@kryptosai/mcp-observatory 0.23.0 → 0.24.0

package/docs/safety-index/artifacts/playwright-mcp-server.json

@@ -0,0 +1,919 @@
+{
+  "artifactType": "run",
+  "schemaVersion": "1.0.0",
+  "gate": "fail",
+  "runId": "run_2026-06-24T020732035Z_b86ac3a9",
+  "createdAt": "2026-06-24T02:07:32.035Z",
+  "toolVersion": "0.24.0",
+  "target": {
+    "targetId": "playwright-mcp-server",
+    "adapter": "local-process",
+    "command": "npx",
+    "args": [
+      "-y",
+      "@playwright/mcp"
+    ],
+    "cwd": ".",
+    "metadata": {
+      "package": "@playwright/mcp",
+      "purpose": "mcp-safety-index",
+      "riskClass": "Browser control",
+      "failureClass": "Browser/code execution boundary",
+      "whyItMatters": "Popular browser automation servers need explicit review around navigation, screenshots, and code evaluation."
+    },
+    "serverName": "Playwright",
+    "serverVersion": "1.61.0-alpha-1781023400000"
+  },
+  "environment": {
+    "platform": "darwin 25.5.0",
+    "nodeVersion": "v22.22.1"
+  },
+  "summary": {
+    "total": 7,
+    "pass": 2,
+    "fail": 2,
+    "partial": 1,
+    "unsupported": 2,
+    "flaky": 0,
+    "skipped": 0,
+    "gate": "fail"
+  },
+  "checks": [
+    {
+      "id": "tools",
+      "capability": "tools",
+      "status": "pass",
+      "durationMs": 59.043541999999434,
+      "message": "Advertised capability responded with the minimal expected shape (23 items).",
+      "evidence": [
+        {
+          "endpoint": "tools/list",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 23,
+          "identifiers": [
+            "browser_close",
+            "browser_resize",
+            "browser_console_messages",
+            "browser_handle_dialog",
+            "browser_evaluate",
+            "browser_file_upload",
+            "browser_drop",
+            "browser_fill_form",
+            "browser_press_key",
+            "browser_type",
+            "browser_navigate",
+            "browser_navigate_back",
+            "browser_network_requests",
+            "browser_network_request",
+            "browser_run_code_unsafe",
+            "browser_take_screenshot",
+            "browser_snapshot",
+            "browser_click",
+            "browser_drag",
+            "browser_hover",
+            "browser_select_option",
+            "browser_tabs",
+            "browser_wait_for"
+          ],
+          "diagnostics": [],
+          "schemas": {
+            "browser_close": {
+              "type": "object",
+              "properties": {},
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_resize": {
+              "type": "object",
+              "properties": {
+                "width": {
+                  "type": "number",
+                  "description": "Width of the browser window"
+                },
+                "height": {
+                  "type": "number",
+                  "description": "Height of the browser window"
+                }
+              },
+              "required": [
+                "width",
+                "height"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_console_messages": {
+              "type": "object",
+              "properties": {
+                "level": {
+                  "default": "info",
+                  "description": "Level of the console messages to return. Each level includes the messages of more severe levels. Defaults to \"info\".",
+                  "type": "string",
+                  "enum": [
+                    "error",
+                    "warning",
+                    "info",
+                    "debug"
+                  ]
+                },
+                "all": {
+                  "description": "Return all console messages since the beginning of the session, not just since the last navigation. Defaults to false.",
+                  "type": "boolean"
+                },
+                "filename": {
+                  "description": "Filename to save the console messages to. If not provided, messages are returned as text.",
+                  "type": "string"
+                }
+              },
+              "required": [
+                "level"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_handle_dialog": {
+              "type": "object",
+              "properties": {
+                "accept": {
+                  "type": "boolean",
+                  "description": "Whether to accept the dialog."
