mcp-banana-ghost

The server uses `undetected-chromedriver` to control a Chrome browser with a user's local profile, which implicitly carries risks associated with browser automation (e.g., potential for vulnerabilities in Chrome or the automation library, or exposure of profile data if the host system is compromised). The `execute_script` function is used, but the script itself is hardcoded and not directly controlled by user input, mitigating injection risks. The `requests.get` call for image URLs could be a minor SSRF risk if `image_src` could be manipulated, but it's derived from the browser's current page. No 'eval' or obvious malicious patterns found.