github TypeScript re-analysis due

LowOrbitLab/chromiumfish_mcp

github

Secure, session-aware MCP server for ChromiumFish browser automation

maintainer
LowOrbitLab
license
MIT
first seen
2026-07-20
last seen
2026-09-05
releases · 30d
0
short id

Drift inferred · capture-to-capture

tool count over time

07-20 05:22 now
8t
9t
capabilities 29 tools
transport stdio · http counts 29 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • click
  • click_at
  • close_page
  • drag
  • evaluate
  • find_challenge
  • get_text
  • handle_dialog
  • hover
  • list_downloads
  • list_frames
  • list_pages
  • navigate
  • navigate_back
  • navigate_forward
  • open_page
  • press_key
  • reload
  • run_task
  • scroll
  • select_option
  • select_page
  • set_checked
  • snapshot
  • solve_challenge
  • take_screenshot
  • type_text
  • upload_file
  • wait_for
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 2380917 · analyzer v33 · 2w ago

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 13

filesystem 4

  • fs (weak) LowOrbitLab-chromiumfish_mcp-2380917/scripts/live-dialogs-downloads.mjs :14 import { mkdtemp, readdir, readFile, rm } from "node:fs/promises";
  • fs LowOrbitLab-chromiumfish_mcp-2380917/src/browser.ts :1 import { existsSync } from "node:fs";
  • fs (weak) LowOrbitLab-chromiumfish_mcp-2380917/test/browser.test.mjs :2 import { mkdir, mkdtemp, readFile, realpath, rm, symlink, writeFile } from "node:fs/promises";
  • fs (weak) LowOrbitLab-chromiumfish_mcp-2380917/test/config.test.mjs :2 import { readdir, readFile } from "node:fs/promises";

network 1

  • net (weak) LowOrbitLab-chromiumfish_mcp-2380917/scripts/live-dialogs-downloads.mjs :13 import { createServer } from "node:http";

secrets 1

  • secrets LowOrbitLab-chromiumfish_mcp-2380917/src/browser.ts :661 `--agent-llm-key=${process.env.OPENAI_API_KEY ?? ""}`,

tool registrations 29

  • list_pages LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :178
  • open_page LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :188
  • select_page LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :198
  • close_page LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :208
  • navigate LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :218
  • navigate_back LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :228
  • navigate_forward LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :238
  • reload LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :248
  • snapshot LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :258
  • get_text LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :280
  • take_screenshot LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :299
  • click LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :321
  • hover LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :338
  • click_at LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :355
  • drag LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :370
  • list_frames LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :394
  • handle_dialog LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :409
  • find_challenge LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :429
  • solve_challenge LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :440
  • type_text LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :463
  • select_option LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :484
  • set_checked LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :503
  • press_key LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :521
  • scroll LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :534
  • wait_for LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :552
  • upload_file LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :570
  • list_downloads LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :594
  • evaluate LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :611
  • run_task LowOrbitLab-chromiumfish_mcp-2380917/src/server.ts :623

install hooks 2

  • prepare LowOrbitLab-chromiumfish_mcp-2380917/package.json :36 npm run build
  • prepublishOnly LowOrbitLab-chromiumfish_mcp-2380917/package.json :37 npm test

declared dependencies 6

  • @modelcontextprotocol/sdk@^1.29.0
  • chromiumfish@^0.2.3
  • playwright-core@^1.61.1
  • zod@^4.4.3
  • @types/node@^22.19.0
  • typescript@^5.9.3