registry / @agimon-ai/po-browse-tool / 0.30.14-alpha.0
@agimon-ai/po-browse-tool@0.30.14-alpha.0
MCP server for browser automation using Playwright with profile management, page registry, and multi-browser support
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe flagged command and process APIs serve runtime browser/server management, and the observed network request retrieves Chrome for Testing metadata. The manifest has no install lifecycle hook, and the inspected source does not establish command-output exfiltration.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes browser or server-management functionality through the package.
Impact
No confirmed attack surface was established in the inspected behavior.
Mechanism
The runtime starts the supplied server command and checks whether its URL responds; browser process management reads local process listings.
AI rationale
The flagged command and process APIs serve runtime browser/server management, and the observed network request retrieves Chrome for Testing metadata. The manifest has no install lifecycle hook, and the inspected source does not establish command-output exfiltration.
Network endpoints1
googlechromelabs.github.io
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the library and CLI entrypoints and has no install lifecycle hook.
- The CJS and ESM entrypoints import the corresponding streamable HTTP implementation bundles.
- The flagged bundle's shell process starts a configured server command and checks its URL for readiness.
- The Chrome for Testing request downloads browser version metadata from Google's published feed.
- The CJS bundle's process listing supports browser process management; inspected code shows no command-output transfer to a collector.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
8 flaggeddist/streamable-http-CHTc89n8.mjsView file
1import{a as e,c as t,h as n,p as r,s as i,t as a,v as o,y as s}from"./playwright-test-DNBba0cT.mjs";import"reflect-metadata/lite";import{DEFAULT_PORT_RANGE as c,PortRegistryService...
L2: `)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}fu...
High
Child Process
Package source references child process execution.
dist/streamable-http-CHTc89n8.mjsView on unpkg · L12`)){let[t,r]=n.trim().split(/\s+/,2);if(!t||!r)continue;let i=Number(t),a=Number(r);if(Number.isNaN(i)||Number.isNaN(a))continue;let o=e.get(a);o?o.push(i):e.set(a,[i])}return e}fu...
L3: `).filter(Boolean).map(Number).filter(e=>!Number.isNaN(e))}catch{n=mt().get(e)??[]}for(let e of n)t.push(...ht(e)),t.push(e)}catch{}return t}function gt(e){try{return process.kill(...
L4: `);return T.writeFileSync(v.join(n,`manifest.json`),JSON.stringify(r,null,2),{mode:384}),T.writeFileSync(v.join(n,`background.js`),i,{mode:384}),n}function gn(e){if(!(!e||!v.basena...
High
Findings
1 Critical5 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/streamable-http-CfhFkPgA.cjs
HighChild Processdist/streamable-http-CHTc89n8.mjs
HighShelldist/streamable-http-CHTc89n8.mjs
HighSame File Env Network Executiondist/streamable-http-CHTc89n8.mjs
HighCommand Output Exfiltrationdist/streamable-http-CHTc89n8.mjs
HighTrigger Reachable Command Output Exfiltrationdist/streamable-http-CHTc89n8.mjs
MediumDynamic Requiredist/stubs/playwright-test.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/extension/background.js
Affected versions and remediation
This report applies to @agimon-ai/po-browse-tool@0.30.14-alpha.0.
See all versions of @agimon-ai/po-browse-tool for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-browse-tool@0.30.14-alpha.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.