feat: create subagents for search and fetch calls to disable default …

[Kylejeong2]

…behavior

Summary

Disabling default claude web search and fetch if the user opts to use the browse CLI/skill.

Claude code subagents load definitions from the /agents directory, which is why I added a small md file there.

---

Note

Medium Risk
Medium risk because it changes default web retrieval behavior by forcing fetch/search through a constrained subagent, which may affect tool availability and user workflows.

Overview
Introduces a new browserbase-web subagent (Bash-only) and updates the fetch and search skills to execute with context: fork inside that agent, preventing any fallback to Claude’s built-in WebFetch/WebSearch.

Updates marketplace registration to include the new fetch and search skills under the browse plugin, and documents the override/opt-out behavior in README.md.

^{Reviewed by Cursor Bugbot for commit 856fa1c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 4 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 856fa1c. Configure here.}

[cursor]

Non-standard allowed-tools Bash pattern syntax

Medium Severity

The allowed-tools entry Bash(curl *) Bash(bb *) in the skill frontmatter uses non-standard syntax. It's missing a comma between the two Bash patterns and uses a space instead of a colon for the command filter wildcards (e.g., Bash(curl:*)). This may prevent proper parsing, causing bb commands to be blocked or require explicit permission.

 

^{Reviewed by Cursor Bugbot for commit 856fa1c. Configure here.}

[cursor]

Subagent restriction silently ignored for plugin skills

Medium Severity

The context: fork and agent: frontmatter fields are a known silent no‑op for skills distributed via a plugin marketplace (Claude Code issue #35054, still open in v2.1.76 / March 2026). Because both skills are loaded through .claude-plugin/marketplace.json, they run inline in the main agent context rather than being dispatched to the browserbase-web subagent, so the main agent retains access to WebFetch/WebSearch and the intended restriction never takes effect. The README.md "overrides WebFetch / WebSearch" claim therefore overstates the actual behavior.

Additional Locations (2)

• skills/search/SKILL.md#L4-L7
• README.md#L63-L68

 

^{Reviewed by Cursor Bugbot for commit 856fa1c. Configure here.}

[cursor]

Search skill blocks bb that shared agent expects

Low Severity

The shared browserbase-web subagent is instructed to "Run the curl or bb command provided in the prompt", and bb search is a real Browserbase CLI command referenced by other skills (browserbase-cli, company-research). However, the search skill restricts allowed-tools to Bash(curl *) only, so if the subagent selects bb search it will be denied, while the same agent invoked from fetch has Bash(bb *) available. Consider granting Bash(bb *) in the search skill or tightening the agent prompt to curl only for search.

Additional Locations (1)

• agents/browserbase-web.md#L12-L13

 

^{Reviewed by Cursor Bugbot for commit 856fa1c. Configure here.}

[cursor]

Fetch/search skills conflict with browserbase-cli routing

Low Severity

The rewritten descriptions declare the skills as "DEFAULT for retrieving any URL" and "DEFAULT for any web search", but the browserbase-cli plugin's description and skill already claim ownership of the same operations via bb fetch / bb search. With both plugins installed, two skills aggressively claim default routing for every fetch/search, which can produce inconsistent selection and double-cover the same Browserbase APIs. It also overreaches for local/localhost URLs where a browser session or WebFetch would be more appropriate.

Additional Locations (2)

• skills/search/SKILL.md#L2-L3
• .claude-plugin/marketplace.json#L22-L27

 

^{Reviewed by Cursor Bugbot for commit 856fa1c. Configure here.}