firefox-devtools-mcp-automation
Warn
Audited by Socket on May 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is largely coherent with its stated browser-automation purpose and uses an official Mozilla npm package, so it is not malware. However, it grants broad browser control over cookies, sessions, network data, optional script execution, privileged Firefox context, and arbitrary web content ingestion, making it a high-impact automation surface with meaningful prompt-injection and session-exposure risk.
Confidence: 90%Severity: 66%
Audit Metadata