sensitive-browser

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Sensitive Browser

Sensitive Browser

Execute sensitive browser actions securely by delegating credential handling, payments, and form filling to a dedicated subprocess with isolated context.
通过将凭据处理、支付和表单填写委托给具有隔离上下文的专用子进程,安全地执行敏感浏览器操作。

When to Use

使用场景

  • User asks to log into a website with credentials
  • User needs to fill payment information on a checkout page
  • User needs to complete forms with personal/sensitive data
  • Browser automation requires authentication handoff
  • 用户要求使用凭据登录网站
  • 用户需要在结账页面填写支付信息
  • 用户需要填写包含个人/敏感数据的表单
  • 浏览器自动化需要进行身份验证交接

Prerequisites

前提条件

The
ATXP_CONNECTION
environment variable must be defined for LLM access. This provides the connection string to the ATXP platform.
If not configured, see the ATXP CLI for setup instructions.
必须定义
ATXP_CONNECTION
环境变量以实现LLM访问。它提供了连接到ATXP平台的连接字符串。
如果未配置,请查看ATXP CLI获取设置说明。

Workflow

工作流程

1. Prepare Sensitive Data File

1. 准备敏感数据文件

Create a JSON file with the user's sensitive data. Ask the user for the values needed:
json
{
  "credentials": {
    "username": "user@example.com",
    "password": "secret"
  },
  "payment": {
    "cardNumber": "4111111111111111",
    "expiry": "12/28",
    "cvv": "123",
    "billingZip": "94102"
  },
  "personal": {
    "fullName": "Jane Doe",
    "phone": "+1-555-0123",
    "address": "123 Main St"
  }
}
Only include the fields needed for the task. Store securely and delete after use.
创建包含用户敏感数据的JSON文件。向用户索要所需的值:
json
{
  "credentials": {
    "username": "user@example.com",
    "password": "secret"
  },
  "payment": {
    "cardNumber": "4111111111111111",
    "expiry": "12/28",
    "cvv": "123",
    "billingZip": "94102"
  },
  "personal": {
    "fullName": "Jane Doe",
    "phone": "+1-555-0123",
    "address": "123 Main St"
  }
}
仅包含任务所需的字段。安全存储并在使用后删除。

2. Execute the Sensitive Action

2. 执行敏感操作

bash
npx sensitive-browser "<task>" \
  --sensitive-data ./creds.json \
  --url <target-url> \
  --state ./session.json \
  --output ./session.json
Options:
OptionDescription
<task>
Natural language task (e.g., "log in with credentials")
-d, --sensitive-data <path>
Path to sensitive data JSON (required)
-u, --url <url>
Target URL to navigate to
-s, --state <path>
Playwright storage state to load
-o, --output <path>
Output path for updated state
bash
npx sensitive-browser "<task>" \
  --sensitive-data ./creds.json \
  --url <target-url> \
  --state ./session.json \
  --output ./session.json
选项:
选项说明
<task>
自然语言任务(例如:"使用凭据登录")
-d, --sensitive-data <path>
敏感数据JSON文件的路径(必填)
-u, --url <url>
要导航到的目标URL
-s, --state <path>
要加载的Playwright存储状态
-o, --output <path>
更新后状态的输出路径

3. Integration with agent-browser

3. 与agent-browser集成

When used with agent-browser, hand off session state:
bash
undefined
与agent-browser配合使用时,需交接会话状态:
bash
undefined

Save current session

Save current session

agent-browser --session myapp state save ./session.json
agent-browser --session myapp state save ./session.json

Hand off to sensitive-browser for login

Hand off to sensitive-browser for login

npx sensitive-browser "log in with credentials"
--state ./session.json
--sensitive-data ./creds.json
npx sensitive-browser "log in with credentials"
--state ./session.json
--sensitive-data ./creds.json

Resume agent-browser with authenticated session

Resume agent-browser with authenticated session

agent-browser --session myapp state load ./session.json
undefined
agent-browser --session myapp state load ./session.json
undefined

Security Notes

安全注意事项

  • Sensitive data values are never logged or displayed
  • The tool shows which fields will be used, not their values
  • Delete sensitive data files after use
  • Consider environment variables or secret managers for production
  • 敏感数据值绝不会被记录或显示
  • 工具仅显示将使用哪些字段,而非字段的值
  • 使用后删除敏感数据文件
  • 生产环境中可考虑使用环境变量或密钥管理器

Sensitive Data Schema

敏感数据 Schema

Supported field categories:
  • credentials
    : username, password, email
  • payment
    : cardNumber, expiry, cvv, billingZip, cardholderName
  • personal
    : fullName, firstName, lastName, phone, address, city, state, zip, country, dateOfBirth
  • Custom fields: Any additional
    key: value
    pairs as needed
支持的字段类别:
  • credentials
    : 用户名、密码、邮箱
  • payment
    : 卡号、有效期、CVV、账单邮编、持卡人姓名
  • personal
    : 全名、名字、姓氏、电话、地址、城市、州、邮编、国家、出生日期
  • 自定义字段:根据需要添加的任意
    键: 值