+                },
+                "promptText": {
+                  "description": "The text of the prompt in case of a prompt dialog.",
+                  "type": "string"
+                }
+              },
+              "required": [
+                "accept"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_evaluate": {
+              "type": "object",
+              "properties": {
+                "element": {
+                  "description": "Human-readable element description used to obtain permission to interact with the element",
+                  "type": "string"
+                },
+                "target": {
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector",
+                  "type": "string"
+                },
+                "function": {
+                  "type": "string",
+                  "description": "() => { /* code */ } or (element) => { /* code */ } when element is provided"
+                },
+                "filename": {
+                  "description": "Filename to save the result to. If not provided, result is returned as text.",
+                  "type": "string"
+                }
+              },
+              "required": [
+                "function"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_file_upload": {
+              "type": "object",
+              "properties": {
+                "paths": {
+                  "description": "The absolute paths to the files to upload. Can be single file or multiple files. If omitted, file chooser is cancelled.",
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                }
+              },
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_drop": {
+              "type": "object",
+              "properties": {
+                "element": {
+                  "description": "Human-readable element description used to obtain permission to interact with the element",
+                  "type": "string"
+                },
+                "target": {
+                  "type": "string",
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector"
+                },
+                "paths": {
+                  "description": "Absolute paths to files to drop onto the element.",
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  }
+                },
+                "data": {
+                  "description": "Data to drop, as a map of MIME type to string value (e.g. {\"text/plain\": \"hello\", \"text/uri-list\": \"https://example.com\"}).",
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string"
+                  },
+                  "additionalProperties": {
+                    "type": "string"
+                  }
+                }
+              },
+              "required": [
+                "target"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_fill_form": {
+              "type": "object",
+              "properties": {
+                "fields": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "element": {
+                        "description": "Human-readable element description used to obtain permission to interact with the element",
+                        "type": "string"
+                      },
+                      "target": {
+                        "type": "string",
+                        "description": "Exact target element reference from the page snapshot, or a unique element selector"
+                      },
+                      "name": {
+                        "type": "string",
+                        "description": "Human-readable field name"
+                      },
+                      "type": {
+                        "type": "string",
+                        "enum": [
+                          "textbox",
+                          "checkbox",
+                          "radio",
+                          "combobox",
+                          "slider"
+                        ],
+                        "description": "Type of the field"
+                      },
+                      "value": {
+                        "type": "string",
+                        "description": "Value to fill in the field. If the field is a checkbox, the value should be `true` or `false`. If the field is a combobox, the value should be the text of the option."
+                      }
+                    },
+                    "required": [
+                      "target",
+                      "name",
+                      "type",
+                      "value"
+                    ],
+                    "additionalProperties": false
+                  },
+                  "description": "Fields to fill in"
+                }
+              },
+              "required": [
+                "fields"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_press_key": {
+              "type": "object",
+              "properties": {
+                "key": {
+                  "type": "string",
+                  "description": "Name of the key to press or a character to generate, such as `ArrowLeft` or `a`"
+                }
+              },
+              "required": [
+                "key"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_type": {
+              "type": "object",
+              "properties": {
+                "element": {
+                  "description": "Human-readable element description used to obtain permission to interact with the element",
+                  "type": "string"
+                },
+                "target": {
+                  "type": "string",
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector"
+                },
+                "text": {
+                  "type": "string",
+                  "description": "Text to type into the element"
+                },
+                "submit": {
+                  "description": "Whether to submit entered text (press Enter after)",
+                  "type": "boolean"
+                },
+                "slowly": {
+                  "description": "Whether to type one character at a time. Useful for triggering key handlers in the page. By default entire text is filled in at once.",
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "target",
+                "text"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_navigate": {
+              "type": "object",
+              "properties": {
+                "url": {
+                  "type": "string",
+                  "description": "The URL to navigate to"
+                }
+              },
+              "required": [
+                "url"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_navigate_back": {
+              "type": "object",
+              "properties": {},
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_network_requests": {
+              "type": "object",
+              "properties": {
+                "static": {
+                  "default": false,
+                  "description": "Whether to include successful static resources like images, fonts, scripts, etc. Defaults to false.",
+                  "type": "boolean"
+                },
+                "filter": {
+                  "description": "Only return requests whose URL matches this regexp (e.g. \"/api/.*user\").",
+                  "type": "string"
+                },
+                "filename": {
+                  "description": "Filename to save the network requests to. If not provided, requests are returned as text.",
+                  "type": "string"
+                }
+              },
+              "required": [
+                "static"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_network_request": {
+              "type": "object",
+              "properties": {
+                "index": {
+                  "type": "integer",
+                  "minimum": 1,
+                  "maximum": 9007199254740991,
+                  "description": "1-based index of the request, as printed by browser_network_requests."
