First, background - how does muse's browser work?
When you're using your little musey, you might say "oh yoo hoo! chat servant! please peruse the latest sites on the world wide web." Your musey may then call its browser.browse tool (it may also just curl a URL it invents, or use a different headless tool, but whatever). This spawns some browser running in a separate container on the host that can't be seen from the agent's main "cell" VM. This separation is part of the credential system: when a credential is needed, the browser agent can request that credentials get filled in directly to the page without ever entering the main VM.
The browser tool is a subagent LLM with its own set of tools, and it primarily works in an browser.observe, think, browser.act loop, culminating in some browser.report where it summarizes what happens. Upon encountering some set of things that need more structured behavior, that subagent then dispatches *another* sub-subagent, or a "specialist" to handle that - one of those is the bot_challenge specialist.
browser system prompt here: https://github.com/sneakers-the-rat/muse-skills/blob/main/binary-strings/browser/system.md