redbook-scraper-mcp-server

The Docker container is run with the `--privileged` flag, which grants the container almost all capabilities of the host system, significantly increasing the attack surface and potential for container escape. Sensitive browser user data (cookies, login sessions) are persisted on the host system by mounting `user-data` volume, posing a risk if the host is compromised. The project description itself includes a disclaimer that it is for 'learning and technical research' and 'prohibits any commercial use or violation of local laws', suggesting awareness of the sensitive nature of scraping activities. No `eval` or direct command injection vectors are found in the Python source code, but the `--privileged` flag is a critical concern.