firefox-devtools-mcp-automation

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is largely coherent with its stated browser-automation purpose and uses an official Mozilla npm package, so it is not malware. However, it grants broad browser control over cookies, sessions, network data, optional script execution, privileged Firefox context, and arbitrary web content ingestion, making it a high-impact automation surface with meaningful prompt-injection and session-exposure risk.

Confidence: 90%Severity: 66%
Audit Metadata
Analyzed At
May 19, 2026, 12:59 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Fdevtools-skills%2Ffirefox-devtools-mcp-automation%2F@47a128a3c70a20ebf57035b6985b017d56c5a295