85OUT OF 100
Likely safeLikely safeStatic read

TMSSS05/google-flow-browser-mcp

The repository is a specialized MCP server for browser automation using Playwright and CDP. All flagged network activity is strictly limited to local loopback (127.0.0.1) for communicating with a local Chrome instance, which is consistent with the declared intent of browser automation. No malicious behavior was observed in our static read; full runtime behavior was not executed in a sandbox on this pass.

Repository size
80 KB
Packages
0
Stars
27
Created
1 yr 1 mo
Reputation signals
TMSSS05 avatar
TMSSS05
@TMSSS05
Account age1 yr 1 mo
Public repos8
Forks6
Community sentiment70

Neutral/Positive

Code & behavior signals
Localhost CDP Communication
LowBehavior

The code performs curl checks and CDP connections to 127.0.0.1. This is standard for browser automation tools (Playwright/CDP) and is consistent with the project's documented intent to control a local browser instance.

Per-package scoring
Final verdict

No malicious behavior in our static read. The caveats above are worth noting and the owner is not yet long-established. Runtime was not executed in a sandbox on this pass.

What we could not verify
—Full runtime behavior (this repo was not executed in a sandbox on this pass)
—Every conditional and time-triggered branch
—Behavior under real credentials (no sandbox was run on this pass)
End-to-end logs
Clone
›Repository TMSSS05/google-flow-browser-mcp cloned successfully.
›Commit hash: 0c8e80ae4acb4475f8d7ba3b8c4e3b92c6b64b6a
Static scan
›No obfuscation, credential theft, or external egress detected.
›All network activity is restricted to local loopback (127.0.0.1).
Read
›README confirms intent to use Playwright/CDP for browser automation.
›Flagged regions match the documented browser-control architecture.
Score
›Score computed by formula: 85/100 (deterministic, code-driven)
›-6 [code] network: Code has outbound network capability (fetch / child_process / hardcoded IP URL).
›-3 [code] model_findings: 1 code/behavior finding(s) reported by the read model.
›+8 [reputation] established_owner: Owner account is established (older than a year with multiple public repos).
›+4 [reputation] good_sentiment: Positive community sentiment (70/100).
Auto-published at clauderabbit.in/TMSSS05/google-flow-browser-mcp · re-checked when the repo changes