Playwright Stealth Verify for Openclaw

Playwright Stealth Verify measures whether an automated browser presents a coherent, internally consistent fingerprint without modifying or evading detection.

liarjsdev
v1.0.3
Aug 6, 2026
0
330
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install playwright-stealth-verify

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install playwright-stealth-verify using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is Playwright Stealth Verify?

Playwright Stealth Verify is an Openclaw Skills browser automation utility for testing Playwright, Puppeteer, Selenium, and CDP-driven browsers with the liarjs library. It evaluates an existing Page object or attaches to a browser through Chrome DevTools Protocol to identify inconsistencies across JavaScript, browser APIs, workers, GPU signals, codecs, and network metadata.

The skill measures a browser rather than changing it: it ships no evasions, stealth profiles, or fingerprint modifications. Use the results to validate launch configurations, evaluate stealth-plugin effects, investigate headless behavior, and add fingerprint-quality assertions to automated test suites.

Playwright Stealth Verify Use Cases

  • Verify whether a Playwright or Puppeteer browser exposes navigator.webdriver.
  • Detect HeadlessChrome tokens, missing Chrome objects, or headless viewport characteristics.
  • Identify patched APIs that no longer report native implementations.
  • Catch inconsistencies between the main thread and Web Workers.
  • Compare WebGL and WebGPU GPU identities after browser flag changes.
  • Assess browser fingerprints in a CI test suite with score or check-specific assertions.
  • Inspect a browser started outside the test process through a user-confirmed CDP endpoint.
  • Run offline JavaScript checks when the test network must not make outbound requests.
  • Use Openclaw Skills to turn browser fingerprint observations into repeatable automation quality checks.

How Playwright Stealth Verify Works

  1. Install liarjs as a pinned development dependency or choose the CLI for an already-running browser.
  2. Provide a Playwright or Puppeteer Page object exposing evaluate(expression: string) to checkPage.
  3. Run probes on about:blank by default, or specify a page owned by the user with the page option.
  4. Execute JavaScript-layer checks covering webdriver status, native API integrity, user-agent tokens, worker consistency, viewport behavior, browser identity, codecs, and GPU identity.
  5. Unless offline mode is enabled, request network observations from the configured liarjs edge endpoint, including IP, ASN, HTTP version, TLS version, ClientHello shape, and headers.
  6. Receive a ScanResult containing score, label, checks, client, server, and metadata.
  7. Assert against the overall score or filter individual checks with bad status values.
  8. Use failing check IDs to diagnose launch configuration, driver behavior, or incomplete overrides; treat the report as measurement data rather than remediation instructions.

Playwright Stealth Verify Setup

Install in a Node.js project

Node.js 22 or newer is required. Install liarjs as a development dependency so its version is recorded in the lockfile:

npm install --save-dev liarjs

Use it with an existing Playwright or Puppeteer Page:

import { checkPage } from "liarjs";

const result = await checkPage(page);
expect(result.score).toBeGreaterThanOrEqual(85);

const critical = result.checks.filter((c) => c.status === "bad");
expect(critical).toHaveLength(0);

Scan a browser through CDP

For a browser already listening on port 9222:

npx [email protected] --cdp http://127.0.0.1:9222

Example with a locally launched Chromium process:

./chrome --remote-debugging-port=9222 &
npx [email protected] --cdp http://127.0.0.1:9222

Confirm ownership of the CDP endpoint before attaching. When testing a launch configuration rather than a specific running browser, prefer the default CLI behavior, which launches a throwaway profile in a temporary directory and deletes it afterward.

Network and page options

Use offline mode for the 32 JavaScript-layer checks without outbound requests:

npx [email protected] --offline

Without offline mode, the browser requests the liarjs network endpoint. Use endpoint to route that request to an approved deployment of the Worker, and use page only with a page the user owns. Do not navigate to third-party sites as part of a scan.

Playwright Stealth Verify Data Schema & Taxonomy

ScanResult structure

Field Description
score Aggregate fingerprint coherence score used for threshold assertions.
label Human-readable interpretation of the scan result.
checks[] Individual checks with identifiers, statuses, and diagnostic details.
client Raw client-side fingerprint collected from the browser.
server Raw edge or network-layer view when online measurement is enabled.
meta.schema Payload schema version.

Harness-focused check taxonomy

Check ID Detects Maximum deduction
webdriver navigator.webdriver remaining enabled 40
native-integrity Injected APIs that no longer expose native-code identity 35
headless-ua HeadlessChrome in the user agent 30
worker-consistency Main-thread overrides missing from Web Workers 20
headless-viewport outerHeight === innerHeight and absent browser UI 10
gpu-triad Conflicting WebGL and WebGPU GPU names 22
chrome-object Chrome user agent without window.chrome 12
codecs Chrome-claiming Chromium unable to play H.264 6

The complete catalog contains 40 checks and is documented in the browser-fingerprint-audit skill reference. Online scans add network observations such as IP, ASN, HTTP version, TLS version, ClientHello shape, and headers; offline scans restrict measurement to the JavaScript layer.

Playwright Stealth Verify Advanced Features

  • Supports Playwright and Puppeteer Page objects through the shared evaluate(expression: string) interface.
  • Attaches to externally managed Chromium sessions through CDP.
  • Provides score-based assertions and granular check-ID assertions for regression testing.
  • Offers offline execution for controlled or isolated test networks.
  • Supports a custom network endpoint so edge observations can remain within your infrastructure.
  • Tests worker-versus-main-thread consistency, exposing partial stealth overrides.
  • Verifies native API integrity, browser identity, media codecs, viewport signals, WebGL, and WebGPU.
  • Uses temporary throwaway profiles for default CLI scans and cleans them up afterward.
  • Produces structured client, server, check, and schema metadata suitable for CI artifacts and triage workflows.
  • Complements fingerprint-failure-triage for diagnosis and fingerprint-ci-gate for enforcing build regressions within Openclaw Skills workflows.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*