← Back to Skills Marketplace
aces1up

Phantom Browser

by aces1up · GitHub ↗ · v0.1.1 · MIT-0
cross-platform ⚠ suspicious
135
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install ad-forge
Description
Undetectable browser automation for AI agents. 31/31 stealth tests passed. WindMouse physics, per-profile fingerprinting, residential IP routing. Runs headle...
README (SKILL.md)

Phantom Browser

Undetectable browser automation built for AI agents. Not Playwright. Not a manual anti-detect tool.

Your agents log into platforms, interact with sites, and browse the web without getting flagged, throttled, or banned.

What It Does

Most AI browser automation uses CDP (Chrome DevTools Protocol) to remote-control Chrome. Every major platform detects it. Facebook, LinkedIn, Instagram, X, Google. The second they see CDP automation, you are flagged, throttled, or banned.

Phantom Browser does not work that way.

Tool Layer (Not Remote Control)

The AI agent describes what it wants to do. "Click this button." "Type in this field." "Scroll down." A tool layer translates that into actions that look exactly like a real person using a real computer. The agent never sends raw browser commands.

Human-Like Input Physics

  • Mouse: WindMouse algorithm with random curves, not straight-line jumps
  • Typing: Natural delays between keystrokes, each character different timing
  • Scrolling: Acceleration and deceleration matching human behavior
  • Clicking: Cursor travels naturally before clicking, not instant teleport

Per-Profile Fingerprinting

Each browser session runs with a unique identity. Screen resolution, installed fonts, timezone, language, WebGL signature (reports a real consumer GPU like GTX 1650, not SwiftShader), canvas fingerprint, user agent, plugin list.

To the platform, each profile looks like a completely separate person on a completely separate computer.

Residential IP Routing

All traffic routes through residential proxy IPs (real home internet connections). The platform sees a normal ISP from a real location, not a datacenter IP.

Headless on VPS

Runs on a cheap VPS ($6/month). No desktop app. No screen. No GUI. Agents browse 24/7. Uses Xvfb so Chrome extensions work without a physical display.

System-Level Access Control

Only agents explicitly approved for browser access can open one. Not a prompt instruction. System-level lockout. Unapproved agents genuinely cannot access the browser.

Proof

  • 31/31 stealth tests passed (bot.sannysoft.com)
  • Real GPU fingerprint (NVIDIA GeForce GTX 1650, not SwiftShader)
  • Residential IP masking (Breezeline Ohio ISP, not datacenter)
  • 762 lines custom stealth code
  • $6/mo VPS cost to run

Status: Early Access

Phantom Browser is in limited early access. Run setup.sh to register your interest and be first in line when we open spots.

bash setup.sh

Quick Start (After Access)

bash setup.sh
source .venv/bin/activate
python3 phantom_browser.py --status

vs. Everything Else

Tool AI-Native Stealth Headless
Playwright / Puppeteer No 0/31 Yes
Selenium No Detected Yes
AdsPower / Multilogin Manual Partial No
Phantom Browser Yes 31/31 Yes

Requirements

  • VPS (Ubuntu, 2GB+ RAM, $6+/month)
  • OpenClaw installed
  • Residential proxy service (Decodo, Bright Data, IPRoyal, Oxylabs)

