devTools-Advance-mcp

The server provides extensive control over the local browser, including arbitrary JavaScript execution (`execute_script`), CSS/JS injection (`inject_css_global`, `inject_js_global`), and direct manipulation of network requests/responses. It also uses `child_process.spawn` and `execAsync` for system commands to manage browser processes and profiles (e.g., `robocopy`, `rsync`, `powershell`). The Chrome debugging port is exposed (default 9222/9223) and `--remote-allow-origins=*` is used by default, which is permissive. While designed for advanced AI interaction, these capabilities present significant security risks if the AI agent is compromised or instructed maliciously, potentially leading to arbitrary code execution within the browser's context or on the user's system (via OS commands). The 'Shadow Profile' mitigates direct corruption of the default profile but does not prevent browser-based attacks.