@kryptosai/mcp-observatory 1.32.1 → 1.33.0

package/docs/safety-index/artifacts/chrome-devtools-mcp-server.json

@@ -2,9 +2,9 @@
   "artifactType": "run",
   "schemaVersion": "1.0.0",
   "gate": "fail",
-  "runId": "run_2026-07-12T234415494Z_abf0d9f2",
-  "createdAt": "2026-07-12T23:44:15.494Z",
-  "toolVersion": "1.31.0",
+  "runId": "run_2026-07-15T223335366Z_4ee3cf79",
+  "createdAt": "2026-07-15T22:33:35.366Z",
+  "toolVersion": "1.32.1",
   "target": {
     "targetId": "chrome-devtools-mcp-server",
     "adapter": "local-process",
@@ -22,7 +22,7 @@
       "whyItMatters": "Coding agents may use Chrome DevTools MCP to inspect pages, network state, console output, and browser behavior before making changes."
     },
     "serverName": "chrome_devtools",
-    "serverVersion": "1.5.0"
+    "serverVersion": "1.6.0"
   },
   "environment": {
     "platform": "darwin 25.5.0",
@@ -43,7 +43,7 @@
       "id": "tools",
       "capability": "tools",
       "status": "pass",
-      "durationMs": 3.241707999997743,
+      "durationMs": 3.329791000000114,
       "message": "Advertised capability responded with the minimal expected shape (29 items).",
       "evidence": [
         {
@@ -84,11 +84,11 @@
             "wait_for"
           ],
           "diagnostics": [
-            "debug, and modify any data in the browser or DevTools.",
             "Avoid sharing sensitive or personal information that you do not want to share with MCP clients.",
             "Performance tools may send trace URLs to the Google CrUX API to fetch real-user experience data. To disable, run with --no-performance-crux.",
             "Google collects usage statistics to improve Chrome DevTools MCP. To opt-out, run with --no-usage-statistics.",
-            "For more details, visit: https://github.com/ChromeDevTools/chrome-devtools-mcp#usage-statistics"
+            "For more details, visit: https://github.com/ChromeDevTools/chrome-devtools-mcp#usage-statistics",
+            "[chrome-devtools-mcp] The connecting client did not negotiate the MCP roots capability. File-writing tools will be restricted to the OS temp directory. To restore the previous unrestricted behavior, start the server with --allow-unrestricted-paths."
           ],
           "schemas": {
             "click": {
@@ -526,7 +526,7 @@
                   "type": "string",
                   "enum": [
                     "accept",
-                    "decline"
+                    "dismiss"
                   ],
                   "description": "Whether to auto accept or beforeunload dialogs triggered by this navigation. Default is accept."
                 },
@@ -809,7 +809,7 @@
       "id": "prompts",
       "capability": "prompts",
       "status": "unsupported",
-      "durationMs": 0.0011669999985315371,
+      "durationMs": 0.000959000000875676,
       "message": "Prompts are not advertised by the target.",
       "evidence": [
         {
@@ -825,7 +825,7 @@
       "id": "resources",
       "capability": "resources",
       "status": "unsupported",
-      "durationMs": 0.003333000000566244,
+      "durationMs": 0.0034589999995660037,
       "message": "Resources are not advertised by the target.",
       "evidence": [
         {
@@ -841,7 +841,7 @@
       "id": "security-lite",
       "capability": "security-lite",
       "status": "fail",
-      "durationMs": 0.07995799999844166,
+      "durationMs": 0.07579099999929895,
       "message": "Found 30 security finding(s): 1 high, 7 medium, 22 low.",
       "evidence": [
         {
@@ -1095,7 +1095,7 @@
       "id": "runtime-profile",
       "capability": "runtime-profile",
       "status": "partial",
-      "durationMs": 0.29970800000228337,
+      "durationMs": 0.27462499999819556,
       "message": "Detected 9 potential egress target(s) and 36 potential state mutation(s) with high confidence.",
       "evidence": [
         {
@@ -1388,7 +1388,7 @@
       "id": "conformance",
       "capability": "conformance",
       "status": "pass",
-      "durationMs": 585.5175410000011,
+      "durationMs": 467.4852920000012,
       "message": "All 7 conformance checks passed.",
       "evidence": [
         {
@@ -1414,7 +1414,7 @@
       "id": "schema-quality",
       "capability": "schema-quality",
       "status": "partial",
-      "durationMs": 1.0256250000020373,
+      "durationMs": 0.9106250000004366,
       "message": "Found 10 quality finding(s) across 29 item(s): 0 warnings, 10 info.",
       "evidence": [
         {
@@ -1516,7 +1516,7 @@
       "id": "security",
       "capability": "security",
       "status": "fail",
-      "durationMs": 0.8184169999985897,
+      "durationMs": 0.6830829999998969,
       "message": "Found 30 security finding(s): 1 high, 7 medium, 22 low.",
       "evidence": [
         {
@@ -1770,7 +1770,7 @@
       "id": "attack-sim",
       "capability": "attack-sim",
       "status": "partial",
-      "durationMs": 0.9619170000005397,
+      "durationMs": 0.8363329999992857,
       "message": "Safe attack simulation found 9 finding(s): 0 high, 9 medium, 0 low.",
       "evidence": [
         {
@@ -2023,17 +2023,17 @@
         "weight": 0.1,
         "score": 100,
         "details": [
-          "Connect: 969ms",
+          "Connect: 844ms",
           "p95 latency: 3ms (3 operations)"
         ]
       }
     ]
   },
   "performanceMetrics": {
-    "connectMs": 969.2750419999975,
-    "toolsListMs": 3.241707999997743,
-    "promptsListMs": 0.0011669999985315371,
-    "resourcesListMs": 0.003333000000566244
+    "connectMs": 844.4904169999973,
+    "toolsListMs": 3.329791000000114,
+    "promptsListMs": 0.000959000000875676,
+    "resourcesListMs": 0.0034589999995660037
   },
   "runtimeProfile": {
     "egress": [
@@ -2310,7 +2310,7 @@
         "source": "description_analysis"
       }
     ],
-    "analyzedAt": "2026-07-12T23:44:16.468Z",
+    "analyzedAt": "2026-07-15T22:33:36.216Z",
     "confidence": "high"
   }
 }

