my-browser-mcp

No actual source code provided for analysis, only README.md. The project describes itself as an 'MCP server for programmatic browser control and automation,' which inherently involves executing commands and potentially arbitrary code within a browser context based on server input. This type of functionality poses severe security risks (e.g., Remote Code Execution, Cross-Site Scripting, data exfiltration) if not implemented with robust input validation, authentication, and authorization. Without access to the implementation details, it's impossible to verify any security safeguards against 'eval'-like execution, network vulnerabilities, or hardcoded secrets. The lack of code visibility for a high-risk system leads to a very low security score and a recommendation against running it.