← Back to search

@mcp-b/chrome-devtools-mcp

GitHub Actions Scanned 4d ago

Browser transport implementations for Model Context Protocol (MCP) - postMessage, Chrome extension messaging, and iframe communication for AI agents and LLMs

C
66.4 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 98

low
Tool 'browser_navigate' has no annotations annotation_checker · 100%
low
Tool 'dom_extract_structure' has no annotations annotation_checker · 100%
low
Tool 'iframe_echo' has no annotations annotation_checker · 100%
low
Tool 'iframe_timestamp' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'timer' has no annotations annotation_checker · 100%
low
Tool 'parent_greet' has no annotations annotation_checker · 100%
low
Tool 'parent_time' has no annotations annotation_checker · 100%
low
Tool 'sum' has no annotations annotation_checker · 100%
low
Tool 'browser_connect' has no annotations annotation_checker · 100%
low
Tool 'dom_extract_region' has no annotations annotation_checker · 100%
low
Tool 'dom_extract_content' has no annotations annotation_checker · 100%
low
Tool 'dom_extract_interactive' has no annotations annotation_checker · 100%
low
Tool 'browser_screenshot' has no annotations annotation_checker · 100%
low
Tool 'browser_close' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 116 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: vite-plus@catalog: (GHSA-33r3-4whc-44c2) dependency_analyzer · 95%
medium
Vulnerable dependency: vite-plus@catalog: (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite-plus@catalog: (GHSA-g8mr-85jm-7xhm) dependency_analyzer · 95%
medium
Vulnerable dependency: vite-plus@catalog: (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: @astrojs/cloudflare@13.1.2 (GHSA-88gm-j2wx-58h6) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.4.6 (GHSA-4g3v-8h47-v7g6) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.4.6 (GHSA-7pw4-f3q4-r2p2) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.4.6 (GHSA-f48w-9m4c-m7f5) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-353f-5xf4-qw67) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-mv48-hcvh-8jj8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: playwright@catalog: (GHSA-7mvr-c777-76hp) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@catalog: (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: vite-plus@0.1.22 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite-plus@0.1.22 (GHSA-g8mr-85jm-7xhm) dependency_analyzer · 95%
medium
Vulnerable dependency: vite-plus@0.1.22 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: playwright@1.54.2 (GHSA-7mvr-c777-76hp) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.14 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.14 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@21.1.0 (GHSA-39pv-4j6c-2g6v) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@21.1.0 (GHSA-48r7-hpm6-gfxm) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@21.1.0 (GHSA-jhpw-976m-542j) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@21.1.0 (GHSA-p3vc-36g9-x9gr) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/common@21.1.0 (GHSA-q6f4-qqrg-jv6x) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@21.2.4 (GHSA-58w9-8g37-x9v5) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@21.2.4 (GHSA-f3m7-gqxr-g87x) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@21.2.4 (GHSA-jj27-h5hq-8x99) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@21.2.4 (GHSA-692r-grfm-v8x7) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@21.2.4 (GHSA-f3m7-gqxr-g87x) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@21.2.4 (GHSA-jj27-h5hq-8x99) dependency_analyzer · 95%
info
Transport: stdio manifest_parser · 90%
medium
Vulnerable dependency: @angular/core@21.2.4 (GHSA-rgjc-h3x7-9mwg) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: iframe_echo manifest_parser · 90%
info
Tool: iframe_timestamp manifest_parser · 90%
info
Tool: greet manifest_parser · 90%
info
Tool: timer manifest_parser · 90%
info
Tool: parent_greet manifest_parser · 90%
info
Tool: parent_time manifest_parser · 90%
info
Tool: sum manifest_parser · 75%
info
Tool: browser_connect manifest_parser · 85%
info
Tool: browser_navigate manifest_parser · 85%
info
Tool: dom_extract_structure manifest_parser · 85%
info
Tool: dom_extract_region manifest_parser · 85%
info
Tool: dom_extract_content manifest_parser · 85%
info
Tool: dom_extract_interactive manifest_parser · 85%
info
Tool: browser_screenshot manifest_parser · 85%
info
Tool: browser_close manifest_parser · 85%
info
Required env vars (21) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 124 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%