Zero loads Browser extensions from unpacked directories.
- Create user-owned extensions under `/a0/usr/browser-extensions/<extension-slug>/`.
- Browser extension paths must be visible inside the Docker runtime. Prefer `/a0/usr/browser-extensions/...` paths over host-only paths.
- The Browser puzzle menu can open "My Browser Extensions", seed a "+ Create New with A0" request, and install Chrome Web Store URLs.
- Chrome Web Store installs are converted into unpacked extension folders before Browser can load them.
- Extension setting changes restart active Browser runtimes so Playwright can relaunch Chromium with the extension arguments.

## Safety First

Browser extensions run inside the Docker browser sandbox, but malicious or buggy extensions can still damage that sandboxed environment, corrupt browser profiles, exfiltrate page data visible to the Browser, or make browsing unreliable.

Before creating or installing an extension:

- State the requested behavior in one sentence.
- List the minimum permissions and host permissions needed.
- Avoid `<all_urls>` unless the user explicitly needs broad page access.
- Avoid remote code, eval-style execution, hidden credential collection, and broad network access.
- Do not store secrets in extension files.
- Prefer content scripts for page-local behavior and service workers for coordination.
- Tell the user when an extension can read or modify page content.

## Create New Extension

The rest: https://github.com/agent0ai/agent-zero/blob/HEAD/plugins/_browser/skills/browser-extension-control/SKILL.md