Links

Usage Guidance
What to consider before installing: - The files included do NOT implement the advertised stealth browser; they only implement an early-access registration and status tool. The marketing claims (undetectable automation, fingerprinting, residential routing, system-level locks) are not present in the code you were given — treat the published description as promotional rather than functional. - setup.sh will create a Python virtual environment, pip-install requests and python-dotenv, write a config to ~/.phantom-browser/config.json and a local .env, and POST your email and selected use_case to https://clawagents.dev/reddit-rank/v1/phantom-browser/interest. If you do not want to send that information, do not run setup.sh and instead inspect or run the scripts in a sandbox. - The network POST of your email/use_case is expected for a waitlist flow, but verify the remote domain and consider privacy implications before sending personally identifying data. - If you expect a working stealth browser, ask the publisher for the full source, provenance, and a changelog showing where the claimed browser engine lives. Do not grant this skill network/system-wide privileges implicitly; run it in an isolated environment (VM/container) until the real functionality and provenance are validated. - Be aware of legal/ethical risks: tools designed to evade platform detection can enable abusive or policy-violating activity. Ensure your intended use complies with laws and platform terms before deploying any stealth automation.
Capability Assessment
Purpose & Capability
SKILL.md and the description promise a sophisticated stealth browser (WindMouse physics, fingerprinting, residential routing, system-level access control). The shipped files (phantom_browser.py + setup.sh) contain only an early-access registration/status tool and dependency bootstrap — no code implements the claimed browser automation or proxy/fingerprinting features. That is a substantive mismatch between what is advertised and what is delivered.
Instruction Scope
Runtime instructions direct users to run setup.sh, create a venv, install dependencies, save a config to ~/.phantom-browser/config.json and a local .env, and POST the user's email and chosen use_case to https://clawagents.dev/reddit-rank/v1/phantom-browser/interest. Those actions are coherent for an early-access registration flow, but SKILL.md's broad claims about stealth behavior are not realized in the instructions — instructions do transmit minimal personal data (email + use_case) to an external service.
Install Mechanism
No platform install spec is declared; setup.sh creates a Python venv and pip-installs small dependencies (requests, python-dotenv) from PyPI. This is a typical, moderate-risk install mechanism (no arbitrary binary downloads or obscure hosts).
Credentials
The skill does not request environment variables, special credentials, or access to unrelated config paths. It writes/reads a local config at ~/.phantom-browser/config.json and creates a .env with an install id — these are proportionate to a waitlist/registration flow. The only external data transmitted is the email and selected use_case collected interactively.
Persistence & Privilege
always is false and the skill does not request system‑wide privileges. It does create a per-user directory (~/.phantom-browser) and a venv in the skill directory; that is expected. The SKILL.md claim of 'system-level access control' is not implemented in the provided code, which is an inconsistency worth noting.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install ad-forge
  3. After installation, invoke the skill by name or use /ad-forge
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
No file changes were detected in this version. - Version bumped from 0.1.0 to 0.1.1 with no content or code modifications. - All documentation and functionality remain unchanged.
v0.1.0
Version 0.1.0 — Initial Release - Introduced Phantom Browser: undetectable browser automation for AI agents with 31/31 stealth tests passed. - Human-like input physics: WindMouse mouse movement, natural typing, realistic scrolling and clicking. - Per-profile fingerprinting: unique identities for each session to evade detection. - Routes traffic through residential proxy IPs for maximum stealth. - Headless operation on low-cost VPSs, with system-level access control for agent security. - Early access setup provided via setup.sh.
v1.0.0
- Initial release of ad-forge: a 4-step programmatic Facebook ad creative pipeline. - Enables competitor ad scraping from FB Ad Library, ad copy generation, creative rendering, and QA. - Integrates Gemini Vision for layout analysis and Remotion for video rendering. - Includes burn-in testing, standalone FB ad scraping, and modular script execution. - Replaces the fb-ad-scout skill with a more reliable, integrated scraper.
Metadata
Slug ad-forge
Version 0.1.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is Phantom Browser?

Undetectable browser automation for AI agents. 31/31 stealth tests passed. WindMouse physics, per-profile fingerprinting, residential IP routing. Runs headle... It is an AI Agent Skill for Claude Code / OpenClaw, with 135 downloads so far.

How do I install Phantom Browser?

Run "/install ad-forge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Phantom Browser free?

Yes, Phantom Browser is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Phantom Browser support?

Phantom Browser is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Phantom Browser?

It is built and maintained by aces1up (@aces1up); the current version is v0.1.1.

💬 Comments