+                },
+                "part": {
+                  "description": "Return only this part of the request. Omit to return full details.",
+                  "type": "string",
+                  "enum": [
+                    "request-headers",
+                    "request-body",
+                    "response-headers",
+                    "response-body"
+                  ]
+                },
+                "filename": {
+                  "description": "Filename to save the result to. If not provided, output is returned as text.",
+                  "type": "string"
+                }
+              },
+              "required": [
+                "index"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_run_code_unsafe": {
+              "type": "object",
+              "properties": {
+                "code": {
+                  "description": "A JavaScript function containing Playwright code to execute. It will be invoked with a single argument, page, which you can use for any page interaction. For example: `async (page) => { await page.getByRole('button', { name: 'Submit' }).click(); return await page.title(); }`",
+                  "type": "string"
+                },
+                "filename": {
+                  "description": "Load code from the specified file. If both code and filename are provided, code will be ignored.",
+                  "type": "string"
+                }
+              },
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_take_screenshot": {
+              "type": "object",
+              "properties": {
+                "element": {
+                  "description": "Human-readable element description used to obtain permission to interact with the element",
+                  "type": "string"
+                },
+                "target": {
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector",
+                  "type": "string"
+                },
+                "type": {
+                  "default": "png",
+                  "description": "Image format for the screenshot. Default is png.",
+                  "type": "string",
+                  "enum": [
+                    "png",
+                    "jpeg"
+                  ]
+                },
+                "filename": {
+                  "description": "File name to save the screenshot to. Defaults to `page-{timestamp}.{png|jpeg}` if not specified. Prefer relative file names to stay within the output directory.",
+                  "type": "string"
+                },
+                "fullPage": {
+                  "description": "When true, takes a screenshot of the full scrollable page, instead of the currently visible viewport. Cannot be used with element screenshots.",
+                  "type": "boolean"
+                }
+              },
+              "required": [
+                "type"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_snapshot": {
+              "type": "object",
+              "properties": {
+                "target": {
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector",
+                  "type": "string"
+                },
+                "filename": {
+                  "description": "Save snapshot to markdown file instead of returning it in the response.",
+                  "type": "string"
+                },
+                "depth": {
+                  "description": "Limit the depth of the snapshot tree",
+                  "type": "number"
+                },
+                "boxes": {
+                  "description": "Include each element's bounding box as [box=x,y,width,height] in the snapshot. Coordinates are viewport-relative, in CSS pixels (Element.getBoundingClientRect)",
+                  "type": "boolean"
+                }
+              },
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_click": {
+              "type": "object",
+              "properties": {
+                "element": {
+                  "description": "Human-readable element description used to obtain permission to interact with the element",
+                  "type": "string"
+                },
+                "target": {
+                  "type": "string",
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector"
+                },
+                "doubleClick": {
+                  "description": "Whether to perform a double click instead of a single click",
+                  "type": "boolean"
+                },
+                "button": {
+                  "description": "Button to click, defaults to left",
+                  "type": "string",
+                  "enum": [
+                    "left",
+                    "right",
+                    "middle"
+                  ]
+                },
+                "modifiers": {
+                  "description": "Modifier keys to press",
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "enum": [
+                      "Alt",
+                      "Control",
+                      "ControlOrMeta",
+                      "Meta",
+                      "Shift"
+                    ]
+                  }
+                }
+              },
+              "required": [
+                "target"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_drag": {
+              "type": "object",
+              "properties": {
+                "startElement": {
+                  "description": "Human-readable source element description used to obtain the permission to interact with the element",
+                  "type": "string"
+                },
+                "startTarget": {
+                  "type": "string",
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector"
+                },
+                "endElement": {
