registry / @mehmoodqureshi/chrome-mcp / 0.6.1

@mehmoodqureshi/chrome-mcp@0.6.1

Drive a real Chrome browser over MCP. A stdio MCP server (CLI) plus an MV3 extension, behind one pluggable Executor (extension via chrome.scripting, or a Playwright CDP fallback).

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 31 file(s), 222 KB of source, external domains: 127.0.0.1, example.com

Source & flagged code

5 flagged

package.jsonView file

Lines 31-71json

31 ],

32 "keywords": [

33 "mcp",

34 "model-context-protocol",

35 "chrome",

36 "chrome-extension",

37 "browser-automation",

38 "cdp",

39 "playwright",

40 "claude"

41 ],

42 "scripts": {

43 "build": "tsc -p tsconfig.json",

44 "build:ext": "node extension/scripts/build-ext.mjs",

45 "typecheck": "tsc -p tsconfig.json --noEmit",

46 "typecheck:ext": "tsc -p tsconfig.ext.json",

47 "clean": "rimraf dist extension-dist",

48 "test": "npm run clean && npm run build && npm run build:ext && node --test dist/test/*.test.js",

49 "test:hitl": "npm run build && node dist/hitl/index.js",

50 "prepack": "npm run clean && npm run build && npm run build:ext",

51 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L51

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L51

52 },

53 "dependencies": {

54 "@modelcontextprotocol/sdk": "^1.29.0",

55 "playwright": "^1.49.1",

56 "ws": "^8.18.0",

57 "zod": "^4.4.3"

58 },

59 "devDependencies": {

60 "@types/chrome": "^0.0.287",

61 "@types/node": "^20.17.10",

62 "@types/ws": "^8.5.13",

63 "esbuild": "^0.24.0",

64 "rimraf": "^5.0.10",

65 "typescript": "^5.7.2"

66 },

67 "engines": {

68 "node": ">=18.0.0"

69 }

70}

dist/src/executor/cdp-executor.jsView file

Lines 1-37javascript

1"use strict";

2/**

3 * src/executor/cdp-executor.ts — the Playwright-driven fallback Executor.

4 *

5 * Used when no extension is paired. Two acquisition modes:

6 * - 'connect': attach over CDP to a Chrome we did NOT launch (never closed by

7 * us — its lifecycle is the user's).

8 * - 'launch': spawn a dedicated persistent Chromium under a profile that is

9 * NOT the user's real one (would conflict with the extension-driven Chrome).

10 *

11 * Ported from linkedin-mcp/src/driver/browser.ts: the stale-profile-lock

dist/src/executor/extension-executor.jsView file

Lines 114-154javascript

114 return (await this.send('scroll', { x: opts.x, y: opts.y, deltaX: opts.deltaX, deltaY: opts.deltaY, ...targetParams(opts.target) }, { tabId: opts.tabId }));

115 }

116 // -- read ---------------------------------------------------------------

117 async getText(t, opts) {

118 return (await this.

scripts/postinstall.jsView file

Lines 21-51javascript

22function hasPlaywright() {

23 try {

24 require.resolve('playwright');

25 return true;

26 } catch {

27 return false;

28 }

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/src/executor/cdp-executor.jsView file

17exports.CdpExecutor = void 0; L18: const node_child_process_1 = require("node:child_process"); L19: const node_fs_1 = require("node:fs");

High

Child Process

Package source references child process execution.

dist/src/executor/cdp-executor.jsView on unpkg · L17

dist/src/executor/extension-executor.jsView file

134} L135: async eval(expression, opts) { L136: const result = (await this.send('eval', { expression, awaitPromise: opts?.awaitPromise }, { tabId: opts?.tabId }));

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/executor/extension-executor.jsView on unpkg · L134

scripts/postinstall.jsView file

41const { execFileSync } = require('node:child_process'); L42: execFileSync('npx', ['playwright', 'install', 'chromium'], { stdio: 'inherit' }); L43: } catch (err) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/postinstall.jsView on unpkg · L41

Findings

3 High3 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/src/executor/cdp-executor.js

HighRuntime Package Installscripts/postinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/src/executor/extension-executor.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

package.jsonView file

Lines 31-71json

31 ],

32 "keywords": [

33 "mcp",

34 "model-context-protocol",

35 "chrome",

36 "chrome-extension",

37 "browser-automation",

38 "cdp",

39 "playwright",

40 "claude"

41 ],

42 "scripts": {

43 "build": "tsc -p tsconfig.json",

44 "build:ext": "node extension/scripts/build-ext.mjs",

45 "typecheck": "tsc -p tsconfig.json --noEmit",

46 "typecheck:ext": "tsc -p tsconfig.ext.json",

47 "clean": "rimraf dist extension-dist",

48 "test": "npm run clean && npm run build && npm run build:ext && node --test dist/test/*.test.js",

49 "test:hitl": "npm run build && node dist/hitl/index.js",

50 "prepack": "npm run clean && npm run build && npm run build:ext",

51 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L51

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L51

52 },

53 "dependencies": {

54 "@modelcontextprotocol/sdk": "^1.29.0",

55 "playwright": "^1.49.1",

56 "ws": "^8.18.0",

57 "zod": "^4.4.3"

58 },

59 "devDependencies": {

60 "@types/chrome": "^0.0.287",

61 "@types/node": "^20.17.10",

62 "@types/ws": "^8.5.13",

63 "esbuild": "^0.24.0",

64 "rimraf": "^5.0.10",

65 "typescript": "^5.7.2"

66 },

67 "engines": {

68 "node": ">=18.0.0"

69 }

70}

dist/src/executor/cdp-executor.jsView file

Lines 1-37javascript

1"use strict";

2/**

3 * src/executor/cdp-executor.ts — the Playwright-driven fallback Executor.

4 *

5 * Used when no extension is paired. Two acquisition modes:

6 * - 'connect': attach over CDP to a Chrome we did NOT launch (never closed by

7 * us — its lifecycle is the user's).

8 * - 'launch': spawn a dedicated persistent Chromium under a profile that is

9 * NOT the user's real one (would conflict with the extension-driven Chrome).

10 *

11 * Ported from linkedin-mcp/src/driver/browser.ts: the stale-profile-lock

dist/src/executor/extension-executor.jsView file

Lines 114-154javascript

114 return (await this.send('scroll', { x: opts.x, y: opts.y, deltaX: opts.deltaX, deltaY: opts.deltaY, ...targetParams(opts.target) }, { tabId: opts.tabId }));

115 }

116 // -- read ---------------------------------------------------------------

117 async getText(t, opts) {

118 return (await this.

scripts/postinstall.jsView file

Lines 21-51javascript

22function hasPlaywright() {

23 try {

24 require.resolve('playwright');

25 return true;

26 } catch {

27 return false;

28 }