Chrome MV3 浏览器调试黑盒：本地采集用户行为、网络、控制台等证据，并通过 MCP 供 AI Agent 查询。Local-first Chrome MV3 debugging black box for structured browser capture, export, and MCP-based AI agent analysis.
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution in TuTouPower/capture_all
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 2aaeec9 · analyzer v28 · 1d ago
skills & prompt files 1
- agent-rules TuTouPower-capture_all-2aaeec9/AGENTS.md
danger signals2
- dynamic code execution eval() TuTouPower-capture_all-2aaeec9/tests/unit/websocket_capture_injected_script.test.ts :60
eval(PAGE_SCRIPT); - suspicious endpoint 93.184.216.34 TuTouPower-capture_all-2aaeec9/tests/unit/network_capture.test.ts :766
expect(is_self_origin_url('http://93.184.216.34/')).toBe(false);
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 250
filesystem 2
- fs TuTouPower-capture_all-2aaeec9/src/bridge/config.ts :2
import { chmod, mkdir, readFile, stat, writeFile } from 'node:fs/promises'; - fs TuTouPower-capture_all-2aaeec9/src/bridge/server.ts :3
import { mkdir, writeFile } from 'node:fs/promises';
network 7
- net TuTouPower-capture_all-2aaeec9/src/bridge/cdp_handler.ts :5
import http from 'node:http'; - net TuTouPower-capture_all-2aaeec9/src/bridge/config.ts :145
const response = await fetch(`${bridge_url}/health`); - net TuTouPower-capture_all-2aaeec9/src/bridge/server.ts :1
import http from 'node:http'; - net TuTouPower-capture_all-2aaeec9/src/extension/background/agent_bridge_client.ts :259
const response = await fetch(`${url}/extension/enroll`, { - net TuTouPower-capture_all-2aaeec9/src/extension/background/external_cdp_bridge_client.ts :87
const res = await fetch(`${base}/cdp/detect`, { - net TuTouPower-capture_all-2aaeec9/src/extension/background/service_worker.ts :239
const res = await fetch(`${bridge_url}/health`); - net TuTouPower-capture_all-2aaeec9/src/mcp/client.ts :11
const response = await fetch(`${this.bridge_url}/mcp/status`, {
secrets 3
- secrets TuTouPower-capture_all-2aaeec9/src/bridge/config.ts :42
env: { CAPTURE_ALL_BRIDGE_TOKEN?: string } = process.env, - secrets TuTouPower-capture_all-2aaeec9/src/bridge/main.ts :23
process.env.CAPTURE_ALL_BRIDGE_TOKEN, - secrets TuTouPower-capture_all-2aaeec9/src/mcp/main.ts :10
const bridge_token = await resolve_client_token(process.env.CAPTURE_ALL_BRIDGE_TOKEN);
declared dependencies 16
- @modelcontextprotocol/sdk@^1.29.0
- fflate@^0.8.3
- zod@^4.4.3
- @crxjs/vite-plugin@^2.7.1
- @playwright/test@^1.60.0
- @types/node@^25.9.1
- @vitest/coverage-v8@^4.1.10
- esbuild@^0.28.1
- fake-indexeddb@^6.2.5
- jsdom@^29.1.1
- playwright@^1.60.0
- tsx@^4.22.4
- typescript@^5.5.0
- vite@^8.1.4
- vitest@^4.1.10
- yaml@^2.9.0
clipboard 1
- navigator.clipboard TuTouPower-capture_all-2aaeec9/tests/unit/clipboard_capture.test.ts :76
await navigator.clipboard.writeText('hello');
transport_posture 1
- network-listening, binds all interfaces, no auth detected TuTouPower-capture_all-2aaeec9/tests/unit/agent_bridge_config.test.ts :31
host: '0.0.0.0',