+                  "description": "Human-readable target element description used to obtain the permission to interact with the element",
+                  "type": "string"
+                },
+                "endTarget": {
+                  "type": "string",
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector"
+                }
+              },
+              "required": [
+                "startTarget",
+                "endTarget"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_hover": {
+              "type": "object",
+              "properties": {
+                "element": {
+                  "description": "Human-readable element description used to obtain permission to interact with the element",
+                  "type": "string"
+                },
+                "target": {
+                  "type": "string",
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector"
+                }
+              },
+              "required": [
+                "target"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_select_option": {
+              "type": "object",
+              "properties": {
+                "element": {
+                  "description": "Human-readable element description used to obtain permission to interact with the element",
+                  "type": "string"
+                },
+                "target": {
+                  "type": "string",
+                  "description": "Exact target element reference from the page snapshot, or a unique element selector"
+                },
+                "values": {
+                  "type": "array",
+                  "items": {
+                    "type": "string"
+                  },
+                  "description": "Array of values to select in the dropdown. This can be a single value or multiple values."
+                }
+              },
+              "required": [
+                "target",
+                "values"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_tabs": {
+              "type": "object",
+              "properties": {
+                "action": {
+                  "type": "string",
+                  "enum": [
+                    "list",
+                    "new",
+                    "close",
+                    "select"
+                  ],
+                  "description": "Operation to perform"
+                },
+                "index": {
+                  "description": "Tab index, used for close/select. If omitted for close, current tab is closed.",
+                  "type": "number"
+                },
+                "url": {
+                  "description": "URL to navigate to in the new tab, used for new.",
+                  "type": "string"
+                }
+              },
+              "required": [
+                "action"
+              ],
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            },
+            "browser_wait_for": {
+              "type": "object",
+              "properties": {
+                "time": {
+                  "description": "The time to wait in seconds",
+                  "type": "number"
+                },
+                "text": {
+                  "description": "The text to wait for",
+                  "type": "string"
+                },
+                "textGone": {
+                  "description": "The text to wait for to disappear",
+                  "type": "string"
+                }
+              },
+              "$schema": "https://json-schema.org/draft/2020-12/schema",
+              "additionalProperties": false
+            }
+          }
+        }
+      ]
+    },
+    {
+      "id": "prompts",
+      "capability": "prompts",
+      "status": "unsupported",
+      "durationMs": 0.006790999999793712,
+      "message": "Prompts are not advertised by the target.",
+      "evidence": [
+        {
+          "endpoint": "prompts/list",
+          "advertised": false,
+          "responded": false,
+          "minimalShapePresent": false,
+          "diagnostics": []
+        }
+      ]
+    },
+    {
+      "id": "resources",
+      "capability": "resources",
+      "status": "unsupported",
+      "durationMs": 0.007708000001002802,
+      "message": "Resources are not advertised by the target.",
+      "evidence": [
+        {
+          "endpoint": "resources/list | resources/templates/list",
+          "advertised": false,
+          "responded": false,
+          "minimalShapePresent": false,
+          "diagnostics": []
+        }
+      ]
+    },
+    {
+      "id": "security-lite",
+      "capability": "security-lite",
+      "status": "fail",
+      "durationMs": 0.24841600000218023,
+      "message": "Found 6 security finding(s): 2 high, 2 medium, 2 low.",
+      "evidence": [
+        {
+          "endpoint": "security/scan-lite",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 6,
+          "identifiers": [
+            "browser_close",
+            "browser_evaluate",
+            "browser_navigate_back",
+            "browser_run_code_unsafe"
+          ],
+          "diagnostics": [
+            "[low] Tool \"browser_close\" has an empty schema but is marked as destructive.",
+            "[high] Tool \"browser_evaluate\" name suggests command execution capability.",
+            "[medium] Tool \"browser_evaluate\" accepts filesystem paths and has destructive capabilities.",
+            "[low] Tool \"browser_navigate_back\" has an empty schema but is marked as destructive.",
+            "[high] Tool \"browser_run_code_unsafe\" has parameter \"code\" which may allow arbitrary command execution.",
+            "[medium] Tool \"browser_run_code_unsafe\" accepts filesystem paths and has destructive capabilities."
