[paveldudka]

Why

CLI 0.47.0 added proxy flags to `tinyfish browser session create`. The skill is the agents' reference for the CLI, and it is vendored into the CLI package by `sdk/cli/scripts/sync-skill.sh`. Without this change, agents won't know they can choose an exit country or turn the proxy off.

What

• Updated the usage line and added bullets for `--proxy-country`, `--proxy-url` / `--proxy-username` (password comes from `TINYFISH_PROXY_PASSWORD`), and `--no-proxy`.
• Noted the default: TinyFish proxy in the US, with one IP for the whole session.
• Added a `--proxy-country DE` example. It was run against prod with `@tiny-fish/cli@0.47.0` and returned a session.

Follow-up

After merge, run `sdk/cli/scripts/sync-skill.sh` in ux-labs to copy the skill into the CLI.

Also

• Adds an osv-scanner.toml that only contains a comment. github-control#1557 bumped the shared osv-scan workflow to v2.6.0, and that version fails when the --config osv-scanner.toml file is missing. Without the file, every PR in this repo, this one included, failed vulnerability-check / osv-scan.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Essentials

Run ID: fd0f1975-03f6-4fa3-9a3d-935e55c03682

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{Comment @coderabbitai help to get the list of available commands.}

[paveldudka]

/vulnfix

[paveldudka]

/vulnfix