registry / @agimon-ai/po-browse-tool / 0.0.0-alpha.65
@agimon-ai/po-browse-tool@0.0.0-alpha.65
MCP server for browser automation using Playwright with profile management, page registry, and multi-browser support
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe flagged process and network primitives inspected are used for browser management and related product behavior, and no concrete attack path was found. The snapshot includes metadata-only dependencies, so this review does not certify those dependency sources.
Static reason
One or more suspicious static signals were detected.
Trigger
A caller invokes a browser tool or launches a browser session.
Impact
The API can perform actions in the caller's browser session, but the inspected source did not establish covert execution or data transfer.
Mechanism
The runtime checks that browser operations use the bound profile and browser instance; caller-provided code is executed in the browser context.
AI rationale
The flagged process and network primitives inspected are used for browser management and related product behavior, and no concrete attack path was found. The snapshot includes metadata-only dependencies, so this review does not certify those dependency sources.
Decision evidence
public snapshotAI called this Clean at 78.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the reviewed CommonJS and ESM entrypoints and declares no lifecycle scripts.
- Both entrypoints bind browser operations to the configured profile and browser instance; the Playwright tool accepts caller-provided browser code.
- The inspected registry dependencies expose port registry, process registry, and schema validation functionality; their manifests declare no lifecycle hooks.
Evidence against
- The package intentionally supports browser automation and user-supplied browser code, which can perform actions within the browser session.
- Some declared dependencies, including telemetry-related packages, were available only as metadata in this snapshot; their source was not reviewed.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
8 flaggeddist/index.cjsView file
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
L3: `);return await l.default.writeFile(m.default.join(n,`manifest.json`),JSON.stringify(r,null,2),{mode:384}),await l.default.writeFile(m.default.join(n,`background.js`),i,{mode:384})...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
Findings
6 High4 Medium5 Low
HighChild Processdist/index.cjs
HighShelldist/index.cjs
HighSame File Env Network Executiondist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighSandbox Evasion Gated Capabilitydist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
MediumDynamic Requiredist/stubs/playwright-test.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/extension/background.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @agimon-ai/po-browse-tool@0.0.0-alpha.65.
See all versions of @agimon-ai/po-browse-tool for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-browse-tool@0.0.0-alpha.65 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.