Skyvern: review, pricing, security and alternatives

What Skyvern does

Skyvern belongs to the browser agents family: agents that open pages, click, fill in forms and extract information in place of a human. On our grid it ranks #3 of the 21 projects of this family listed in the directory.

You use it from: web app, API, and developer SDK. Usable models: GPT (OpenAI), Claude (Anthropic), and Gemini (Google). It can run on your own machine or server.

Who is Skyvern for?

It helps people who spend time on websites without an API: it clicks, fills in and reads pages for you. Typical tasks people give it:

• fill in repetitive forms
• collect prices or information across several sites
• test a website's user flow
• fetch documents from a customer portal

It is a good candidate if you prefer doing everything in a browser, with no install and your data must stay on your machines.

Access and human control

According to its documentation, Skyvern can:

• drive a web browser
• call online services and APIs

We could not establish whether it asks for human approval before sensitive actions: test it first on an unimportant account or folder.

Skyvern pricing

The code is free, under the AGPL-3.0 licence.

Getting started with Skyvern

1. Install it: the project ships as a Python package (install with pip or uv). The exact command is in the repository README.
2. Create an API key with the model provider and put it in an environment variable, never in a shared or versioned file.
3. Give it a first playground with nothing at stake: a test folder, a secondary account or a throwaway project. Only open your real accounts once you have seen how it behaves.
4. Give it a short, checkable task, review the result and its action log, then raise the difficulty step by step.

Security: risk level

Every page visited may hide instructions: do not leave a browser agent logged into sensitive accounts without action approval.

Points found for Skyvern:

• Outside content: it reads web pages or API responses, which may contain booby-trapped instructions (prompt injection).

Three habits: least privilege (minimal rights, dedicated keys), human approval for irreversible actions, a sandbox for code execution. The AI agent security check reviews your setup in a few minutes.

Project activity and releases

Created on February 28, 2024, the Skyvern-AI/skyvern repository has 23,263 stars, 2,213 forks and 50 open issues, with 7,144 commits in total. It received changes this month.

Over the last 52 weeks: 3,731 commits, an average of 71.8 per week.

160 releases in total; 30 in the last twelve months. Latest release: v1.0.56, on October 14, 2026.

Skyvern vs other browser agents

GitHub stars of the best-rated open-source projects in the browser agents family. Stars measure attention, not quality: a heavily promoted project collects them fast, a specialised tool will have few.

Skyvern and other browser agents at a glance

The 7 best-ranked agents in the same family, 7 of them open source. The score out of 100 only applies to open-source projects; for proprietary services we show the published entry price. A dash marks information the documentation does not state.

How we rated it

Score: 83/100, computed only from public, verifiable data, with no subjective testing or partnership:

• Adoption 28/40: 23,263 stars on a log scale (40 points from about 200,000).
• Activity 30/30: last commit less than a month ago, 25 releases in six months, 3,731 commits in a year.
• Framework 25/30: licence, default human approval, self-hosting, model choice and documentation site.

The score does not say whether the agent will succeed at your tasks: it measures how solid the project is. The full grid is on the method page.