osint-mcp-servers

The server uses Playwright to browse arbitrary, potentially malicious, URLs. While some Playwright instances have hardening arguments (e.g., in `web_interface.py`), this inherently carries a risk of browser exploits or malware if the LLM agent is compromised (e.g., via prompt injection) to interact with dangerous sites. The `interact_with_webpage` tool allows LLM-generated, detailed browser actions (clicks, types, selectors) which could be misused. Collected sensitive information and session data are stored locally in CSV and JSON files, posing a risk if the server's file system is compromised. API keys are managed via .env files, which is good practice.