Skip to content
Back to skills

La Vague

ASecurity

"Operate LaVague browser-agent, model-context, driver,

  • 247 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added September 8, 2026
devopspythongobashsqlrailsazureapi

Works with

  • cli
  • api

Security analysis

A96/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 20 files and shows the line behind each finding

Scanned September 8, 2026

npx -y skills add VectorSpaceLab/AREX-Skill --skill la-vague --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of La Vague?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for La Vague
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/vectorspacelab-la-vague/badge)](https://www.skillsdirectory.com/skills/vectorspacelab-la-vague)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: la-vague
description: "Operate LaVague browser-agent, model-context, driver,
  Gradio/server, and QA automation workflows safely with bundled probes and
  troubleshooting."
disable-model-invocation: true
metadata:
  disco-role: operating
license: Apache 2.0
---

# LaVague repo skill

Use this skill when a task involves LaVague / lavague package workflows: AI web agents, Large Action Model browser automation, Selenium/Playwright action generation, provider contexts, retriever pipelines, Gradio demos, Chrome extension server, or LaVague QA/test-runner CLIs.

## Fast route map

| User task | Read next |
| --- | --- |
| Build or debug a `WebAgent`, `WorldModel`, `ActionEngine`, `PythonEngine`, logs, token counting, or `ActionResult` | `sub-skills/core-web-agent/SKILL.md` |
| Configure Selenium/Playwright, browser profiles, headless/headed mode, iframes, tabs, scrolling, screenshots, or browser binary failures | `sub-skills/browser-drivers/SKILL.md` |
| Choose OpenAI/Azure/Anthropic/Gemini/Fireworks/cache contexts, custom LlamaIndex models, Cohere, knowledge, or retriever pipelines | `sub-skills/contexts-and-retrievers/SKILL.md` |
| Launch or debug Gradio demos, Chrome extension server, `lavague-serve`, `AgentServer`, or `DriverServer` | `sub-skills/server-extension-gradio/SKILL.md` |
| Use `lavague-qa` or `lavague-test`, validate Gherkin features, generated pytest, or site config YAML | `sub-skills/qa-and-test-runner/SKILL.md` |
| Install/import/package split, telemetry, NLTK, setuptools, browser/API-key cross-cutting failures | `references/package-overview.md` and `references/troubleshooting.md` |

## Safe first step

From this `la-vague` skill root, run the shared probe before live browsing or provider calls:

```bash
python scripts/check_lavague_environment.py --check all --disable-telemetry
```

Then run the nearest sub-skill probe. These probes are safe by default: they check imports, signatures, CLI availability, env-var presence, or file shape. They do not launch browsers, contact providers, start servers, download data, or execute live websites unless a script option explicitly says it will.

## Install and import baseline

For the default user-facing stack:

```bash
pip install lavague
```

For narrower workflows, install only the packages you need, such as `lavague-core`, `lavague-drivers-selenium`, `lavague-drivers-playwright`, `lavague-contexts-openai`, `lavague-server`, `lavague-gradio`, `lavague-qa`, or `lavague-tests`. See [references/package-overview.md](references/package-overview.md) for the package split and console commands.

Minimal import check:

```python
from lavague.core import WorldModel, ActionEngine
from lavague.core.agents import WebAgent
from lavague.drivers.selenium import SeleniumDriver
```

Import success is not proof that browser binaries, provider credentials, UI dependencies, or target websites are ready.

## Live-run guardrails

Before any live LaVague run, confirm:

- The user authorizes browser automation on the target site.
- Provider credentials and token/cost implications are understood.
- Browser binaries or existing browser sessions are available.
- `LAVAGUE_TELEMETRY=NONE` is set if objectives, page content, generated code, screenshots, URLs, or errors could be sensitive.
- Persistent logging (`log_to_db=True`, `LocalLogger`, SQLite logs) is acceptable.
- Live examples that require public websites, model APIs, Gradio, or a Chrome extension are treated as optional and potentially flaky.

## Common entry snippets

Minimal WebAgent shape:

```python
from lavague.core import WorldModel, ActionEngine
from lavague.core.agents import WebAgent
from lavague.drivers.selenium import SeleniumDriver

driver = SeleniumDriver(headless=True)
agent = WebAgent(WorldModel(), ActionEngine(driver), n_steps=5)
agent.get("https://example.com")
result = agent.run("Summarize the visible page")
print(result.success, result.output)
```

Context-backed shape:

```python
from lavague.contexts.gemini import GeminiContext
from lavague.core import WorldModel, ActionEngine

context = GeminiContext()
world_model = WorldModel.from_context(context)
action_engine = ActionEngine.from_context(context, driver)
```

Chrome extension server help:

```bash
lavague-serve --help
```

QA input probe:

```bash
python sub-skills/qa-and-test-runner/scripts/lavague_qa_feature_probe.py --feature feature.feature --url https://example.test
```

## Provenance and refresh

Read [references/repo-provenance.md](references/repo-provenance.md) when checking whether this skill matches a current LaVague checkout. Refresh this skill if the LaVague commit, package versions, console entry points, or public API signatures changed.

## Non-goals

This skill is for operating the LaVague package. It does not cover front-end Chrome extension development, package publishing/release automation, or generic Selenium/Playwright/provider SDK usage when LaVague APIs are not involved.

Files in this skill

  • SKILL.md4.8 KB
  • references/package-overview.md4.4 KB
  • references/repo-provenance.md3.4 KB
  • references/repo-routing-metadata.json489 B
  • references/troubleshooting.md4.2 KB
  • scripts/check_lavague_environment.py4.1 KB
  • scripts/extract_lavague_doc_code.py2.7 KB
  • sub-skills/browser-drivers/SKILL.md4.3 KB
  • sub-skills/browser-drivers/references/browser-workflows.md8.7 KB
  • sub-skills/browser-drivers/references/driver-reference.md7.8 KB
  • sub-skills/browser-drivers/references/troubleshooting.md8.1 KB
  • sub-skills/browser-drivers/scripts/lavague_driver_probe.py12.4 KB
  • sub-skills/contexts-and-retrievers/SKILL.md4.3 KB
  • sub-skills/contexts-and-retrievers/references/customization-workflows.md5.6 KB
  • sub-skills/contexts-and-retrievers/references/provider-contexts.md6.5 KB
  • sub-skills/contexts-and-retrievers/references/retriever-reference.md6.4 KB
  • sub-skills/contexts-and-retrievers/references/troubleshooting.md6.8 KB
  • sub-skills/contexts-and-retrievers/scripts/lavague_context_retriever_probe.py14.1 KB
  • sub-skills/core-web-agent/SKILL.md4.6 KB
  • sub-skills/core-web-agent/references/api-reference.md6.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.