Playwright MCP

Findings (9)

• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  roll.js:34
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  roll.js:41
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  roll.js:46
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.

  update-readme.js:163
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.2.2: 2 known vulnerabilities

  GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@4.3.6: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: private-key

  tests/testserver/key.pem:1
• lowLow. Minor, or common in normal tools. Shown for information.
  ip-address@10.7.2: 1 known vulnerability

  GHSA-rxp7-6hxx-x8q5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  Reads environment variables not listed in the manifest

  CI, MCP_IN_DOCKER, PRINT_ENV

Network activity

Tools exposed (25)

• browser_close

  Close the page

• browser_resize

  Resize the browser window

• browser_console_messages

  Returns all console messages

• browser_handle_dialog

  Handle a dialog

• browser_emulate_media

  Emulate CSS media features for the page, for example switch between the light and dark color scheme. Omitted parameters are left unchanged; null clears an override.

• browser_evaluate

  Evaluate JavaScript expression on page or element

• browser_file_upload

  Upload one or multiple files

• browser_drop

  Drop files or MIME-typed data onto an element, as if dragged from outside the page. At least one of "paths" or "data" must be provided.

• browser_find

  Search the accessibility snapshot of the current page for text or a regular expression. Returns matching snapshot nodes with a few lines of surrounding context (like search snippets), each shown under its path from the root of the tree, which is cheaper than capturing the whole snapshot when you onl

• browser_fill_form

  Fill multiple form fields

• browser_press_key

  Press a key on the keyboard

• browser_type

  Type text into editable element

• browser_navigate

  Navigate to a URL

• browser_navigate_back

  Go back to the previous page in the history

• browser_network_requests

  Returns a numbered list of network requests since loading the page. Use browser_network_request with the number to get full details.

• browser_network_request

  Returns full details (headers and body) of a single network request, or a single part if `part` is set. Use the number from browser_network_requests.

• browser_run_code_unsafe

  Run a Playwright code snippet. Unsafe: executes arbitrary JavaScript in the Playwright server process and is RCE-equivalent.

• browser_take_screenshot

  Take a screenshot of the current page. You can't perform actions based on the screenshot, use browser_snapshot for actions.

• browser_snapshot

  Capture accessibility snapshot of the current page, this is better than screenshot

• browser_click

  Perform click on a web page

• browser_drag

  Perform drag and drop between two elements

• browser_hover

  Hover over element on page

• browser_select_option

  Select an option in a dropdown

• browser_tabs

  List, create, close, or select a browser tab.

• browser_wait_for

  Wait for text to appear or disappear or a specified time to pass. When both text and textGone are provided, waits for the first one to happen