registry / @agimon-ai/po-browse-tool / 0.0.0-alpha.11
@agimon-ai/po-browse-tool@0.0.0-alpha.11
MCP server for browser automation using Playwright with profile management, page registry, and multi-browser support
AI Security Review
scanned 18d ago · by lpm-firewall-aiStatic inspection found no install-time execution or concrete attack behavior. The scanner’s process and network signals correspond to browser startup diagnostics and requests to the configured browse-tool server.
Static reason
One or more suspicious static signals were detected.
Trigger
A user starts the CLI or invokes the exported browser tools.
Impact
No confirmed credential theft, command-output exfiltration, or unauthorized account action was established.
Mechanism
Browser actions are bound to the configured runtime and profile; captured browser process output is used in a startup failure log.
AI rationale
Static inspection found no install-time execution or concrete attack behavior. The scanner’s process and network signals correspond to browser startup diagnostics and requests to the configured browse-tool server.
Network endpoints1
localhost
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hook; its listed scripts are development, build, test, and maintenance commands.
- Both module entrypoints check that browser actions use the bound runtime and profile, and redact configured secrets.
- Captured process output is used in a Chrome extension startup failure log after the browser fails to become ready.
- The HTTP client sends tool requests to the configured browse-tool server, whose hostname defaults to localhost.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/container-ZsWmrJa5.cjsView file
1const e=require("./networkConfig-DjohaQE3.cjs"),t=require("./timeouts-B_WDmAvV.cjs"),n=require("./decorateMetadata-DLp0MYhw.cjs"),r=require("./decorate-DCJt-2rt.cjs"),i=require("./...
L2: `);return h.default.writeFileSync(m.default.join(n,`manifest.json`),JSON.stringify(r,null,2),{mode:384}),h.default.writeFileSync(m.default.join(n,`background.js`),i,{mode:384}),n}f...
High
Child Process
Package source references child process execution.
dist/container-ZsWmrJa5.cjsView on unpkg · L11const e=require("./networkConfig-DjohaQE3.cjs"),t=require("./timeouts-B_WDmAvV.cjs"),n=require("./decorateMetadata-DLp0MYhw.cjs"),r=require("./decorate-DCJt-2rt.cjs"),i=require("./...
L2: `);return h.default.writeFileSync(m.default.join(n,`manifest.json`),JSON.stringify(r,null,2),{mode:384}),h.default.writeFileSync(m.default.join(n,`background.js`),i,{mode:384}),n}f...
L3: macOS: brew install --cask google-chrome
L4: Linux: sudo apt install google-chrome-stable`);let n=this.resolveExtensionPath(e.extensionPath),r=this.createUserDataDir(e.profileName);await this.lockManager.ensureAvailable(r);le...
L5: `)}createDockerEnvArgs(e){if(!e)return[];let t=[];for(let[n,r]of Object.entries(e))n&&t.push(`-e`,`${n}=${r}`);return t}parseDockerRunArgs(e){return e?e.split(/\s+/).map(e=>e.trim(...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
Findings
5 High4 Medium5 Low
HighChild Processdist/container-ZsWmrJa5.cjs
HighShell
HighSame File Env Network Executiondist/container-ZsWmrJa5.cjs
HighCommand Output Exfiltrationdist/container-ZsWmrJa5.cjs
HighTrigger Reachable Command Output Exfiltrationdist/container-ZsWmrJa5.cjs
MediumDynamic Requiredist/stubs/playwright-test.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/extension/background.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @agimon-ai/po-browse-tool@0.0.0-alpha.11.
See all versions of @agimon-ai/po-browse-tool for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-browse-tool@0.0.0-alpha.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.