Is SeleniumBase MCP safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
No critical or high findings in the latest scan.
Public scan report
scanner v0.1.2 · 2026-09-18 · same rubric, same numbers if you re-run it
2 medium
- Code scan128 source files scanned15/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- Tool poisoningonly the listing description was available15/15
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (2)
- mediumsubprocess with shell=True
exec.shell-trueseleniumbase-4.54.9/seleniumbase/behave/behave_sb.py: …struct a explicit argument list without shell=True cmd = ["behave", "-d"] + command_ar…
- mediumNetwork call to a raw IP address
net.raw-ipseleniumbase-4.54.9/seleniumbase/utilities/selenium_grid/grid_hub.py: …") print("Grid Hub Console: http://127.0.0.1:4444/grid/console") print("") …
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON