Read-only live state of your Chrome tabs for AI agents: fields, console errors, network, storage.
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
exnos_verifyNo description publishedThis tool published no description. Forge does not invent one.
exnos_tabsList all open Chrome tabs (title, URL, which is active). Use to find the right tab value for exnos_verify.List all open Chrome tabs (title, URL, which is active). Use to find the right tab value for exnos_verify.
No input schema was published for this tool.
exnos_screenshotCapture a PNG screenshot of the visible Chrome tab. Use for visual bugs where text state is not enough. Returns a base64 data URL.Capture a PNG screenshot of the visible Chrome tab. Use for visual bugs where text state is not enough. Returns a base64 data URL.
No input schema was published for this tool.
exnos_fetch_tabsFetch live state from multiple Chrome tabs in one call. Pass an array of tab matchers (URL or title substrings) and get back the full exnos_verify state for each matched tab. Use when you need to read several tabs at once without calling exnos_verify repeatedly.Fetch live state from multiple Chrome tabs in one call. Pass an array of tab matchers (URL or title substrings) and get back the full exnos_verify state for each matched tab. Use when you need to read several tabs at once without calling exnos_verify repeatedly.
No input schema was published for this tool.
3 of 4 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Read-only live state of your Chrome tabs for AI agents: fields, console errors, network, storage.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.