Bandit Stealth for Chrome

Lets the Bandit agent running on your computer read and act on web pages you choose.

Bandit Stealth for Chrome connects the Bandit coding agent on your computer to your browser. When you ask Bandit to do something on a web page, such as reproduce a bug on your staging site, read a dashboard you are signed in to, or fill in a form, it does it in browser tabs you can see, on sites you have allowed. Requires the Bandit CLI on the same computer (Node.js 20 or later): npm i -g @burtson-labs/bandit-stealth-cli bandit chrome install Then reopen the browser. Interactive bandit sessions connect to the extension by themselves; /chrome connect attaches a session that is already running. How it works - The agent, the model and the approval prompts run in the Bandit CLI on your computer. The extension is the browser side: it reads pages, clicks, types and selects, and shows what it is doing. - It talks to the CLI through Chrome native messaging. The extension makes no network requests of its own: no analytics, no crash reporting, no relay server. - Page content the agent reads goes to the CLI, which sends it to the model provider you chose in Bandit, like any other tool output. With a local model (Ollama), nothing leaves your computer. What you control - Sites: the extension has no access to any site at install. You grant sites one at a time in the side panel, and can revoke them there. - Tabs: the agent works only in its own tab group, named "Bandit". It cannot see or touch your other tabs. - Approvals: the CLI asks before the first visit to a new host and before clicks and typing on a site, until you allow that site. Sending, submitting, paying, publishing and deleting ask every time. - Stop: a Stop Bandit control on the page and in the side panel ends the current task at once. - Incognito windows are not supported. What it never does - Never reads or types into password, one-time-code or payment fields. - Never clicks Allow on sign-in or consent screens. - Never acts on browser pages, extension pages or web store pages. - Banking, healthcare, government identity and cloud-console sites are read-only unless you turn on actions for that site. Adult and pirated-content sites are off. While it works, the page shows a soft outline, a cursor that moves to each element with a label of the current step, and the Stop control. The side panel lists the sites you allowed, sites waiting for your answer, and recent actions. Recent actions record how many characters were typed and into which field, never the text. The same extension works in Microsoft Edge, Brave and other Chromium browsers. Bandit is made by Burtson Labs. Source code: Apache-2.0.