registry / @agimon-ai/po-browse-tool / 0.0.0-alpha.19
@agimon-ai/po-browse-tool@0.0.0-alpha.19
MCP server for browser automation using Playwright with profile management, page registry, and multi-browser support
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe manifest has no install hook, and the flagged process and output behavior fits user-invoked browser automation and startup diagnostics. The reviewed entrypoints and dynamic stub behavior showed no concrete attack.
Static reason
One or more suspicious static signals were detected.
Trigger
A user starts the package CLI or requests extension browser startup.
Impact
No malicious effect or unrelated data transfer was established.
Mechanism
The code launches selected browser or server processes; captured browser output is bounded and used in startup failure diagnostics.
AI rationale
The manifest has no install hook, and the flagged process and output behavior fits user-invoked browser automation and startup diagnostics. The reviewed entrypoints and dynamic stub behavior showed no concrete attack.
Evidence
package.jsondist/index.cjsdist/index.mjsdist/cli.mjsdist/stubs/playwright-test.cjsdist/HttpServerManager-X21a8LMu.mjsdist/websocket-routes-DRS8mx3X.cjsdist/websocket-routes-xxrWcdQd.mjs
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes library and CLI entrypoints and has no install lifecycle hook.
- The runtime entrypoints dispatch browser operations with an abort check.
- The server manager starts the package CLI and writes its output to a local temporary log.
- Extension startup captures bounded Chrome output and uses it in readiness failure diagnostics.
- The Playwright test stub dynamically requires a local module and re-exports its test APIs.
- The CLI selects commands from its arguments and imports the matching command module.
Evidence against
- The scanner's command-output signal maps to bounded Chrome startup diagnostics, not an unrelated network transfer.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinified
Source & flagged code
8 flaggeddist/HttpServerManager-X21a8LMu.mjsView file
1import{a as e,c as t,i as n,o as r,s as i}from"./networkConfig-D1ko7_Dg.mjs";import{t as a}from"./processTree-DQhvDwo6.mjs";import{c as o,l as s,s as c,u as l}from"./timeouts-C8bCg...
L2: //# sourceMappingURL=HttpServerManager-X21a8LMu.mjs.map
High
Child Process
Package source references child process execution.
dist/HttpServerManager-X21a8LMu.mjsView on unpkg · L11import{a as e,c as t,i as n,o as r,s as i}from"./networkConfig-D1ko7_Dg.mjs";import{t as a}from"./processTree-DQhvDwo6.mjs";import{c as o,l as s,s as c,u as l}from"./timeouts-C8bCg...
L2: //# sourceMappingURL=HttpServerManager-X21a8LMu.mjs.map
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/HttpServerManager-X21a8LMu.mjsView on unpkg · L1dist/extension/background.jsView file
Findings
7 High4 Medium5 Low
HighChild Processdist/HttpServerManager-X21a8LMu.mjs
HighShell
HighSame File Env Network Executiondist/HttpServerManager-X21a8LMu.mjs
HighCommand Output Exfiltrationdist/websocket-routes-xxrWcdQd.mjs
HighSandbox Evasion Gated Capabilitydist/websocket-routes-xxrWcdQd.mjs
HighCopied Package Dependency Bridgedist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/websocket-routes-DRS8mx3X.cjs
MediumDynamic Requiredist/stubs/playwright-test.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/extension/background.js
Affected versions and remediation
This report applies to @agimon-ai/po-browse-tool@0.0.0-alpha.19.
See all versions of @agimon-ai/po-browse-tool for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-browse-tool@0.0.0-alpha.19 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.