chrome-mcp-server

The `execute_javascript` tool allows arbitrary JavaScript execution, which is a powerful capability that could be abused if inputs are not from a trusted source. The `screenshot` tool allows specifying an arbitrary `filename`, which could lead to file system manipulation (e.g., directory traversal) if the filename is not sanitized. The browser is launched with `--no-sandbox`, which reduces browser isolation. However, these are often necessary features for browser automation tools, and the server communicates via stdin/stdout, limiting direct external network attack vectors. Safety is highly dependent on the trustworthiness of the client invoking the tools.