+          ],
+          "findings": [
+            {
+              "ruleId": "permissive-schema",
+              "severity": "low",
+              "toolName": "browser_close",
+              "message": "Tool \"browser_close\" has an empty schema but is marked as destructive."
+            },
+            {
+              "ruleId": "shell-injection",
+              "severity": "high",
+              "toolName": "browser_evaluate",
+              "message": "Tool \"browser_evaluate\" name suggests command execution capability."
+            },
+            {
+              "ruleId": "broad-filesystem",
+              "severity": "medium",
+              "toolName": "browser_evaluate",
+              "message": "Tool \"browser_evaluate\" accepts filesystem paths and has destructive capabilities."
+            },
+            {
+              "ruleId": "permissive-schema",
+              "severity": "low",
+              "toolName": "browser_navigate_back",
+              "message": "Tool \"browser_navigate_back\" has an empty schema but is marked as destructive."
+            },
+            {
+              "ruleId": "shell-injection",
+              "severity": "high",
+              "toolName": "browser_run_code_unsafe",
+              "message": "Tool \"browser_run_code_unsafe\" has parameter \"code\" which may allow arbitrary command execution."
+            },
+            {
+              "ruleId": "broad-filesystem",
+              "severity": "medium",
+              "toolName": "browser_run_code_unsafe",
+              "message": "Tool \"browser_run_code_unsafe\" accepts filesystem paths and has destructive capabilities."
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": "conformance",
+      "capability": "conformance",
+      "status": "pass",
+      "durationMs": 3062.4197910000003,
+      "message": "All 7 conformance checks passed.",
+      "evidence": [
+        {
+          "endpoint": "conformance/check",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 7,
+          "identifiers": [],
+          "diagnostics": [
+            "[pass] capabilities-present: Server returned capabilities object.",
+            "[pass] server-info: Server provided initialization info.",
+            "[pass] tools-capability-match: tools/list returned 23 tool(s).",
+            "[pass] prompts-capability-match: Prompts not advertised — endpoint check skipped.",
+            "[pass] resources-capability-match: Resources not advertised — endpoint check skipped.",
+            "[pass] tool-response-content: Tool \"browser_close\" response has valid content array.",
+            "[pass] error-handling: Server returned proper error code -32601 for unknown method."
