Anti Detect Browser Skill 安全审计

302303```bash304pip install antibrow305python -m antibrow install    # download the kernel (one-time; first launch does it too)306python -m antibrow login      # store the API key in ~/.antibrow/license.key307```

466467The SDKs (npm + PyPI) are **MIT**. The browser kernel is a **closed-source binary** downloaded from AntiBrow's CDN onto the end user's machine at runtime - usable for your own work including commercial work at any company size, but not redistributable, resellable or embeddable; exposing it to third-party customers needs a separate OEM/SaaS license. Listing these packages as a dependency is **not** redistribution. `BINARY-LICENSE.md` in `https://github.com/antibrow/antibrow` is the authoritative text.468469An API key is required at every launch - see [Supply chain](#supply-chain-what-runs-and-what-gets-downloaded) for how the license check behaves and why there is no offline mode. The token is cached, so a tight relaunch loop hits the network roughly once a day.470

106107Note what happens when. Executable code arrives **once, at install time**: the package from the registry, and the kernel it caches on first launch. Both can be warmed during an image build, after which a running container fetches no code at all. What crosses the network **at run time** is a signed licence token - a short string of data the kernel checks and caches, roughly one exchange a day, never code and never evaluated. Air-gapped environments are still unsupported, because that token exchange cannot be skipped; if a deployment cannot make any outbound call, this is the wrong tool.108

267268```typescript269const { liveView } = await ab.launch({270  headless: true,271  liveView: true,272})273274console.log('Watch live:', liveView.viewUrl)275// Share this URL - anyone with access can see the browser screen276```

370| `temporary` | `False` | Put the profile in the separate temp tree that profile managers do not enumerate. Recommended for automation. |371| `sync` | plan default | `True` creates and syncs a cloud profile, `False` keeps the launch local. Mutually exclusive with `temporary`. |372| `webauthn_capture` | `True` | Keep new passkeys in the profile's portable store so they travel with a sync or export. |373| `proxy_auth` | `"native"` | Credentials answered in the network stack, with no extension loaded. |

256257```typescript258await ab.launch({ profile: 'main-account', sync: true })    // create + sync (throws if the plan has no sync)259await ab.launch({ profile: 'main-account', sync: false })   // stay local260```261

222223Automation tends to mint a profile per task, which fills the profile manager with names nobody will ever open again. `temporary` puts them in a separate tree (`~/.anti-detect-browser/profiles-temp/`) that the desktop app does not enumerate:224

238239- **Nothing is deleted for you.** A temporary profile keeps its persona and its logins for as long as it sits on disk, which is what makes it reusable. Sweeping is yours to schedule.240- **The two trees are separate namespaces.** A temporary `gmail` and a managed `gmail` are two different profiles, with different personas and different cookie jars. If a script's launches disagree about `temporary`, it is silently operating two identities under one name.241- **`temporary` and `sync: true` are mutually exclusive** and passing both throws. Temporary profiles are local by construction.

132133A profile saves cookies, localStorage, and session data across launches. Same profile name = same stored state next time.134

53- **Mobile-facing pages** - Reach a page as a phone rather than a desktop, from the machine you already have, with `deviceType: 'android'`.54- **Automation at scale** - A profile per task without filling the profile manager, and without a launch stealing focus from whatever you are doing (`temporary`, `focusWindow`).55- **Agent-driven browsing** - Hand an AI agent a browser that stays logged in between runs and looks like one machine to the sites it visits (MCP mode: **browser-mcp-agent**).56- **Keeping separate identities separate** - Accounts you own, or operate with the holder's authorization, each in its own profile with its own persona, cookie jar, storage and egress, so sessions never bleed into one another. Verifying that the isolation actually holds - and what it cannot cover - is the **multi-account-isolation** skill.57

1819**What this does not claim.** A coherent real-device fingerprint removes the *contradictions* a synthetic browser leaves behind. It is not a guaranteed pass against enterprise bot managers, which also score network reputation, request patterns, behaviour and account history - none of which a fingerprint touches. Measure with the suites listed under [What detection actually tests](#what-detection-actually-tests) rather than assuming.20