package/docs/safety-index/artifacts/chrome-devtools-mcp-server.md

@@ -1,13 +1,13 @@
 # MCP Observatory Run Report
 
-Generated at 2026-07-12T23:44:15.494Z
+Generated at 2026-07-15T22:33:35.366Z
 
 ## Target and Environment Metadata
 
 - Target: `chrome-devtools-mcp-server`
 - Adapter: `local-process`
 - Command: `npx -y chrome-devtools-mcp`
-- Server: `chrome_devtools 1.5.0`
+- Server: `chrome_devtools 1.6.0`
 - Platform: `darwin 25.5.0`
 - Node: `v22.22.1`
 
@@ -106,7 +106,7 @@ The following state-modifying operations were identified from tool schemas:
 | filesystem | write | working_directory | description_analysis |
 | filesystem | write | working_directory | description_analysis |
 
-_Analyzed at 2026-07-12T23:44:16.468Z_
+_Analyzed at 2026-07-15T22:33:36.216Z_
 
 ## Regressions and Recoveries
 
@@ -116,14 +116,14 @@ _Use the `diff` command against another run artifact to classify regressions and
 
 | Focus | Check | Status | Duration (ms) | Message |
 | --- | --- | --- | --- | --- |
-| healthy | conformance | pass | 585.52 | All 7 conformance checks passed. |
-| healthy | tools | pass | 3.24 | Advertised capability responded with the minimal expected shape (29 items). |
-| review | attack-sim | partial | 0.96 | Safe attack simulation found 9 finding(s): 0 high, 9 medium, 0 low. |
-| review | runtime-profile | partial | 0.30 | Detected 9 potential egress target(s) and 36 potential state mutation(s) with high confidence. |
-| review | schema-quality | partial | 1.03 | Found 10 quality finding(s) across 29 item(s): 0 warnings, 10 info. |
+| healthy | conformance | pass | 467.49 | All 7 conformance checks passed. |
+| healthy | tools | pass | 3.33 | Advertised capability responded with the minimal expected shape (29 items). |
+| review | attack-sim | partial | 0.84 | Safe attack simulation found 9 finding(s): 0 high, 9 medium, 0 low. |
+| review | runtime-profile | partial | 0.27 | Detected 9 potential egress target(s) and 36 potential state mutation(s) with high confidence. |
+| review | schema-quality | partial | 0.91 | Found 10 quality finding(s) across 29 item(s): 0 warnings, 10 info. |
 | confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
 | confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
-| act now | security | fail | 0.82 | Found 30 security finding(s): 1 high, 7 medium, 22 low. |
+| act now | security | fail | 0.68 | Found 30 security finding(s): 1 high, 7 medium, 22 low. |
 | act now | security-lite | fail | 0.08 | Found 30 security finding(s): 1 high, 7 medium, 22 low. |
 
 ## Evidence Snippets
@@ -150,7 +150,7 @@ Summary: Advertised capability responded with the minimal expected shape (29 ite
   - Minimal shape present: `true`
   - Item count: `29`
   - Identifiers: click, close_page, drag, emulate, evaluate_script (+24 more)
-  - Diagnostics: debug, and modify any data in the browser or DevTools., Avoid sharing sensitive or personal information that you do not want to share with MCP clients., Performance tools may send trace URLs to the Google CrUX API to fetch real-user experience data. To disable, run with --no-performance-crux. (+2 more)
+  - Diagnostics: Avoid sharing sensitive or personal information that you do not want to share with MCP clients., Performance tools may send trace URLs to the Google CrUX API to fetch real-user experience data. To disable, run with --no-performance-crux., Google collects usage statistics to improve Chrome DevTools MCP. To opt-out, run with --no-usage-statistics. (+2 more)
 
 ### attack-sim — partial
 
@@ -247,5 +247,5 @@ npm run cli -- report --run <path-to-run-artifact.json> --format markdown
 
 - Artifact type: `run`
 - Schema version: `1.0.0`
-- Run ID: `run_2026-07-12T234415494Z_abf0d9f2`
+- Run ID: `run_2026-07-15T223335366Z_4ee3cf79`
 - Gate: `fail`