Skills/npm/browser-devtools-mcp

browser-devtools-mcp@0.9.1

CAUTION

Publisher claims: "[DEPRECATED] This package has been renamed. Please use @ironbee-ai/devtools instead." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher serkan-ozal · joined 0 days agoInstalls 19,762Last detonated 59 min ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.6sprocessdependency install exit 1
0.7sprocessexec /usr/bin/timeout
0.7sprocessexited 1: Node.js v22.23.4
0.7sclaimedno tools/list reply (exit 1)
0.7sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageREADME.md:216 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Privileged sudo commanddist/cli/runner.js:172 · Privileged sudo command — agent may execute with elevated privileges
AST05
MEDIUM
File type combined with upload actiondist/cli/runner.js:6 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondist/cli/runner.js:9 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondist/cli/runner.js:2 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondist/core-LHB3GTND.js:1 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
URL using raw IP addressREADME.md:588 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
File permission modification commandpackage.json:45 · File permission modification command — agent changes file ownership/permissions
AST05
MEDIUM
File type combined with upload actiondist/core-LHB3GTND.js:31 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondist/platform/browser/otel/otel-initializer.bundle.js:1 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:1261 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packageREADME.md:227 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
URL using raw IP addressdist/core-ELMAUBJZ.js:1 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addressdist/core-ELMAUBJZ.js:1 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
File type combined with upload actiondist/cli/runner.js:154 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)dist/index.js:4 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
File type combined with upload actiondist/index.js:4 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageREADME.md:231 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:223 · npx invocation of non-well-known package — may execute untrusted code
AST06
LOW
Unpinned dependencyREADME.md:1124 · Unpinned dependency
AST06
HIGH
npx invocation of non-well-known packagepostinstall.cjs:61 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
navigator.sendBeacon()dist/platform/browser/otel/otel-initializer.bundle.js:1 · navigator.sendBeacon() — can silently exfiltrate data
AST07
HIGH
npx invocation of non-well-known packageREADME.md:217 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actiondist/daemon-server.js:1 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Outbound HTTP to raw IP addressREADME.md:588 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
File type combined with upload actiondist/cli/runner.js:18 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedist/cli/runner.js:167 · npx invocation of non-well-known package — may execute untrusted code
AST06