registry / @agimon-ai/po-browse-tool / 0.0.0-alpha.53
@agimon-ai/po-browse-tool@0.0.0-alpha.53
⚠ Under reviewMCP server for browser automation using Playwright with profile management, page registry, and multi-browser support
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe inspected entrypoints and package manifest do not establish malicious behavior, and the command execution found is tied to a configured test workflow. Selected dependency source was unavailable, so the package cannot be cleared as clean from this inspection alone.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A caller invokes the browser test workflow with a web-server command configured.
Impact
The command runs with the local user's privileges; no unauthorized data transfer was established. Some selected dependency source remained unavailable for review.
Mechanism
The runtime starts the configured command and buffers up to a limited amount of its standard output and error.
AI rationale
The inspected entrypoints and package manifest do not establish malicious behavior, and the command execution found is tied to a configured test workflow. Selected dependency source was unavailable, so the package cannot be cleared as clean from this inspection alone.
Evidence
package.jsondist/index.cjsdist/index.mjs
Decision evidence
public snapshotAI called this Manual Review at 79.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package exports CommonJS and ESM runtime entrypoints and declares dependencies used by them.
- The bound-browser runtime requires an explicit profile and checks requested browser operations against that profile.
- The server can start a configured web-server command and capture its output; these excerpts do not show output being sent to a publisher-selected recipient.
- A selected dependency source path was unavailable during inspection, leaving part of the runtime behavior unresolved.
Evidence against
- The manifest has no install lifecycle script, and the inspected runtime excerpts do not establish an automatic command-output transfer or other concrete attack.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinified
Source & flagged code
9 flaggeddist/index.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @agimon-ai/po-browse-tool@0.0.0-alpha.52
matchedIdentity = npm:[redacted]:0.0.0-alpha.52
similarity = 0.857
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.cjsView on unpkg1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
L3: `);return await l.default.writeFile(m.default.join(n,`manifest.json`),JSON.stringify(r,null,2),{mode:384}),await l.default.writeFile(m.default.join(n,`background.js`),i,{mode:384})...
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/index.cjs
HighShelldist/index.cjs
HighSame File Env Network Executiondist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighSandbox Evasion Gated Capabilitydist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
MediumDynamic Requiredist/stubs/playwright-test.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/extension/background.js
Affected versions and remediation
This report applies to @agimon-ai/po-browse-tool@0.0.0-alpha.53.
See all versions of @agimon-ai/po-browse-tool for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-browse-tool@0.0.0-alpha.53 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.