Secure, session-aware MCP server for ChromiumFish browser automation
Drift inferred · capture-to-capture
tool count over time
07-20 05:22 now
8t
9t
transport stdio · http counts 29 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
click
-
click_at
-
close_page
-
drag
-
evaluate
-
find_challenge
-
get_text
-
handle_dialog
-
hover
-
list_downloads
-
list_frames
-
list_pages
-
navigate
-
navigate_back
-
navigate_forward
-
open_page
-
press_key
-
reload
-
run_task
-
scroll
-
select_option
-
select_page
-
set_checked
-
snapshot
-
solve_challenge
-
take_screenshot
-
type_text
-
upload_file
-
wait_for
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 2380917 · analyzer v33 · 2w ago
danger signals1
- dynamic code execution indirect eval LowOrbitLab-chromiumfish_mcp-2380917/src/browser.ts :2577
return (0, eval)(source) as unknown;
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 13
filesystem 4
- fs (weak) LowOrbitLab-chromiumfish_mcp-2380917/scripts/live-dialogs-downloads.mjs :14
import { mkdtemp, readdir, readFile, rm } from "node:fs/promises"; - fs LowOrbitLab-chromiumfish_mcp-2380917/src/browser.ts :1
import { existsSync } from "node:fs"; - fs (weak) LowOrbitLab-chromiumfish_mcp-2380917/test/browser.test.mjs :2
import { mkdir, mkdtemp, readFile, realpath, rm, symlink, writeFile } from "node:fs/promises"; - fs (weak) LowOrbitLab-chromiumfish_mcp-2380917/test/config.test.mjs :2
import { readdir, readFile } from "node:fs/promises";
network 1
- net (weak) LowOrbitLab-chromiumfish_mcp-2380917/scripts/live-dialogs-downloads.mjs :13
import { createServer } from "node:http";
secrets 1
- secrets LowOrbitLab-chromiumfish_mcp-2380917/src/browser.ts :661
`--agent-llm-key=${process.env.OPENAI_API_KEY ?? ""}`,
tool registrations 29
- list_pages LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :178
- open_page LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :188
- select_page LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :198
- close_page LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :208
- navigate LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :218
- navigate_back LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :228
- navigate_forward LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :238
- reload LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :248
- snapshot LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :258
- get_text LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :280
- take_screenshot LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :299
- click LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :321
- hover LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :338
- click_at LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :355
- drag LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :370
- list_frames LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :394
- handle_dialog LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :409
- find_challenge LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :429
- solve_challenge LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :440
- type_text LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :463
- select_option LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :484
- set_checked LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :503
- press_key LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :521
- scroll LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :534
- wait_for LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :552
- upload_file LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :570
- list_downloads LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :594
- evaluate LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :611
- run_task LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :623
install hooks 2
- prepare LowOrbitLab-chromiumfish_mcp-2380917/package.json :36
npm run build - prepublishOnly LowOrbitLab-chromiumfish_mcp-2380917/package.json :37
npm test
declared dependencies 6
- @modelcontextprotocol/sdk@^1.29.0
- chromiumfish@^0.2.3
- playwright-core@^1.61.1
- zod@^4.4.3
- @types/node@^22.19.0
- typescript@^5.9.3