Agent-native browser and MCP server for lightweight, Chrome-free web discovery, with explicit escalation to Unchained for browser-only flows.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http
verified
reported
listed in the official MCP registry counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 38c8412 · analyzer v33 · 3w ago
skills & prompt files 2
danger signals2
- dynamic code execution indirect eval protostatis-unbrowser-38c8412/src/js/dom.js :351
(0, eval)(code); - dynamic code execution indirect eval protostatis-unbrowser-38c8412/src/js/shims.js :474
try { (0, eval)(cleaned); } catch (e) {
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 51
network 2
- net protostatis-unbrowser-38c8412/src/js/dom.js :259
// but for scripts inserted by JS *after* parse. It piggybacks on `fetch()` - net protostatis-unbrowser-38c8412/src/js/shims.js :211
// ---- fetch() — bridges to Rust via __host_fetch_send + __host_drain_fetches.
declared dependencies 17
- anyhow@1
- base64@0.22
- cookie@0.18
- cookie_store@0.21
- html5ever@=0.38.0
- http@1
- markup5ever_rcdom@=0.38.0
- rand@0.8
- rquickjs@0.11
- wreq@6.0.0-rc.28
- wreq-util@3.0.0-rc.11
- serde@1
- serde_json@1
- sha2@0.10
- tokio@1
- toml@0.8
- url@2
perm:untrusted 2
- untrusted protostatis-unbrowser-38c8412/src/js/dom.js :322
fetch(url).then(function(resp) { - untrusted protostatis-unbrowser-38c8412/src/js/shims.js :502
var promise = fetch(url).then(function(resp) {