Browser-mutation

mcp
Guvenlik Denetimi
Basarisiz
Health Uyari
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Basarisiz
  • exec() — Shell command execution in scripts/browser-mutation-mcp.mjs
  • network request — Outbound network request in scripts/browser-mutation-mcp.mjs
  • exec() — Shell command execution in scripts/doctor.mjs
  • os.homedir — User home directory access in scripts/doctor.mjs
  • os.homedir — User home directory access in scripts/install-codex.mjs
  • os.homedir — User home directory access in scripts/start-collector.mjs
  • network request — Outbound network request in test/static-targets.test.mjs
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This tool captures visual edits made in a local browser UI and translates them into structured data that can be used by Codex to generate source-code patches.

Security Assessment
Overall Risk: High. The code explicitly executes shell commands in its primary script and doctor utility. It also makes outbound network requests, which is a significant concern given its role as a local proxy. The installation and startup scripts access the user's home directory to likely locate local plugins or app data. While no hardcoded secrets or dangerous manifest permissions were found, the combination of arbitrary command execution and home directory access poses a substantial security footprint. Users should carefully inspect exactly what shell commands are being run before executing them.

Quality Assessment
The project is licensed under the standard MIT license, making it freely usable. It was actively updated recently. However, it suffers from extremely low community visibility, having only 5 GitHub stars. Because of this, the tool has not undergone widespread peer review or testing, meaning bugs or security vulnerabilities may be present.

Verdict
Use with caution—the arbitrary command execution and proxy behavior require reviewing the source code before running it on your local machine.
SUMMARY

Capture live browser UI edits as structured mutation intent for Codex.

README.md

Browser Mutation

Browser Mutation captures visual edits made in the Codex in-app browser and turns them into structured implementation intent for Codex.

It is intended for user-owned local development pages such as http://localhost:5174, http://127.0.0.1:3000, and similar loopback targets. Local HTML files can be served through the built-in loopback static server.

What It Includes

Browser Mutation is a community MIT project. It ships as:

  • a standalone local collector/proxy
  • a Codex skill
  • a Codex plugin manifest
  • an MCP server implementation

Browser Mutation demo

Why Browser Mutation

Browser Use can already highlight and annotate browser targets during automation. Browser Mutation is for a different step: turning a visual edit into implementation intent that Codex can apply to source code.

Use Browser Mutation when you need:

  • before/after records for text, style, layout, icon, move, resize, reparent, reorder, and delete changes
  • element identity, selector hints, neighboring layout context, and computed style snapshots
  • optional React dev-mode source hints when available
  • a captured edit payload after the user presses Send
  • repeatable handoff from a human visual edit to a source-code patch

In short: Browser Use is useful for opening, inspecting, and interacting with browser pages. Browser Mutation captures what changed and why, so Codex can translate a visual edit into code.

Quick Start For Codex Users

In a new Codex thread, this should be enough:

Install this Codex skill/plugin:
https://github.com/JosPMSilva/Browser-mutation

Requirements: git, node, and Codex Desktop on Windows, macOS, or Linux.

Clone the repo into the standard local plugin location:

mkdir -p ~/plugins
git clone https://github.com/JosPMSilva/Browser-mutation.git ~/plugins/browser-mutation
cd ~/plugins/browser-mutation
node scripts/install-codex.mjs
node scripts/doctor.mjs

Restart Codex Desktop. In Codex, open Plugins > Local Codex Tools > Browser Mutation, click Add to Codex or enable Browser Mutation, and make sure both Browser_mutation and Mutation toggles are enabled.

Start a fresh Codex thread after enabling so the skill list and MCP config are reloaded.

Then open a local app in the Codex in-app browser and ask:

Use Browser Mutation on this page.

Local Collector

node scripts/start-collector.mjs --target http://localhost:5174

For a static HTML file or folder:

node scripts/start-collector.mjs --file ./index.html
node scripts/start-collector.mjs --root ./dist

The local collector starts a browser proxy for the target page and records the edits sent from the Browser Mutation overlay. See the usage guide for the full workflow.

Documentation

Development

Run the MCP probe:

node scripts/doctor.mjs

License

MIT

Yorumlar (0)

Sonuc bulunamadi