โ† All skills
Tencent SkillHub ยท Productivity

Camoufox Stealth Browser

C++ level anti-bot browser automation using Camoufox (patched Firefox) in isolated containers. Bypasses Cloudflare Turnstile, Datadome, Airbnb, Yelp. Superior to Chrome-based solutions (undetected-chromedriver, puppeteer-stealth) which only patch at JS level. Use when standard Playwright/Selenium gets blocked.

skill openclawclawhub Free
0 Downloads
0 Stars
0 Installs
0 Score
High Signal

C++ level anti-bot browser automation using Camoufox (patched Firefox) in isolated containers. Bypasses Cloudflare Turnstile, Datadome, Airbnb, Yelp. Superior to Chrome-based solutions (undetected-chromedriver, puppeteer-stealth) which only patch at JS level. Use when standard Playwright/Selenium gets blocked.

โฌ‡ 0 downloads โ˜… 0 stars Unverified but indexed

Install for OpenClaw

Quick setup
  1. Download the package from Yavira.
  2. Extract the archive and review SKILL.md first.
  3. Import or place the package into your OpenClaw setup.

Requirements

Target platform
OpenClaw
Install method
Manual import
Extraction
Extract archive
Prerequisites
OpenClaw
Primary doc
SKILL.md

Package facts

Download mode
Yavira redirect
Package format
ZIP package
Source platform
Tencent SkillHub
What's included
README.md, SKILL.md, references/fingerprint-checks.md, references/proxy-setup.md, scripts/camoufox-fetch.py, scripts/camoufox-session.py

Validation

  • Use the Yavira download entry.
  • Review SKILL.md after the package is downloaded.
  • Confirm the extracted package contains the expected setup assets.

Install with your agent

Agent handoff

Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.

  1. Download the package from Yavira.
  2. Extract it into a folder your agent can access.
  3. Paste one of the prompts below and point your agent at the extracted folder.
New install

I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Then review README.md for any prerequisites, environment setup, or post-install checks. Tell me what you changed and call out any manual steps you could not complete.

Upgrade existing

I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Then review README.md for any prerequisites, environment setup, or post-install checks. Summarize what changed and any follow-up checks I should run.

Trust & source

Release facts

Source
Tencent SkillHub
Verification
Indexed source record
Version
1.0.0

Documentation

ClawHub primary doc Primary doc: SKILL.md 29 sections Open source page

Camoufox Stealth Browser ๐ŸฆŠ

C++ level anti-bot evasion using Camoufox โ€” a custom Firefox fork with stealth patches compiled into the browser itself, not bolted on via JavaScript.

Why Camoufox > Chrome-based Solutions

ApproachDetection LevelToolsCamoufox (this skill)C++ compiled patchesUndetectable fingerprints baked into browserundetected-chromedriverJS runtime patchesCan be detected by timing analysispuppeteer-stealthJS injectionPatches applied after page load = detectableplaywright-stealthJS injectionSame limitations Camoufox patches Firefox at the source code level โ€” WebGL, Canvas, AudioContext fingerprints are genuinely spoofed, not masked by JavaScript overrides that anti-bot systems can detect.

Key Advantages

C++ Level Stealth โ€” Fingerprint spoofing compiled into the browser, not JS hacks Container Isolation โ€” Runs in distrobox, keeping your host system clean Dual-Tool Approach โ€” Camoufox for browsers, curl_cffi for API-only (no browser overhead) Firefox-Based โ€” Less fingerprinted than Chrome (everyone uses Chrome for bots)

When to Use

Standard Playwright/Selenium gets blocked Site shows Cloudflare challenge or "checking your browser" Need to scrape Airbnb, Yelp, or similar protected sites puppeteer-stealth or undetected-chromedriver stopped working You need actual stealth, not JS band-aids

Tool Selection

ToolLevelBest ForCamoufoxC++ patchesAll protected sites - Cloudflare, Datadome, Yelp, Airbnbcurl_cffiTLS spoofingAPI endpoints only - no JS needed, very fast

Quick Start

All scripts run in pybox distrobox for isolation. โš ๏ธ Use python3.14 explicitly - pybox may have multiple Python versions with different packages installed.