569570**Out of scope, and not supported:** accessing any system without authorization; credential stuffing, password spraying, or logging into accounts that are not yours; taking over accounts; bulk creation of fake accounts, fake reviews, or fake engagement; circumventing an authentication, payment, or authorization control; scraping personal data in violation of applicable law; working around a platform's enforcement decision.571572The operator is responsible for complying with the terms of the sites being automated and with applicable law. Nothing here defeats identity verification, and no fingerprint setting makes unauthorized access lawful.573

55- **Agent-driven browsing** - Hand an AI agent a browser that stays logged in between runs and looks like one machine to the sites it visits (MCP mode: **browser-mcp-agent**).56- **Keeping separate identities separate** - Accounts you own, or operate with the holder's authorization, each in its own profile with its own persona, cookie jar, storage and egress, so sessions never bleed into one another. Verifying that the isolation actually holds - and what it cannot cover - is the **multi-account-isolation** skill.57

567568**Intended:** automating your own accounts and your own systems; running client accounts with the account holder's authorization; collecting publicly available data; verifying your own ads, pricing and geo-gated content; testing your own anti-fraud and bot-detection stack; giving an AI agent a browser for work you would do yourself.569570**Out of scope, and not supported:** accessing any system without authorization; credential stuffing, password spraying, or logging into accounts that are not yours; taking over accounts; bulk creation of fake accounts, fake reviews, or fake engagement; circumventing an authentication, payment, or authorization control; scraping personal data in violation of applicable law; working around a platform's enforcement decision.571572The operator is responsible for complying with the terms of the sites being automated and with applicable law. Nothing here defeats identity verification, and no fingerprint setting makes unauthorized access lawful.573

126127antibrow answers each of these in the kernel from **one persona sampled from one real machine**, so the values are consistent by construction rather than by patch. Verify it yourself against [CreepJS](https://abrahamjuliot.github.io/creepjs/), [whoer.net](https://whoer.net), [browserleaks.com/canvas](https://browserleaks.com/canvas), [pixelscan.net](https://pixelscan.net), or `npx liarjs` in CI.128

233234const removed = ab.clearTemporaryProfiles({ olderThanDays: 7 })   // or: npx anti-detect-browser --clear-temp --older-than=7235```

60```bash61npm install anti-detect-browser@2.8.0 playwright-core   # pin the version; see Supply chain below62```

303```bash304pip install antibrow305python -m antibrow install    # download the kernel (one-time; first launch does it too)

302303```bash304pip install antibrow305python -m antibrow install    # download the kernel (one-time; first launch does it too)306python -m antibrow login      # store the API key in ~/.antibrow/license.key307```

58    && rm -rf /var/lib/apt/lists/*59RUN pip install --no-cache-dir antibrow==0.9.060RUN python -m antibrow install          # prefetch the kernel at build time, not at run time61COPY script.py .

5602. Get your API key from the dashboard5613. `npm install anti-detect-browser playwright-core`, or `pip install antibrow`5624. Launch your first anti-detect browser - the kernel downloads on first run563

101|---|---|---|102| SDK package | `anti-detect-browser` on npm, or `antibrow` on PyPI | Exact version in a committed lockfile; `npm ci` rather than `npm install` in CI. `npm view anti-detect-browser@2.8.0 dist.integrity` gives the published tarball hash to compare before adopting a version. No install scripts; dependencies are `ws`, `socks`, `yauzl`, `adm-zip`, `@modelcontextprotocol/sdk` |103| Browser kernel | a closed-source Chromium build the pinned package retrieves on first launch, cached in `~/.anti-detect-browser/` (~190 MB; ~320 MB for the macOS universal bundle) | Warm the cache during your image build rather than at run time - the Python CLI has an explicit `install` step for this, and on Node a single throwaway launch does it. Then mount `~/.anti-detect-browser/` as a volume so a running container needs nothing further. Installed kernels are never swapped underneath a live profile; updates happen only when explicitly requested |104