autoreg-skills-max: initial public release (restored, redacted, hardened)

skills/anti-detection-browser/templates/turnstile-patch/manifest.json

@@ -0,0 +1,14 @@
+{
+  "manifest_version": 3,
+  "name": "Turnstile Patch",
+  "version": "1.0",
+  "description": "Overrides MouseEvent.screenX/Y to bypass CDP-based bot detection",
+  "content_scripts": [
+    {
+      "matches": ["<all_urls>"],
+      "js": ["script.js"],
+      "run_at": "document_start",
+      "world": "MAIN"
+    }
+  ]
+}

skills/anti-detection-browser/templates/turnstile-patch/script.js

@@ -0,0 +1,13 @@
+// Override MouseEvent screenX/screenY to bypass CDP-based bot detection.
+// Cloudflare Turnstile detects CDP browsers by checking for screenX=0, screenY=0
+// which happens because CDP doesn't emulate real mouse coordinates.
+Object.defineProperty(MouseEvent.prototype, 'screenX', {
+  get: function () {
+    return Math.floor(Math.random() * 400) + 800;
+  },
+});
+Object.defineProperty(MouseEvent.prototype, 'screenY', {
+  get: function () {
+    return Math.floor(Math.random() * 200) + 400;
+  },
+});