registry / @agimon-ai/po-browse-tool / 0.0.0-alpha.51
@agimon-ai/po-browse-tool@0.0.0-alpha.51
⚠ Under reviewMCP server for browser automation using Playwright with profile management, page registry, and multi-browser support
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the inspected runtime operation is browser-related. The telemetry dependency and its effective destination and payload could not be verified, so the source does not support a clean verdict or a confirmed attack.
Static reason
One or more suspicious static signals were detected.
Trigger
Telemetry initialization when the runtime service is created.
Impact
The inspected source does not establish whether telemetry sends sensitive data or where it sends it.
Mechanism
The bundle reads environment-configured telemetry endpoints and delegates telemetry setup to a separate package; the recipient and transmitted data remain unresolved.
AI rationale
The manifest has no install lifecycle hook, and the inspected runtime operation is browser-related. The telemetry dependency and its effective destination and payload could not be verified, so the source does not support a clean verdict or a confirmed attack.
Evidence
package.jsondist/index.cjsdist/index.mjs
Decision evidence
public snapshotAI called this Manual Review at 73.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares runtime dependencies on the configuration and telemetry packages.
- The bundle initializes telemetry through a delegated package, whose behavior could not be verified from inspected source.
- The bundle derives telemetry endpoints from environment settings; the inspected source does not establish the final recipient or transmitted data.
- The package scripts contain no install lifecycle hook.
- The flagged runtime method handles a browser launch request.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
8 flaggeddist/index.cjsView file
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
L3: `);return await h.default.writeFile(m.default.join(n,`manifest.json`),JSON.stringify(r,null,2),{mode:384}),await h.default.writeFile(m.default.join(n,`background.js`),i,{mode:384})...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
Findings
6 High4 Medium5 Low
HighChild Processdist/index.cjs
HighShelldist/index.cjs
HighSame File Env Network Executiondist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighSandbox Evasion Gated Capabilitydist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
MediumDynamic Requiredist/stubs/playwright-test.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/extension/background.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @agimon-ai/po-browse-tool@0.0.0-alpha.51.
See all versions of @agimon-ai/po-browse-tool for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-browse-tool@0.0.0-alpha.51 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.