Mr-Destroyer

Zimreaper — Development skill for Claude Code

Development community

Agentic browser for bug bounty: Claude, Hermes or Codex drives real Chromium over MCP.

How to install Zimreaper

This entry records only its repository, not the path inside it, so there is no exact command to give. Open Mr-Destroyer/ZIMREAPER and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Zimreaper does

Agentic browser for bug bounty: Claude, Hermes or Codex drives real Chromium over MCP.

Alternatives in Development

Domxss — Confirm DOM XSS in a real headless browser — injects canary payloads into params + URL fragment and only repor 4.5k ★
Agentic Stack — One brain, many harnesses 2.2k ★
/report — Generate a submission-ready bug bounty report 1.8k ★

README

**A real Chromium browser that an AI agent drives with a real mouse, a real keyboard and a real wheel — over MCP — built for bug hunting.**

[![ci](https://github.com/Mr-Destroyer/ZIMREAPER/actions/workflows/ci.yml/badge.svg)](https://github.com/Mr-Destroyer/ZIMREAPER/actions/workflows/ci.yml) [![license](https://img.shields.io/badge/license-MIT-22c55e?style=flat-square&labelColor=0b0f18)](LICENSE) [![node](https://img.shields.io/badge/node-22%2B-22d3ee?style=flat-square&labelColor=0b0f18)](#build-from-source) [![platform](https://img.shields.io/badge/linux-AppImage%20%C2%B7%2097%20MB-a78bfa?style=flat-square&labelColor=0b0f18)](#install) [![tools](https://img.shields.io/badge/MCP%20tools-21-fb7185?style=flat-square&labelColor=0b0f18)](#the-21-tools) [![protocol](https://img.shields.io/badge/protocol-v0.1.0%20frozen-fbbf24?style=flat-square&labelColor=0b0f18)](docs/protocol.md)

[Install](#install) · [Connect an agent](#connect-your-agent) · [Tools](#the-21-tools) · [Bug bounty](#built-for-bug-bounty) · [Trust boundary](#the-trust-boundary) · [Troubleshooting](#troubleshooting)

Most "AI browser" projects call `element.click()` from a script and hope the page believes it. Frameworks check `isTrusted`, bot walls score the event trail, and half the app never notices. ZIMREAPER drives Chromium the way a person does: `Input.dispatchMouseEvent` with real press/release/click counts, real key events with proper codes and modifiers, real wheel deltas, real drag paths. Every click you see in the audit log actually happened in the compositor.

On top of that it gives the agent senses a person does not have: a token-budgeted accessibility snapshot with stable refs, diffs instead of re-reads, a network log of the XHRs the SPA actually made, forked sessions that share one login, and replayable traces that refuse to click when the p