chrome-devtools-mcp-singleton
Manages a single-instance Chrome DevTools MCP server, ensuring no concurrent processes run, ideal for development environments.
Install this skill
Security score
The chrome-devtools-mcp-singleton skill was audited on Feb 9, 2026 and we found 14 security issues across 3 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 103 | - PID file: `${CHROME_DEVTOOLS_MCP_STATE_DIR:-/tmp/chrome-devtools-mcp-singleton}/pid` |
Template literal with variable interpolation in command context
| 104 | - Log file: `${CHROME_DEVTOOLS_MCP_STATE_DIR:-/tmp/chrome-devtools-mcp-singleton}/server.log` |
Access to hidden dotfiles in home directory
| 12 | - `scripts/run_chrome_devtools_mcp.sh` (relative to this skill folder, e.g. `~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh`) |
Access to hidden dotfiles in home directory
| 18 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh status |
Access to hidden dotfiles in home directory
| 24 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh start -- --headless --isolated |
Access to hidden dotfiles in home directory
| 30 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh run -- --headless --isolated |
Access to hidden dotfiles in home directory
| 36 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh stop |
Access to hidden dotfiles in home directory
| 42 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh dedupe |
Access to hidden dotfiles in home directory
| 50 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/mcp-smoke.sh |
Access to hidden dotfiles in home directory
| 56 | cd ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/mcp-client |
Access to hidden dotfiles in home directory
| 69 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh start -- --headless --isolated --executablePath "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" |
Access to hidden dotfiles in home directory
| 72 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh start -- --browserUrl http://127.0.0.1:9222 |
Access to hidden dotfiles in home directory
| 75 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh start -- --channel stable |
External URL reference
| 72 | ~/.codex/skills/chrome-devtools-mcp-singleton/scripts/run_chrome_devtools_mcp.sh start -- --browserUrl http://127.0.0.1:9222 |