cdp-tools-mcp

The server inherently exposes high-risk capabilities necessary for its debugging and development automation functions. It utilizes `Runtime.evaluate` (for arbitrary JavaScript execution in browser/Node.js contexts) and `child_process.spawn` (for running external commands like `weasyprint` and managing development servers via native, Docker, or Docker Compose runners). While `download-tools.ts` implements some file-system security (filename validation, content type checks, size limits, quarantining suspicious files, and removing executable permissions), the ability to execute arbitrary commands and code makes the server critically unsafe if exposed to unconstrained or malicious input from an AI agent. It relies on a trusted user context and external safeguards for safe operation.