playwright-mcp-server

The `evaluate` tool allows executing arbitrary JavaScript in the browser context, which is a significant security risk if exposed to untrusted clients or AI agents that can be manipulated. Similarly, `intercept_route` can block, modify, or fulfill network requests, posing risks for data integrity and security bypass. While artifact path traversal is prevented, these core functionalities are inherently powerful and dangerous without strict input validation or sandboxing. Running this server should only be done in a highly controlled and isolated environment with trusted inputs.