chrome-devtools-mcp

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.85). This skill explicitly instructs how to connect to and remotely control a logged-in Chrome instance via the DevTools protocol (including arbitrary JS evaluation, DOM/snapshot/screenshot capture, automated input) and tells the user to install/run an npx package and adjust DevToolsActivePort—capabilities that can be readily abused for credential theft, data exfiltration, and remote code execution if the MCP service or package is compromised or exposed to untrusted parties.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes npx to fetch and run remote code at runtime (e.g., "npx -y chrome-devtools-mcp@latest" in Step 2 and the troubleshooting section), which downloads and executes an external npm package as a required dependency.