Skip to main content

devtools

Enables visual debugging and automation in Chrome, allowing Claude to inspect, test, and optimize web applications effectively.

Install this skill

or
44/100

Security score

The devtools skill was audited on Feb 9, 2026 and we found 28 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 418

Curl to non-GitHub URL

SourceSKILL.md
418curl -s http://127.0.0.1:9222/json/version
medium line 141

Wget to non-GitHub URL

SourceSKILL.md
141wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
medium line 148

Wget to non-GitHub URL

SourceSKILL.md
148wget -q -O - https://dl.google.com/linux/linux_signing_key.pub | sudo gpg --dearmor -o /usr/share/keyrings/google-chrome.gpg
medium line 215

Access to hidden dotfiles in home directory

SourceSKILL.md
215| `--userDataDir` | Custom user data directory | `~/.cache/chrome-devtools-mcp/chrome-profile` |
medium line 435

Access to hidden dotfiles in home directory

SourceSKILL.md
435| Module not found | Clear npm cache: `rm -rf ~/.npm/_npx && npm cache clean --force` |
medium line 148

Access to system keychain/keyring

SourceSKILL.md
148wget -q -O - https://dl.google.com/linux/linux_signing_key.pub | sudo gpg --dearmor -o /usr/share/keyrings/google-chrome.gpg
medium line 151

Access to system keychain/keyring

SourceSKILL.md
151echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/google-chrome.gpg] http://dl.google.com/linux/chrome/deb/ stable main' | sudo tee /etc/apt/sources.list.d/google-chrome.list
low line 71

External URL reference

SourceSKILL.md
71claude mcp add chrome-devtools -- npx chrome-devtools-mcp@latest --browserUrl http://127.0.0.1:9222
low line 99

External URL reference

SourceSKILL.md
99- `<url>`: Target URL (e.g., `http://localhost:5173`)
low line 105

External URL reference

SourceSKILL.md
105bash scripts/launch_chrome.sh wsl2 http://localhost:5173
low line 108

External URL reference

SourceSKILL.md
108bash scripts/launch_chrome.sh wsl2 http://localhost:5173 headed
low line 117

External URL reference

SourceSKILL.md
117google-chrome --headless --remote-debugging-port=9222 --no-first-run --user-data-dir=/tmp/chrome-mcp http://localhost:5173 &
low line 120

External URL reference

SourceSKILL.md
120google-chrome --remote-debugging-port=9222 --no-first-run --user-data-dir=/tmp/chrome-mcp http://localhost:5173 &
low line 127

External URL reference

SourceSKILL.md
127start chrome.exe --headless --remote-debugging-port=9222 --no-first-run --user-data-dir=%TEMP%\chrome-mcp http://localhost:5173
low line 130

External URL reference

SourceSKILL.md
130start chrome.exe --remote-debugging-port=9222 --no-first-run --user-data-dir=%TEMP%\chrome-mcp http://localhost:5173
low line 141

External URL reference

SourceSKILL.md
141wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
low line 148

External URL reference

SourceSKILL.md
148wget -q -O - https://dl.google.com/linux/linux_signing_key.pub | sudo gpg --dearmor -o /usr/share/keyrings/google-chrome.gpg
low line 151

External URL reference

SourceSKILL.md
151echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/google-chrome.gpg] http://dl.google.com/linux/chrome/deb/ stable main' | sudo tee /etc/apt/sources.list.d/google-chrome.list
low line 167

External URL reference

SourceSKILL.md
167Visit https://www.google.com/chrome/ and run the installer.
low line 182

External URL reference

SourceSKILL.md
182Invoke-WebRequest -Uri "https://dl.google.com/chrome/install/latest/chrome_installer.exe" -OutFile $installer
low line 199

External URL reference

SourceSKILL.md
199claude mcp add chrome-devtools -- npx chrome-devtools-mcp@latest --browserUrl http://127.0.0.1:9222
low line 208

External URL reference

SourceSKILL.md
208| `--browserUrl`, `-u` | Connect to running Chrome (e.g., `http://127.0.0.1:9222`) | - |
low line 236

External URL reference

SourceSKILL.md
236"http://127.0.0.1:9222"
low line 271

External URL reference

SourceSKILL.md
271"--browserUrl=http://127.0.0.1:9222",
low line 306

External URL reference

SourceSKILL.md
306"--browserUrl=http://127.0.0.1:9222",
low line 336

External URL reference

SourceSKILL.md
336To get the WebSocket endpoint, visit `http://127.0.0.1:9222/json/version` and look for `webSocketDebuggerUrl`.
low line 418

External URL reference

SourceSKILL.md
418curl -s http://127.0.0.1:9222/json/version
low line 464

External URL reference

SourceSKILL.md
4642. MCP server should connect to `http://127.0.0.1:9222`
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →