Kuri – Zig based agent-browser alternative
TL;DR Highlight
Kuri, a 464KB browser automation tool built with Zig, cuts token costs in AI agent loops by eliminating Node.js dependencies.
Who Should Read
Developers integrating web browser automation into LLM agents who are frustrated by the weight or token waste of Node.js-based tools like Playwright/Puppeteer.
Core Mechanics
- Kuri is a browser automation tool written in Zig, completely independent of Node.js. Its binary size is only 464KB, and cold starts are as fast as approximately 3ms.
- It directly controls Chrome's CDP (Chrome DevTools Protocol), communicating with Chrome without a separate runtime. However, Chrome itself must be running somewhere.
- Its core design philosophy is 'for agent loops, not QA engineers.' It's optimized for a cycle of reading page state → minimizing tokens → reliably clicking with stable references → and moving to the next step.
- Compared to Vercel's agent-browser, Kuri used 16% fewer tokens for the entire agent workflow (go→snap→click→snap→eval) on a Google Flights (SIN→TPE) route. (kuri: 4,110 tokens vs agent-browser: 4,880 tokens).
- Several snapshot modes are available, with the `--interactive` mode being the most efficient for agent loops, using only 1,927 tokens compared to the compact mode's 4,328 tokens.
- However, a full JSON snapshot (`--json`) uses 31,280 tokens—7.2 times more than compact—and lightpanda's semantic_tree is similarly expensive at 26,244 tokens. lightpanda also has the additional drawback of sometimes producing empty DOMs because it doesn't execute JavaScript.
- It includes built-in features like A11y (accessibility tree) snapshots, HAR (HTTP Archive) recording, a standalone fetcher, an interactive terminal browser, and security testing.
- Benchmarks were measured using the same Chrome session and the same tiktoken cl100k_base tokenizer, and can be directly reproduced using `./bench/token_benchmark.sh`.
Evidence
- "Reports indicate that the installation script (install.sh) and installation via bun return 404 errors, suggesting the project's infrastructure is not yet fully stable. A comment pointed out that the benchmark in the README is self-published, making it difficult to trust the 16% token reduction claim without independent verification. A user noted that while kuri-fetch advertises itself as 'standalone,' it still requires Chrome to be running somewhere, functioning merely as a wrapper around CDP and not being truly standalone. A user previously using brow.sh (a text-based browser) for page fetching found Kuri more interesting but was somewhat disappointed after confirming its Chrome dependency."
How to Apply
- "If you're implementing tasks where an LLM agent needs to read web pages (price comparison, information gathering, etc.), try Kuri's `snap --interactive` mode instead of Playwright. You can read the same page with fewer than half the tokens, reducing API costs. The token savings compound in multi-step agent loops (page navigation → snapshot → click → snapshot → judgment). Kuri's benefits increase with the number of steps, making it particularly suitable for automating complex web tasks with 10 or more steps. If you've abandoned serverless or lightweight container deployments of Node.js-based browser automation due to binary size issues, consider Kuri's 464KB single binary. The 3ms cold start is practical even in environments like Lambda. For automated security testing, leverage Kuri's built-in security testing features and HAR recording. HAR files allow you to debug the agent's HTTP requests later."
Code Example
# Recreate token benchmark directly
./bench/token_benchmark.sh
# Basic snapshot (compact mode, 4,328 tokens)
kuri snap
# Optimal mode for agent loops (1,927 tokens — 0.4x compact)
kuri snap --interactive
# Full JSON dump (31,280 tokens — for debugging)
kuri snap --json
# Standalone page fetcher (but Chrome must be running)
kuri-fetch https://example.comTerminology
Related Papers
Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot
Meta의 AI 챗봇에 있던 이메일 검증 버그로 인해 2FA(2단계 인증)를 사용하지 않던 Instagram 계정 2만 개 이상이 약 2개월간 해킹됐다. AI를 계정 복구 시스템에 통합할 때 발생할 수 있는 보안 취약점의 실제 사례다.
Anthropic's open-source framework for AI-powered vulnerability discovery
Anthropic이 Claude를 활용해 코드 취약점을 자율적으로 탐지·트리아지·패치하는 오픈소스 레퍼런스 구현체를 공개했다. 실제 보안팀과의 협업 경험을 바탕으로 만들어진 파이프라인이라 실전 적용성이 높다.
Will the Agent Recuse Itself? Measuring LLM-Agent Compliance with In-Band Access-Deny Signals
서버가 SSH 배너나 DB NOTICE로 'AI 에이전트는 접근하지 마세요' 신호를 보내면 GPT-4o, Claude Code 같은 LLM 에이전트가 실제로 물러나는지 실험으로 측정했다.
ToolChoiceConfusion: Causal Minimal Tool Filtering for Reliable LLM Agents
LLM 에이전트에 도구를 100개 다 보여주지 말고, 지금 당장 필요한 것 1개만 보여주면 성공률은 그대로에 토큰은 90% 절약된다.
My Agent Skill for Test-Driven Development
AI 에이전트가 형편없는 테스트를 작성하는 문제를 해결하기 위해, Kent Beck의 Canon TDD 원칙을 'Skill'로 만들어 에이전트에게 주입하는 방법을 공유한다. 에이전트 코딩에서 테스트 품질을 높이고 싶은 개발자에게 실용적인 접근법을 제시한다.
Show HN: Paseo – Beautiful open-source coding agent interface
Claude Code, Codex, GitHub Copilot 등 여러 코딩 에이전트를 하나의 UI로 제어하는 오픈소스 프로젝트로, 로컬 데몬 방식으로 자기 머신에서 실행하면서 모바일에서도 접근할 수 있다.