Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Managed headful Chrome browser for OpenClaw agents with anti-bot-detection, human-in-the-loop VNC takeover, and multi-session window isolation. Use when: (1)...
Managed headful Chrome browser for OpenClaw agents with anti-bot-detection, human-in-the-loop VNC takeover, and multi-session window isolation. Use when: (1)...
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Then review README.md for any prerequisites, environment setup, or post-install checks. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Then review README.md for any prerequisites, environment setup, or post-install checks. Summarize what changed and any follow-up checks I should run.
Headful Chrome with anti-detection, VNC takeover, and multi-session isolation. Works on Mac, Linux, Docker โ anywhere OpenClaw runs.
bash scripts/setup-mac.sh Detects Chrome, configures OpenClaw browser profile. After setup: openclaw browser start # Agent's browser tool works automatically Note: macOS setup does NOT include VNC/noVNC. The user is expected to access the Mac via their own remote desktop solution (e.g. macOS Screen Sharing, Tailscale, or physical access). VNC takeover with noVNC links is only available on Linux.
# Install deps (once) bash scripts/setup.sh # Start browser + VNC environment (password is MANDATORY by default) bash scripts/start.sh [password] [novnc_port] [cdp_port] [resolution] # Without specifying password โ random 14-char password auto-generated bash scripts/start.sh # Explicitly no password (NOT recommended) bash scripts/start.sh --dangerously-no-password [novnc_port] [cdp_port] [resolution] start.sh outputs the noVNC URL (with password in URL param), password, and CDP port. Safe to re-run. VNC always requires a password. The noVNC URL always includes ?password=... so the user doesn't need to type it. The only way to skip is --dangerously-no-password.
Setup scripts configure this automatically. Manual reference: macOS: { "browser": { "enabled": true, "defaultProfile": "openclaw", "headless": false, "executablePath": "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" } } Linux: { "browser": { "enabled": true, "headless": false, "noSandbox": true, "executablePath": "/usr/bin/google-chrome-stable" } }
Multiple sessions share one Chrome (same cookies/logins) but each gets its own window.
On session start โ open your own tab, save the targetId: browser action=open targetUrl="https://example.com" profile=openclaw # Returns targetId โ THIS IS YOURS, save it ALL subsequent calls โ always include your targetId: browser action=snapshot profile=openclaw targetId="<your-targetId>" browser action=navigate profile=openclaw targetId="<your-targetId>" targetUrl="..." browser action=act profile=openclaw targetId="<your-targetId>" ... On session end โ close your tab: browser action=close targetId="<your-targetId>" NEVER operate without targetId โ you'll land on another session's tab. NEVER pick another session's tab from browser action=tabs.
import json, asyncio, websockets, urllib.request async def open_new_window(cdp_port, url): version = json.loads(urllib.request.urlopen(f"http://127.0.0.1:{cdp_port}/json/version").read()) async with websockets.connect(version["webSocketDebuggerUrl"]) as ws: await ws.send(json.dumps({ "id": 1, "method": "Target.createTarget", "params": {"url": url, "newWindow": True} })) resp = json.loads(await ws.recv()) return resp["result"]["targetId"]
Chrome (one instance, one profile, shared cookies) โโโ Window targetId=AAA โ Session A โโโ Window targetId=BBB โ Session B โโโ Window targetId=CCC โ Session C
When hitting a CAPTCHA, login wall, or any blocker, send the user a noVNC link: https://<IP>:<NOVNC_PORT>/vnc.html?password=<PASSWORD>&autoconnect=true&resize=scale
Linux/Docker (from start.sh output): https://57.129.90.145:10150/vnc.html?password=e0GGP4xeMUL5ga&autoconnect=true&resize=scale IP: server's public or Tailscale IP Port + password: from start.sh output macOS: VNC takeover is NOT available. The user must access the Mac directly (physical access, macOS Screen Sharing, or their own remote desktop solution).
Agent detects blocker (CAPTCHA, login, 2FA) Agent sends noVNC link to user User opens link โ sees Chrome โ solves the problem User confirms done โ agent continues
Headful Chrome โ no HeadlessChrome in UA --disable-blink-features=AutomationControlled โ no navigator.webdriver=true UA override via CDP if needed: {"method": "Network.setUserAgentOverride", "params": { "userAgent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36" }}
SSL/TLS on noVNC (self-signed cert) Random 14-char password (Linux) or system auth (macOS) CDP: localhost only, never exposed to network Chrome Policy: file://, javascript:, data:text/html blocked; extensions blocked; DevTools disabled
Do NOT use Chrome's --kiosk flag. It hides the tab bar and address bar, making multi-window unusable via VNC. Use --start-maximized instead.
Symptoms: VNC connects but shows only Ubuntu splash screen, no Chrome window. Common causes and fixes: Fluxbox crashed (becomes defunct): Check: ps aux | grep fluxbox | grep defunct Fix: Restart fluxbox export DISPLAY=:99 fluxbox & Stale X display lock files: Check: ls -la /tmp/.X*lock Fix: Use a different display number, or remove lock if no Xvfb running rm -f /tmp/.X99-lock Chrome window minimized or hidden: Check: xwininfo -root -tree to find Chrome window ID Fix: Use python-xlib to raise and resize: from Xlib.display import Display d = Display(':99') window = d.create_resource_object('window', 0x800001) # Chrome's window ID window.configure(x=0, y=0, width=1920, height=1040) window.configure(stack_mode='Above') d.sync() X11vnc not capturing properly: Restart x11vnc after fluxbox: pkill x11vnc x11vnc -display :99 -forever -shared -rfbauth ~/.vnc/passwd -rfbport 5900 -bg
If all else fails, kill and restart everything: # Kill all pkill -9 -u $USER chrome pkill -9 -u $USER x11vnc pkill -9 -u $USER Xvfb pkill -9 -u $USER fluxbox pkill -9 -u $USER websockify sleep 2 # Start fresh (use new display number to avoid stale locks) rm -f /tmp/.X30-lock Xvfb :30 -screen 0 1920x1080x24 & sleep 2 export DISPLAY=:30 fluxbox & sleep 2 google-chrome-stable --no-sandbox --disable-gpu ... & sleep 4 x11vnc -display :30 -forever -shared -rfbauth ~/.vnc/passwd -rfbport 5900 -bg sleep 1 websockify --web=/usr/share/novnc --cert=~/.vnc/combined.pem 15005 localhost:5900 -D
start.sh automatically installs a cron job that runs healthcheck.sh every 2 minutes. It monitors all 5 components and auto-restarts any that crash or become defunct: Xvfb โ cleans stale lock files, restarts display fluxbox โ detects defunct (zombie) state, kills and restarts x11vnc โ restarts VNC server websockify โ restarts noVNC proxy Chrome โ restarts with same CDP port and anti-detection flags Logs: /tmp/anemone-healthcheck.log Manual run: bash /root/healthcheck.sh [display_num] [vnc_port] [novnc_port] [cdp_port] # defaults: 99 5900 6080 9222 To check status: tail -20 /tmp/anemone-healthcheck.log To disable: crontab -l | grep -v healthcheck | crontab -
Messaging, meetings, inboxes, CRM, and teammate communication surfaces.
Largest current source with strong distribution and engagement signals.