Skills/npm/firefox-devtools-mcp-moz

firefox-devtools-mcp-moz@0.10.6

CAUTION

Publisher claims: "Model Context Protocol (MCP) server that lets AI agents browse the web and debug web pages with Firefox (moz build with privileged context support)" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher mozilla · joined 0 days agoInstalls 22,151Last detonated 52 min ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageREADME.md:19 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
HTML comment carrying imperative instructions to the agentscripts/generate-tools-doc.ts:101 · HTML comment carrying imperative instructions to the agent
AST01
MEDIUM
File type combined with upload actionscripts/test-input-tools.js:17 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/test-bidi-devtools.js:106 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/test-bidi-devtools.js:131 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/test-bidi-devtools.js:160 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageREADME.md:51 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:48 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagescripts/build-mcpb.mjs:50 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionscripts/demo-server.js:237 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageREADME.md:59 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionscripts/test-bidi-devtools.js:133 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/test-input-tools.js:123 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/test-input-tools.js:135 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/test-mozlog.js:67 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageplugins/firefox-devtools-mcp/skills/web-performance/SKILL.md:14 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:45 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionscripts/test-input-tools.js:75 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscripts/test-input-tools.js:68 · File type combined with upload action — agent may exfiltrate local data files
AST07
LOW
Unpinned dependencyplugins/firefox-devtools-mcp/skills/web-performance/SKILL.md:12 · Unpinned dependency
AST06