Any agent that accepts "work in this working directory" (which AFAIK, all of them do) have had this ability, even the initial GPT2/3 experiments around matching LLMs with primitive tool-calling.
Then again, I don't think your statement is entirely correct: It assumes you've given the agent the permission to edit his source autonomously, which would normally seem unusual for an agent that's just supposed to connect to the browser.
Fair, so let's do
Then again, I don't think your statement is entirely correct: It assumes you've given the agent the permission to edit his source autonomously, which would normally seem unusual for an agent that's just supposed to connect to the browser.