registry / @agimon-ai/po-browse-tool / 0.0.0-alpha.63
@agimon-ai/po-browse-tool@0.0.0-alpha.63
MCP server for browser automation using Playwright with profile management, page registry, and multi-browser support
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe scanner’s process and network signals correspond to browser lifecycle and configurable telemetry code in the inspected entrypoints. The manifest has no install lifecycle hook, and the prepared local dependency sources inspected are ordinary registry and validation helpers.
Static reason
One or more suspicious static signals were detected.
Trigger
A consumer imports the package or invokes its browser tools.
Impact
No hidden credential transfer, command-output exfiltration, or unrelated network recipient was established.
Mechanism
The package validates a bound browser profile, starts browser processes, and serves browser tasks; telemetry destinations come from configuration.
AI rationale
The scanner’s process and network signals correspond to browser lifecycle and configurable telemetry code in the inspected entrypoints. The manifest has no install lifecycle hook, and the prepared local dependency sources inspected are ordinary registry and validation helpers.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package entrypoints expose the CommonJS and ES module builds; its scripts are for building, development, testing, type checking, and linting.
- The flagged runtime operation validates the requested profile and browser type before launching the bound browser.
- Process execution is used to inspect process relationships and start Chrome with browser arguments; no shell command or unrelated output transfer was identified in those paths.
- The inspected prepared dependencies provide port registry, process registry, and schema validation exports; their manifests show development scripts rather than install hooks.
- Telemetry endpoints are selected from OpenTelemetry environment settings or package-specific endpoint settings; no fixed unrelated collector was identified.
- The Playwright test stub statically re-exports test bindings, and the extension entry begins with browser link and telemetry code.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
8 flaggeddist/index.cjsView file
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
L3: `);return await l.default.writeFile(m.default.join(n,`manifest.json`),JSON.stringify(r,null,2),{mode:384}),await l.default.writeFile(m.default.join(n,`background.js`),i,{mode:384})...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
Findings
6 High4 Medium5 Low
HighChild Processdist/index.cjs
HighShelldist/index.cjs
HighSame File Env Network Executiondist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighSandbox Evasion Gated Capabilitydist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
MediumDynamic Requiredist/stubs/playwright-test.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/extension/background.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @agimon-ai/po-browse-tool@0.0.0-alpha.63.
See all versions of @agimon-ai/po-browse-tool for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-browse-tool@0.0.0-alpha.63 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.