Install
$ agentstack add skill-fmind-dot-chrome-devtools ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Chrome DevTools
Use Chrome DevTools MCP or its experimental CLI for live browser diagnostics. [playwright](../playwright/SKILL.md) owns repeatable end-to-end journeys; [web-frontend](../web-frontend/SKILL.md) owns platform implementation guidance.
Setup
Require Node.js LTS, npm/npx, and supported Chrome. Reuse an available DevTools connection; otherwise follow [mcp-setup](../mcp-setup/SKILL.md) for the active harness. The launch command below uses a reviewed package pin; recheck installed help before updating it.
npx --yes chrome-devtools-mcp@1.9.0 --isolated --headless --no-usage-statistics --no-performance-crux
The MCP client starts that process over stdio. Use a dedicated browser profile. Keep remote debugging on loopback; browser content, network bodies, cookies, screenshots, and traces may expose private data. The two opt-out flags disable MCP usage statistics and CrUX URL lookups respectively.
For shell workflows, the same package exposes chrome-devtools; resolve it with npm exec --yes --package=chrome-devtools-mcp@1.9.0 -- chrome-devtools . Inspect status before starting a daemon, then explicitly start the task's session with start --workspace="$PWD" --no-usage-statistics --no-performance-crux. The CLI otherwise starts a persistent daemon automatically and enables unrestricted file access by default. Read start --help for the installed flags; do not stop or repurpose another task's daemon.
Workflow
- Identify the target: list pages and select the intended page ID, URL, viewport, and browser mode. Take a fresh accessibility snapshot before using element UIDs; navigation and rerenders can invalidate them.
- Reproduce the symptom: capture console errors and relevant failed requests, then reduce to the smallest repeatable action. Redact credentials and private request data from artifacts.
- Measure performance: record a bounded trace of the same action before and after a change; preserve CPU/network throttling, cache conditions, viewport, and tool versions. Stop traces you started and save artifacts in the authorized workspace.
- Check accessibility: inspect roles, names, focus order, keyboard operation, and visible contrast. Combine automated checks with manual interaction; an accessibility tree or Lighthouse score alone does not establish WCAG conformance.
- Investigate memory and cookies: compare repeated lifecycle actions and heap snapshots when those tools are available; inspect
HttpOnly,Secure,SameSite, and partitioning in the request's actual context. A single heap size or cookie attribute is not a diagnosis. - Verify the fix: repeat the reproduction and relevant measurements, then add a regression test through the owning project workflow. Close task-owned pages and stop only a daemon created for this task.
Gotchas
- Tool availability: inspect the live tool schema or CLI help before calling a capability; optional categories, page routing, and CLI arguments vary by version.
- Browser mode: set headed or headless explicitly for reproducibility; the CLI defaults to headless, which need not match a separately configured MCP connection.
- Lab versus field: a local trace measures this run. CrUX field data and lab measurements describe different populations and time windows.
Official Skills
Upstream: ChromeDevTools/chrome-devtools-mcp skills. Use skills add ChromeDevTools/chrome-devtools-mcp --list, then follow the shared [vendor-skill policy](../agent-project/references/vendor-skills.md) for the required guidance.
Documentation
- Chrome DevTools for agents · CLI · Tool reference
- Releases: chrome-devtools-mcp
- Companion skills: [mcp-setup](../mcp-setup/SKILL.md), [playwright](../playwright/SKILL.md), [web-frontend](../web-frontend/SKILL.md), [benchmark](../benchmark/references/command-http.md), [quality-assurance](../quality-assurance/SKILL.md).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.