MCP Server Builder with mcp-use
mcp-use/mcp-use
Builds, modifies, debugs, migrates and verifies TypeScript MCP servers and MCP Apps with the mcp-use framework, treating the installed package's types as the source of truth.
A skill your agent uses when a drissionpage-mcp task targets an iframe such as a payment widget, challenge, SSO flow, or embedded checkout.
Install Cross Origin Iframe Probe
$ npx skills add jumodada/Drissionpage-MCP-Server --skill cross-origin-iframe-probe -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install jumodada/Drissionpage-MCP-Server cross-origin-iframe-probe --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/jumodada/Drissionpage-MCP-Server.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/cross-origin-iframe-probe .claude/skills/cross-origin-iframe-probe && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "cross-origin-iframe-probe" agent skill from https://github.com/jumodada/Drissionpage-MCP-Server/tree/main/skills/cross-origin-iframe-probe into .claude/skills/cross-origin-iframe-probe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cross-origin-iframe-probe", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/jumodada/Drissionpage-MCP-Server/tree/main/skills/cross-origin-iframe-probeType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add jumodada/Drissionpage-MCP-Server --skill cross-origin-iframe-probe -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install jumodada/Drissionpage-MCP-Server cross-origin-iframe-probe --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jumodada/Drissionpage-MCP-Server.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/cross-origin-iframe-probe .agents/skills/cross-origin-iframe-probe && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "cross-origin-iframe-probe" agent skill from https://github.com/jumodada/Drissionpage-MCP-Server/tree/main/skills/cross-origin-iframe-probe into .agents/skills/cross-origin-iframe-probe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cross-origin-iframe-probe", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add jumodada/Drissionpage-MCP-Server --skill cross-origin-iframe-probe -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install jumodada/Drissionpage-MCP-Server cross-origin-iframe-probe --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jumodada/Drissionpage-MCP-Server.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/cross-origin-iframe-probe .cursor/skills/cross-origin-iframe-probe && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "cross-origin-iframe-probe" agent skill from https://github.com/jumodada/Drissionpage-MCP-Server/tree/main/skills/cross-origin-iframe-probe into .cursor/skills/cross-origin-iframe-probe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cross-origin-iframe-probe", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/jumodada/Drissionpage-MCP-Server.git --path skills/cross-origin-iframe-probe--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add jumodada/Drissionpage-MCP-Server --skill cross-origin-iframe-probe -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install jumodada/Drissionpage-MCP-Server cross-origin-iframe-probe --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jumodada/Drissionpage-MCP-Server.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/cross-origin-iframe-probe .gemini/skills/cross-origin-iframe-probe && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "cross-origin-iframe-probe" agent skill from https://github.com/jumodada/Drissionpage-MCP-Server/tree/main/skills/cross-origin-iframe-probe into .gemini/skills/cross-origin-iframe-probe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cross-origin-iframe-probe", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install jumodada/Drissionpage-MCP-Server cross-origin-iframe-probeInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add jumodada/Drissionpage-MCP-Server --skill cross-origin-iframe-probe -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/jumodada/Drissionpage-MCP-Server.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/cross-origin-iframe-probe .github/skills/cross-origin-iframe-probe && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "cross-origin-iframe-probe" agent skill from https://github.com/jumodada/Drissionpage-MCP-Server/tree/main/skills/cross-origin-iframe-probe into .github/skills/cross-origin-iframe-probe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cross-origin-iframe-probe", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add jumodada/Drissionpage-MCP-Server --skill cross-origin-iframe-probe -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install jumodada/Drissionpage-MCP-Server cross-origin-iframe-probe --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jumodada/Drissionpage-MCP-Server.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/cross-origin-iframe-probe .opencode/skills/cross-origin-iframe-probe && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "cross-origin-iframe-probe" agent skill from https://github.com/jumodada/Drissionpage-MCP-Server/tree/main/skills/cross-origin-iframe-probe into .opencode/skills/cross-origin-iframe-probe/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cross-origin-iframe-probe", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
cross-origin-iframe-probe- GitHub stars
- 487
- Token cost
- ~1.2k tokens
- SKILL.md length
- 555 words
- Files
- 1
- Skills in repo
- 3
- Repo updated
- First seen
- Licence
- Custom licence
At a glance
A skill your agent uses when a drissionpage-mcp task targets an iframe such as a payment widget, challenge, SSO flow, or embedded checkout.
- Works in 7 steps: Call frame_list and inspect each… → If frame_list does not enumerate the… → Read element_state_get on the iframe… → …
- A drissionpage-mcp task targets an iframe such as a payment widget
- SKILL.md covers Decision procedure, Retry discipline and Why this matters for atomic…
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Cross Origin Iframe Probe is an agent skill from jumodada/Drissionpage-MCP-Server. Use when a drissionpage-mcp task targets an iframe such as a payment widget, challenge, SSO flow, or embedded checkout. Classifies frame document access and outer presentation evidence, then selects a DOM, viewport-coordinate, scroll, keyboard, or parent-page verification path.
Its SKILL.md is about 1.2k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Agent Workflows, covering MCP servers, Authentication and Browser automation. It works with Model Context Protocol. The repository describes itself as: DrissionPage MCP Server · Browser automation for Claude Code, Codex, and MCP clients.
When your agent uses it
- A drissionpage-mcp task targets an iframe such as a payment widget
- Embedded checkout
Example prompts
- “/cross-origin-iframe-probe”
Workflow steps
7 steps, taken from the first numbered list in SKILL.md.
- Call frame_list and inspect each candidate's boundary,
- If frame_list does not enumerate the widget, use element_find_all with a
- Read element_state_get on the iframe selector. The returned geometry is
- Branch on presentation.coordinate_actionability before a coordinate
- Use element_scroll_into_view.before, after, and scroll_method as the
- For an outer_only widget with ready top-level geometry, use physical
- Verify from the parent page after every consequential action. Prefer a
What it can do on your machine
Read from SKILL.md and the folder at commit 30e8adf. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Cross Origin Iframe Probe loads about 1.2k tokens when it runs. Until then it costs about 76 tokens; SKILL.md has 555 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 555 words (~1,189 tokens).
“Use this Skill for an authorized iframe workflow. Cross-origin is a security boundary, but it is not by itself proof that DrissionPage cannot inspect the frame document. Make the decision from current capability evidence instead of from the URL or…”
- name
- cross-origin-iframe-probe
Files
Just SKILL.md in skills/cross-origin-iframe-probe of jumodada/Drissionpage-MCP-Server.
Open the folder on GitHubat commit 30e8adf
Compare with similar skills
Cross Origin Iframe Probe next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Cross Origin Iframe Probe this skilljumodada/Drissionpage-MCP-Server | 487 | — | ~1.2k | Automated safety check: Pass | Custom licence | |
| MCP Server Builder with mcp-usemcp-use/mcp-use | 11k | — | ~923 | Automated safety check: Pass | Apache-2.0 | |
| Cao MCP Appsawslabs/cli-agent-orchestrator | 1.4k | — | ~1.9k | Automated safety check: Pass | Apache-2.0 | |
| Unbrowseunbrowse-ai/unbrowse | 780 | — | ~3.3k | Automated safety check: Pass | MIT | |
| Glance TestDebugBase/glance | 156 | — | ~827 | Automated safety check: Pass | MIT | |
| Lightpandalightpanda-io/agent-skill | 101 | — | ~6k | Automated safety check: Pass | Apache-2.0 |
Similar skills
- Official
Cao MCP Apps
awslabs/cli-agent-orchestrator
Enable, operate, and extend CAO's MCP Apps surface — the host-rendered fleet dashboard visible inside MCP App hosts (Claude Desktop, ChatGPT, VS Code Copilot, Goose, Postman).