1. Setup (First Time)

# Install tools in pybox (use python3.14) distrobox-enter pybox -- python3.14 -m pip install camoufox curl_cffi # Camoufox browser downloads automatically on first run (~700MB Firefox fork)

2. Fetch a Protected Page

Browser (Camoufox): distrobox-enter pybox -- python3.14 scripts/camoufox-fetch.py "https://example.com" --headless API only (curl_cffi): distrobox-enter pybox -- python3.14 scripts/curl-api.py "https://api.example.com/endpoint"

Architecture

โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ OpenClaw Agent โ”‚ โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค โ”‚ distrobox-enter pybox -- python3.14 scripts/xxx.py โ”‚ โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค โ”‚ pybox Container โ”‚ โ”‚ โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”‚ โ”‚ โ”‚ Camoufox โ”‚ โ”‚ curl_cffi โ”‚ โ”‚ โ”‚ โ”‚ (Firefox) โ”‚ โ”‚ (TLS spoof)โ”‚ โ”‚ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ”‚ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

Camoufox

What: Custom Firefox build with C++ level stealth patches Pros: Best fingerprint evasion, passes Turnstile automatically Cons: ~700MB download, Firefox-based Best for: All protected sites - Cloudflare, Datadome, Yelp, Airbnb

curl_cffi

What: Python HTTP client with browser TLS fingerprint spoofing Pros: No browser overhead, very fast Cons: No JS execution, API endpoints only Best for: Known API endpoints, mobile app reverse engineering

Critical: Proxy Requirements

Datacenter IPs (AWS, DigitalOcean) = INSTANT BLOCK on Airbnb/Yelp You MUST use residential or mobile proxies: # Example proxy config proxy = "http://user:pass@residential-proxy.example.com:8080" See references/proxy-setup.md for proxy configuration.

Behavioral Tips

Sites like Airbnb/Yelp use behavioral analysis. To avoid detection: Warm up: Don't hit target URL directly. Visit homepage first, scroll, click around. Mouse movements: Inject random mouse movements (Camoufox handles this). Timing: Add random delays (2-5s between actions), not fixed intervals. Session stickiness: Use same proxy IP for 10-30 min sessions, don't rotate every request.

Headless Mode Warning

โš ๏ธ Old --headless flag is DETECTED. Options: New Headless: Use headless="new" (Chrome 109+) Xvfb: Run headed browser in virtual display Headed: Just run headed if you can (most reliable) # Xvfb approach (Linux) Xvfb :99 -screen 0 1920x1080x24 & export DISPLAY=:99 python scripts/camoufox-fetch.py "https://example.com"

Troubleshooting

ProblemSolution"Access Denied" immediatelyUse residential proxyCloudflare challenge loopsTry Camoufox instead of NodriverBrowser crashes in pyboxInstall missing deps: sudo dnf install gtk3 libXtTLS fingerprint blockedUse curl_cffi with impersonate="chrome120"Turnstile checkbox appearsAdd mouse movement, increase wait timeModuleNotFoundError: camoufoxUse python3.14 not python or python3greenlet segfault (exit 139)Python version mismatch - use python3.14 explicitlylibstdc++.so.6 errorsNixOS lib path issue - use python3.14 in pybox

Python Version Issues (NixOS/pybox)

The pybox container may have multiple Python versions with separate site-packages: # Check which Python has camoufox distrobox-enter pybox -- python3.14 -c "import camoufox; print('OK')" # Wrong (may use different Python) distrobox-enter pybox -- python3.14 scripts/camoufox-session.py ... # Correct (explicit version) distrobox-enter pybox -- python3.14 scripts/camoufox-session.py ... If you get segfaults or import errors, always use python3.14 explicitly.

