mcp-devtools-browser

CRITICAL RISK: The `execute_js` tool allows the LLM to execute arbitrary JavaScript code within the browser context using `new Function()`. This is highly dangerous as a malicious LLM could run any code, potentially leading to XSS attacks, data exfiltration, or other severe vulnerabilities. Additionally, the `browserConfig.json` sets `headless: false` and uses `--no-sandbox` for Puppeteer, which disables critical browser security mechanisms, making the browser instance more vulnerable. While API keys are externalized, the core functionality of executing arbitrary code within an unsandboxed browser poses a significant security threat. Therefore, running this server is not recommended without significant security hardening.