Unbrowse
unbrowse-ai/unbrowse
Search and call websites through Unbrowse's hosted API or remote MCP, reuse indexed site tools, read pages, and learn missing routes in its cloud browser.
Glance Test
DebugBase/glance
Run E2E browser tests on any web application using Glance MCP.
Lightpanda
lightpanda-io/agent-skill
Lightpanda browser, drop-in replacement for Chrome-based browsing in any AI agent - faster and lighter for tasks without graphical rendering like data retrieval.
Githits Onboarding
githits-com/githits-cli
A skill your agent uses when the user asks to install, connect, configure, sign in to, sign up for, or start using GitHits.
More from jumodada/Drissionpage-MCP-Server
Turnstile Testing
jumodada/Drissionpage-MCP-Server
A skill your agent uses when testing an authorized Cloudflare Turnstile integration or operating an authorized production challenge with drissionpage-mcp.
Xiaohongshu Content Research
jumodada/Drissionpage-MCP-Server
A skill your agent uses for authorized, read-only research on public Xiaohongshu content or the local Xiaohongshu-like playground fixture.
Related
Works with
Questions about Cross Origin Iframe Probe
What does Cross Origin Iframe Probe do?
A skill your agent uses when a drissionpage-mcp task targets an iframe such as a payment widget, challenge, SSO flow, or embedded checkout. Cross Origin Iframe Probe is an agent skill from jumodada/Drissionpage-MCP-Server. Use when a drissionpage-mcp task targets an iframe such as a payment widget, challenge, SSO flow, or embedded checkout.
When should I use Cross Origin Iframe Probe?
Cross Origin Iframe Probe fits situations like: A drissionpage-mcp task targets an iframe such as a payment widget; embedded checkout.
How do I install Cross Origin Iframe Probe in Claude Code?
Run `npx skills add jumodada/Drissionpage-MCP-Server --skill cross-origin-iframe-probe -a claude-code`. Or copy the skill folder (skills/cross-origin-iframe-probe in jumodada/Drissionpage-MCP-Server) into .claude/skills/cross-origin-iframe-probe in your project. Claude Code loads it when a task matches its description.
How do I install Cross Origin Iframe Probe in Codex?
Run `npx skills add jumodada/Drissionpage-MCP-Server --skill cross-origin-iframe-probe -a codex`. Or copy the skill folder (skills/cross-origin-iframe-probe in jumodada/Drissionpage-MCP-Server) into .agents/skills/cross-origin-iframe-probe in your project. Codex loads it when a task matches its description.
Can I use Cross Origin Iframe Probe in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jumodada/Drissionpage-MCP-Server --skill cross-origin-iframe-probe -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/cross-origin-iframe-probe, .gemini/skills/cross-origin-iframe-probe, .github/skills/cross-origin-iframe-probe and .opencode/skills/cross-origin-iframe-probe in your project.
What does Cross Origin Iframe Probe need to run?
SKILL.md names no scripts, command-line tools or credentials: Cross Origin Iframe Probe is instructions for the agent only.
Does Cross Origin Iframe Probe access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Cross Origin Iframe Probe safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Cross Origin Iframe Probe use?
Cross Origin Iframe Probe has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.
How many tokens does Cross Origin Iframe Probe use?
About 1.2k tokens (SKILL.md is roughly 4.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Cross Origin Iframe Probe?
Skills that share tags, products or a category with Cross Origin Iframe Probe: MCP Server Builder with mcp-use (mcp-use/mcp-use, 11k stars), Cao MCP Apps (awslabs/cli-agent-orchestrator, 1.4k stars), Unbrowse (unbrowse-ai/unbrowse, 780 stars) and Glance Test (DebugBase/glance, 156 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Cross Origin Iframe Probe?
jumodada (a GitHub user) maintains it in jumodada/Drissionpage-MCP-Server, which has 487 GitHub stars. The repository holds 3 skills in this directory. The repository was last updated on September 14, 2026.
Source: jumodada/Drissionpage-MCP-Server on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.