claude-for-safari

Provides an AI “Skill” (installed via npx) that lets an agent control the user’s local Safari on macOS using AppleScript and macOS-native capabilities (including page interaction, tab listing/switching, JavaScript execution, and screenshots via screencapture).

Evaluated Mar 30, 2026 (22d ago)
Homepage ↗ Repo ↗ Automation ai-agent browser-automation macos safari applescript screencapture skills
⚙ Agent Friendliness
46
/ 100
Can an agent use this?
🔒 Security
53
/ 100
Is it safe for agents?
⚡ Reliability
25
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
0
Documentation
75
Error Messages
0
Auth Simplicity
70
Rate Limits
0

🔒 Security

TLS Enforcement
100
Auth Strength
45
Scope Granularity
20
Dep. Hygiene
50
Secret Handling
50

No network API is described; access is via local macOS automation permissions and user confirmation prompts from the hosting agent. The threat model is primarily local/agent-driven (risk of unintended clicks/navigation and exposure through screenshots), and it depends on macOS privacy settings. No details are provided about dependency scanning, secret handling practices, or structured error reporting.

⚡ Reliability

Uptime/SLA
0
Version Stability
40
Breaking Changes
40
Error Recovery
20
AF Security Reliability

Best When

You want an AI agent to work with your existing Safari session on macOS (real user context), with OS-level permissions controlling access to automation and screenshots.

Avoid When

You need a multi-platform/browser-agnostic solution or you cannot grant macOS automation/screen permissions; also avoid for handling highly sensitive browsing without strict user oversight.

Use Cases

  • Let an AI agent inspect what tabs/windows are open in Safari
  • Ask an agent to navigate to URLs, open new tabs/windows, and switch tabs
  • Enable the agent to read page content and extract information via AppleScript/JS
  • Allow form filling and page interaction (click/type/scroll) through scripted events
  • Provide visual context to the agent via Safari screenshots (foreground or background with permissions)

Not For

  • Automating non-Safari browsers (Chrome/Firefox/others) — the project describes Safari-only support
  • Headless/background server automation (it relies on macOS UI automation and system permissions)
  • Use cases requiring a documented network API contract, auth model, or server-side isolation

Interface

REST API
No
GraphQL
No
gRPC
No
MCP Server
No
SDK
No
Webhooks
No

Authentication

Methods: macOS system permission prompts for Automation (terminal controlling Safari) macOS Screen Recording permission (optional, for background screenshots)
OAuth: No Scopes: No

There is no API-layer auth (no tokens/scopes described). Access is mediated through macOS privacy/permission dialogs and the agent’s own confirmation flow in the hosting AI agent (e.g., Claude Code).

Pricing

Free tier: No
Requires CC: No

The repository is MIT-licensed and installed as a local “skill”; no service pricing is described. Costs would come from the user’s AI provider/agent usage, not from this package.

Agent Metadata

Pagination
none
Idempotent
False
Retry Guidance
Not documented

Known Gotchas

  • Requires macOS automation permissions; first-run may require user confirmation in System Settings
  • Screenshot mode affects UX: foreground screenshot can briefly activate Safari (~0.3s) unless Screen Recording permission is granted
  • Operations are stateful (click/type/navigate), so retries may cause duplicate actions unless the agent adds safeguards
  • Safari-only support; behavior may vary by page complexity and dynamic web apps

Alternatives

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for claude-for-safari.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

$3

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

Scores are editorial opinions as of 2026-03-30.

8642
Packages Evaluated
17761
Need Evaluation
586
Need Re-evaluation
Community Powered