+          ]
+        }
+      ]
+    },
+    {
+      "id": "schema-quality",
+      "capability": "schema-quality",
+      "status": "partial",
+      "durationMs": 7.270583000001352,
+      "message": "Found 4 quality finding(s) across 23 item(s): 0 warnings, 4 info.",
+      "evidence": [
+        {
+          "endpoint": "schema-quality/scan",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 4,
+          "identifiers": [
+            "browser_file_upload",
+            "browser_run_code_unsafe",
+            "browser_snapshot",
+            "browser_wait_for"
+          ],
+          "diagnostics": [
+            "[info] tool \"browser_file_upload\": Has properties but no 'required' array declared",
+            "[info] tool \"browser_run_code_unsafe\": Has properties but no 'required' array declared",
+            "[info] tool \"browser_snapshot\": Has properties but no 'required' array declared",
+            "[info] tool \"browser_wait_for\": Has properties but no 'required' array declared"
+          ]
+        }
+      ]
+    },
+    {
+      "id": "security",
+      "capability": "security",
+      "status": "fail",
+      "durationMs": 25.690708999998606,
+      "message": "Found 6 security finding(s): 2 high, 2 medium, 2 low.",
+      "evidence": [
+        {
+          "endpoint": "security/scan",
+          "advertised": true,
+          "responded": true,
+          "minimalShapePresent": true,
+          "itemCount": 6,
+          "identifiers": [
+            "browser_close",
+            "browser_evaluate",
+            "browser_navigate_back",
+            "browser_run_code_unsafe"
+          ],
+          "diagnostics": [
+            "[low] Tool \"browser_close\" has an empty schema but is marked as destructive.",
+            "[high] Tool \"browser_evaluate\" name suggests command execution capability.",
+            "[medium] Tool \"browser_evaluate\" accepts filesystem paths and has destructive capabilities.",
+            "[low] Tool \"browser_navigate_back\" has an empty schema but is marked as destructive.",
+            "[high] Tool \"browser_run_code_unsafe\" has parameter \"code\" which may allow arbitrary command execution.",
+            "[medium] Tool \"browser_run_code_unsafe\" accepts filesystem paths and has destructive capabilities."
+          ],
+          "findings": [
+            {
+              "ruleId": "permissive-schema",
+              "severity": "low",
+              "toolName": "browser_close",
+              "message": "Tool \"browser_close\" has an empty schema but is marked as destructive."
+            },
+            {
+              "ruleId": "shell-injection",
+              "severity": "high",
+              "toolName": "browser_evaluate",
+              "message": "Tool \"browser_evaluate\" name suggests command execution capability."
+            },
+            {
+              "ruleId": "broad-filesystem",
+              "severity": "medium",
+              "toolName": "browser_evaluate",
+              "message": "Tool \"browser_evaluate\" accepts filesystem paths and has destructive capabilities."
+            },
+            {
+              "ruleId": "permissive-schema",
+              "severity": "low",
+              "toolName": "browser_navigate_back",
+              "message": "Tool \"browser_navigate_back\" has an empty schema but is marked as destructive."
+            },
+            {
+              "ruleId": "shell-injection",
+              "severity": "high",
+              "toolName": "browser_run_code_unsafe",
+              "message": "Tool \"browser_run_code_unsafe\" has parameter \"code\" which may allow arbitrary command execution."
+            },
+            {
+              "ruleId": "broad-filesystem",
+              "severity": "medium",
+              "toolName": "browser_run_code_unsafe",
+              "message": "Tool \"browser_run_code_unsafe\" accepts filesystem paths and has destructive capabilities."
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "healthScore": {
+    "overall": 65,
+    "grade": "D",
+    "dimensions": [
+      {
+        "name": "Protocol Compliance",
+        "weight": 0.3,
+        "score": 100,
+        "details": [
+          "conformance: pass (100/100)"
+        ]
+      },
+      {
+        "name": "Schema Quality",
+        "weight": 0.2,
+        "score": 60,
+        "details": [
+          "schema-quality: partial (60/100)"
+        ]
+      },
+      {
+        "name": "Security",
+        "weight": 0.2,
+        "score": 0,
+        "details": [
+          "security-lite: fail (0/100)",
+          "security: fail (0/100)"
+        ]
+      },
+      {
+        "name": "Reliability",
+        "weight": 0.2,
+        "score": 67,
+        "details": [
+          "tools: pass (100/100)",
+          "prompts: unsupported (50/100)",
+          "resources: unsupported (50/100)"
+        ]
+      },
+      {
+        "name": "Performance",
+        "weight": 0.1,
+        "score": 100,
+        "details": [
+          "Connect: 5774ms",
+          "p95 latency: 59ms (3 operations)"
+        ]
+      }
+    ]
+  },
+  "performanceMetrics": {
+    "connectMs": 5773.640125,
+    "toolsListMs": 59.043541999999434,
+    "promptsListMs": 0.006790999999793712,
+    "resourcesListMs": 0.007708000001002802
+  }
+}