selenium_mcp_server

The server's core functionality involves executing arbitrary JavaScript within the controlled browser instance (`driver.execute_script`). While this is standard for browser automation, it poses a risk if the AI client or its prompts are compromised, potentially leading to malicious browser actions (e.g., navigating to phishing sites, submitting sensitive data). The `reset_automation_session` tool uses `pkill` and `kill` commands, which are powerful and could have unintended side effects if not carefully scoped, though the implementation attempts to target only automation-related processes. `webdriver_manager` downloads unverified binaries from the internet on first use, which is a common supply chain risk for browser automation tools.