@agimon-ai/po-browse-tool@0.0.0-alpha.72
MCP server for browser automation using Playwright with profile management, page registry, and multi-browser support
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe process and network indicators fit the package’s browser automation purpose, and there are no install hooks or concrete credential exfiltration paths. However, runtime creation initializes telemetry by default without documenting it in the package README, so this warrants a warning.
Static reason
One or more suspicious static signals were detected.
Trigger
Application code calls createBrowseRuntime.
Impact
Runtime telemetry may be exported without the application developer being told in this package’s README. The destination is resolved by a dependency and was not established from the available source.
Mechanism
The runtime constructs a telemetry service that enables logs by default and initializes a telemetry delegate with traces and logs enabled; OTEL_SDK_DISABLED can turn it off.
AI rationale
The process and network indicators fit the package’s browser automation purpose, and there are no install hooks or concrete credential exfiltration paths. However, runtime creation initializes telemetry by default without documenting it in the package README, so this warrants a warning.
Evidence
dist/index.cjsREADME.md
Decision evidence
public snapshotAI called this Suspicious at 79.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Creating the browser runtime initializes a telemetry service that enables logs by default unless OTEL_SDK_DISABLED is set.
- The telemetry service calls createNodeTelemetry with traces and logs enabled when no local trace exporter is supplied.
- The README describes the package as a browser automation runtime and MCP server but does not mention telemetry.
Evidence against
- The manifest has no install lifecycle scripts; its entry points expose the runtime as a library.
- The package’s documented purpose is browser automation, which accounts for its process and network capabilities.
- The code supports disabling telemetry with OTEL_SDK_DISABLED; no unrelated collector host or credential transfer was identified.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
8 flaggeddist/index.cjsView file
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
L3: `);return await l.default.writeFile(m.default.join(n,`manifest.json`),JSON.stringify(r,null,2),{mode:384}),await l.default.writeFile(m.default.join(n,`background.js`),i,{mode:384})...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
Findings
6 High4 Medium5 Low
HighChild Processdist/index.cjs
HighShelldist/index.cjs
HighSame File Env Network Executiondist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighSandbox Evasion Gated Capabilitydist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
MediumDynamic Requiredist/stubs/playwright-test.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/extension/background.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @agimon-ai/po-browse-tool@0.0.0-alpha.72.
See all versions of @agimon-ai/po-browse-tool for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-browse-tool@0.0.0-alpha.72 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.