Scrape Airbnb Listing

distrobox-enter pybox -- python3.14 scripts/camoufox-fetch.py \ "https://www.airbnb.com/rooms/12345" \ --headless --wait 10 \ --screenshot airbnb.png

Scrape Yelp Business

distrobox-enter pybox -- python3.14 scripts/camoufox-fetch.py \ "https://www.yelp.com/biz/some-restaurant" \ --headless --wait 8 \ --output yelp.html

API Scraping with TLS Spoofing

distrobox-enter pybox -- python3.14 scripts/curl-api.py \ "https://api.yelp.com/v3/businesses/search?term=coffee&location=SF" \ --headers '{"Authorization": "Bearer xxx"}'

Session Management

Persistent sessions allow reusing authenticated state across runs without re-logging in.

Quick Start

# 1. Login interactively (headed browser opens) distrobox-enter pybox -- python3.14 scripts/camoufox-session.py \ --profile airbnb --login "https://www.airbnb.com/account-settings" # Complete login in browser, then press Enter to save session # 2. Reuse session in headless mode distrobox-enter pybox -- python3.14 scripts/camoufox-session.py \ --profile airbnb --headless "https://www.airbnb.com/trips" # 3. Check session status distrobox-enter pybox -- python3.14 scripts/camoufox-session.py \ --profile airbnb --status "https://www.airbnb.com"

Flags

FlagDescription--profile NAMENamed profile for session storage (required)--loginInteractive login mode - opens headed browser--headlessUse saved session in headless mode--statusCheck if session appears valid--export-cookies FILEExport cookies to JSON for backup--import-cookies FILEImport cookies from JSON file

Storage

Location: ~/.stealth-browser/profiles/<name>/ Permissions: Directory 700, files 600 Profile names: Letters, numbers, _, - only (1-63 chars)

Cookie Handling

Save: All cookies from all domains stored in browser profile Restore: Only cookies matching target URL domain are used SSO: If redirected to Google/auth domain, re-authenticate once and profile updates

Login Wall Detection

The script detects session expiry using multiple signals: HTTP status: 401, 403 URL patterns: /login, /signin, /auth Title patterns: "login", "sign in", etc. Content keywords: "captcha", "verify", "authenticate" Form detection: Password input fields If detected during --headless mode, you'll see: ๐Ÿ”’ Login wall signals: url-path, password-form Re-run with --login to refresh the session.

Remote Login (SSH)

Since --login requires a visible browser, you need display forwarding: X11 Forwarding (Preferred): # Connect with X11 forwarding ssh -X user@server # Run login (opens browser on your local machine) distrobox-enter pybox -- python3.14 scripts/camoufox-session.py \ --profile mysite --login "https://example.com" VNC Alternative: # On server: start VNC session vncserver :1 # On client: connect to VNC vncviewer server:1 # In VNC session: run login distrobox-enter pybox -- python3.14 scripts/camoufox-session.py \ --profile mysite --login "https://example.com"

Security Notes

โš ๏ธ Cookies are credentials. Treat profile directories like passwords: Profile dirs have chmod 700 (owner only) Cookie exports have chmod 600 Don't share profiles or exported cookies over insecure channels Consider encrypting backups

Limitations

LimitationReasonlocalStorage/sessionStorage not exportedUse browser profile instead (handles automatically)IndexedDB not portableStored in browser profile, not cookie exportNo parallel profile accessNo file locking in v1; use one process per profile

References

references/proxy-setup.md โ€” Proxy configuration guide references/fingerprint-checks.md โ€” What anti-bot systems check

Category context

Workflow acceleration for inboxes, docs, calendars, planning, and execution loops.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package
4 Docs2 Scripts
  • SKILL.md Primary doc
  • README.md Docs
  • references/fingerprint-checks.md Docs
  • references/proxy-setup.md Docs
  • scripts/camoufox-fetch.py Scripts
  • scripts/camoufox-session.py Scripts