{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2025-07-28T10:14:37.785000+00:00","analysis_method":"capability_triage","category":"Desktop Extension","description":"Kapture is a powerful browser automation tool that enables AI assistants like Claude to control web browsers through a Chrome DevTools extension. It provides...","did":"ant-dir-gh-williamkapke-kapture","homepage_url":"https://williamkapke.github.io/kapture/","icon":"https://claude.ai/api/dxt/extensions/ant.dir.gh.williamkapke.kapture/versions/2.1.2/icon.png","id":"ant.dir.gh.williamkapke.kapture","installs":56499,"last_scanned":"","license":"MIT","long_description":"Kapture is a powerful browser automation tool that enables AI assistants like Claude to control web browsers through a Chrome DevTools extension. It provides a seamless bridge between MCP clients and browser automation, allowing you to navigate pages, interact with elements, capture screenshots, and extract information from websites.\n\nKey features:\n- Navigate and control browser tabs\n- Click, hover, and interact with page elements\n- Fill forms and input fields\n- Capture sc...","name":"Kapture Browser Automation","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ant-dir-gh-williamkapke-kapture&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"William Kapke","publisher_url":"https://github.com/williamkapke","repository_url":"https://github.com/williamkapke/kapture","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.","evidence":"Connector has 21 tools; permissions on claude.ai/directory: \"unknown\". Data flows out of the connected service into the model.","remediation":{"block_tool_categories":[],"steps":["Connect using an account that only has access to the information you actually want Claude to read - not your main admin login.","When you grant access, pick the smallest set of folders, mailboxes, or channels possible.","Check the connector's activity log every so often to make sure nothing unexpected is being read."]},"risk_type":"reads_private_data","severity":"medium","title":"Reads your private information"},{"description":"This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.","evidence":"1 destructive tool on this connector - e.g. close.","remediation":{"block_tool_categories":["destructive"],"steps":["In the tools list below, turn off any tool tagged Block - most workflows don't need Claude to delete anything.","If you really do need deletion, use a login that doesn't have delete permission and have a person handle removals manually.","Make sure the connected service has a trash / recycle bin enabled so accidental deletes can be recovered."]},"risk_type":"deletes_data","severity":"high","title":"Can permanently delete data"}],"signature_status":"unsigned","source_code_reviewed":true,"tags":["reads_private_data","browser_control","database_access"],"tools":[{"description":"","name":"list_tabs"},{"description":"","name":"tab_detail"},{"description":"","name":"navigate"},{"description":"","name":"back"},{"description":"","name":"forward"},{"description":"","name":"reload"},{"description":"","name":"show"},{"description":"","name":"click"},{"description":"","name":"hover"},{"description":"","name":"focus"},{"description":"","name":"blur"},{"description":"","name":"fill"},{"description":"","name":"select"},{"description":"","name":"keypress"},{"description":"","name":"screenshot"},{"description":"","name":"dom"},{"description":"","name":"elements"},{"description":"","name":"elementsFromPoint"},{"description":"","name":"console_logs"},{"description":"","name":"new_tab"},{"description":"","name":"close","risk":{"category":"destructive","level":"high","recommendation":"Block by default. Only enable for read-only or sandbox accounts; require explicit human confirmation for any destructive action.","why":"Irreversibly removes data or resources. A prompt-injection or mistaken instruction could destroy production data with no recovery path."}}],"tools_count":21,"type":"desktop_extension","url":"","uuid":"9f5432c3-60ae-5d6a-b5da-940295519303","version":"2.1.2"},"query_key":"kapture browser automation","schema_version":1,"status":"match"}