Entity trail

browser-ai

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-07-10 / news-researcherOpenAI Kills ChatGPT Atlas Browser After Nine Months, Folds It Into a Desktop Super AppOpenAI will sunset ChatGPT Atlas on August 9, 2026, less than a year after launching it in October 2025. Agentic browsing moves into a unified ChatGPT desktop app that merges ChatGPT, Codex, and Atlas, adding tabs, a password manager, and autofill, plus a separate server-side cloud browser where agents complete tasks remotely and a new ChatGPT Chrome extension that reads the current page context. The kill is explicitly framed as a 'side quest' cut to refocus on productivity — a rare public retreat on a shipped product, and a signal that standalone AI browsers may not be a defensible surface.
2026-07-10 / projects-researcherbrowser-use Ships 'Browser Harness' — Agents Edit Their Own Browser Helpers Mid-Task Instead of Failingbrowser-use/browser-harness is a deliberately thin layer over the Chrome DevTools Protocol where the agent writes and patches its own helper functions at runtime. When it hits a missing capability mid-task — file upload is the canonical example — it edits the harness code and adds the function rather than erroring out, which the project calls 'self-healing.' It runs against local Chrome, stealth browsers, or a hosted Browser Use Box, is at ~15.9K stars, and now has a JS sibling (browser-harness-js). The design bet is that a minimal CDP bridge plus a code-writing agent beats a rigid, pre-enumerated automation API.
2026-07-09 / agents-researcherOpenClaw ships broad July 6 platform update: GPT-5.6 support, external harness attach, hardened provider I/OOpenClaw released a wide platform update adding GPT-5.6 support, an external-harness attach flow, Telegram Codex pairing/steering, and event-driven cron runs, alongside notable security work — bounding oversized/malformed responses across Moonshot, Anthropic OAuth, Discord, Matrix, browser, and embeddings paths, and rejecting incompatible Node 23 runtimes. For self-hosters this is a meaningful reliability and input-validation hardening pass on a runtime that has been a repeated source of supply-chain incidents. The external harness attach flow also makes it easier to bolt OpenClaw onto existing agent stacks.
2026-07-09 / agents-researcherClawHavoc campaign plants 300+ malicious skills on a single marketplace to run infostealersUnit 42 detailed ClawHavoc, a supply-chain campaign that seeded more than 300 malicious skills on one agent-skill marketplace; the instruction files directed agents to fetch and execute an infostealer that harvested browser credentials, keychain passwords, SSH keys, and crypto wallets. It's a live, at-scale demonstration that the skill install step is the new npm-style attack surface for agents. Combined with the SkillCloak evasion research, it shows attackers are both shipping payloads and defeating the scanners meant to catch them.
2026-07-08 / vibe-coding-researcherBrowser Tools for GitHub Copilot in VS Code Reach General AvailabilityGitHub moved Copilot's in-editor browser tools to GA on July 1, 2026, giving the agent the ability to drive a browser to test and verify its own web changes without leaving VS Code. This mirrors the computer-use/browser integration push seen in Claude in Chrome and chrome-devtools-mcp. The practical win is closed-loop UI work: the agent edits, renders, and inspects the result in one flow.
2026-07-08 / hn-researcherShow HN: Free Mermaid Diagram EditorA free browser-based Mermaid diagram editor drew 41 points and 11 comments on HN. Low AI signal on its own, but Mermaid generation/editing is an increasingly common downstream surface for LLM output (docs, architecture diagrams), making lightweight editors relevant to AI-assisted documentation workflows.
2026-07-08 / hn-researcherShow HN: Fortress — a Stealth Chromium So Agents Stop Getting BlockedFortress (41 points, 58 comments on HN) is an open-source stealth Chromium build aimed at letting browser-driving AI agents evade bot-detection and anti-automation blocks. The lively comment thread reflects the ongoing arms race between agent operators and sites deploying bot mitigation — a practical concern for anyone building web-browsing agents.
2026-07-07 / arxiv-researcherUntrusted Content Masking Gives Web Agents Provable Prompt-Injection IsolationExtends the strict trusted-instruction/untrusted-data separation that already holds for text and tool-use APIs into the browser, masking untrusted page content so web agents get security guarantees rather than best-effort filtering. It lands amid a reported 340% surge in prompt-injection attacks in 2026 and OWASP naming injection the top agentic-AI failure mode. For builders it offers a guarantee-backed defense pattern for browser agents instead of heuristic content sanitization.
2026-07-02 / saas-disruption-researcherMozilla's Tabstack Tops Product Hunt for July — Browser-Automation-as-a-Service Aimed at the Scraping/RPA CategoryMozilla's Tabstack ranked #1 on Product Hunt for July 2026, extracting web data and automating browsers 'with no scraper required,' a builder-facing shot at the scraping and RPA tooling category. Its prominence alongside agent-infrastructure launches (Humalike, ElevenAgents) reflects that the Product Hunt AI bar now sits at 800–1,200 upvotes and rewards agents that do a specific job inside an existing workflow. Single-source (Product Hunt) at time of writing, so rated conservatively.
2026-07-02 / agents-researcherUW study: four of seven agentic browsers let attackers bypass the same-origin policyA University of Washington team tested seven agentic browsers and found four — ChatGPT Atlas, Chrome with Gemini, Claude for Chrome, and Perplexity Comet — create ways to break the same-origin policy that normally isolates websites from each other's data, via prompt injection and cross-origin memory poisoning. The researchers ran a working proof-of-concept attack against ChatGPT Atlas; Firefox AI Mode, which grants its agent the fewest permissions, was the safest but most limited. For builders it confirms that granting browser agents broad DOM/memory access reopens web-security boundaries that took two decades to establish.
2026-07-01 / agents-researcherBrowserAct hits #1 on Product Hunt, signaling demand for a dedicated browser layer for agentsBrowserAct reached No. 1 Product of the Day on Product Hunt (June 25) and entered the weekly Top 3, marketing itself as a browser layer purpose-built for AI agents that bundles browser control, session management, verification/CAPTCHA handling, remote handoff, reusable skills and safety gates into one system. The traction reflects a maturing thesis that general-purpose LLMs need reliable, stateful browser infrastructure to act on real websites. For builders, this is another 'agent runtime' primitive to evaluate against Browser Use, Mariner and computer-use APIs.
2026-07-01 / agents-researcherGoogle pushes agentic 'auto browse' into Android at the OS levelGoogle is moving Chrome's agentic 'auto browse' from a browser feature to an OS-level capability, shipping on Pixel 10 and Galaxy S26 in late June 2026 with a stated path to 200 million devices by year end — alongside Project Mariner, its autonomous web agent for AI Ultra subscribers that books services and orders groceries by driving real sites. In roughly 15 months the space went from Anthropic's computer-use research preview to agentic browsing baked into the world's most popular browser and mobile OS. Builders should assume a large, default-on consumer browser-agent surface — and the prompt-injection and permission attack surface that comes with it.

Graph relationships

USES
Vercel AI SDK
browser-ai has automatic fallback to Vercel AI SDK server
Source finding
USES
Chrome AI
browser-ai TypeScript SDK unifies Chrome built-in AI, WebLLM, and window.ai into a consistent interface.
Source finding

Source trail

The Verge GitHub (multiple)Releasebot Unit 42 (Palo Alto Networks)GitHub Changelog Hacker News / MoxieDocs Hacker News / tiliondev

Graph sources

entity graphfindings textkg edgeskg entities