registry / @agimon-ai/po-browse-tool / 0.0.0-alpha.77
@agimon-ai/po-browse-tool@0.0.0-alpha.77
MCP server for browser automation using Playwright with profile management, page registry, and multi-browser support
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged process execution and network access serve browser lifecycle management and Chrome asset retrieval. The package declares no install hook, and the inspected code did not show an automatic exfiltration or unrelated execution path.
Static reason
One or more suspicious static signals were detected.
Trigger
Browser operations are invoked through the exported library or its tools; no install hook is declared.
Impact
No unauthorized data collection, account action, persistence, or unrelated code execution was identified.
Mechanism
The code manages browser processes and retrieves Chrome for Testing metadata and assets from its official feed.
AI rationale
The flagged process execution and network access serve browser lifecycle management and Chrome asset retrieval. The package declares no install hook, and the inspected code did not show an automatic exfiltration or unrelated execution path.
Evidence
~/.cache/chrome-for-testing
Network endpoints1
googlechromelabs.github.io
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies a browser automation library and declares no install, preinstall, or postinstall hook.
- The `ps` command reads process IDs and parent IDs for browser-process management.
- The hard-coded network endpoint is Google’s Chrome for Testing version feed, used to obtain the browser version and assets.
- The browser snapshot tool is described as returning control metadata while excluding input values and arbitrary page content.
Evidence against
- The scanner flags child-process execution, network APIs, environment access, and command-output handling; the inspected code ties these to browser management and intended browser automation.
- The package exposes code execution in a browser, but that capability is documented as a tool operation and is not shown running automatically at import or install.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
8 flaggeddist/index.cjsView file
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
L3: `);return await l.default.writeFile(m.default.join(n,`manifest.json`),JSON.stringify(r,null,2),{mode:384}),await l.default.writeFile(m.default.join(n,`background.js`),i,{mode:384})...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}as...
Findings
6 High4 Medium5 Low
HighChild Processdist/index.cjs
HighShelldist/index.cjs
HighSame File Env Network Executiondist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighSandbox Evasion Gated Capabilitydist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
MediumDynamic Requiredist/stubs/playwright-test.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/extension/background.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @agimon-ai/po-browse-tool@0.0.0-alpha.77.
See all versions of @agimon-ai/po-browse-tool for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-browse-tool@0.0.0-alpha.77 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.