registry / @cevek/screentest / 0.4.0

@cevek/screentest@0.4.0

Local desktop tool for visual screenshot-test review — CLI, runner helpers, and review UI shipped as a single package.

AI Security Review

scanned 27d ago · by lpm-firewall-ai

Explicit screenshot review and repair operations can send PNG screenshots to a configured remote Worker. Test setup also modifies only the package cache and configured snapshot file.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user accepts a screenshot in the review UI or runs the repair command; the global setup runs when configured by Vitest.

Impact

Screenshot contents may be disclosed to the configured Worker; no automatic install-time execution was found.

Mechanism

Remote screenshot upload with a configured bearer token.

AI rationale

No install hook, hidden command execution, credential harvesting, or arbitrary command-output exfiltration was found. The package nevertheless has a concrete remote screenshot-upload capability with a default third-party endpoint, so it should be warned rather than marked clean under incomplete static coverage.

Evidence

dist/index.jsdist/global-setup.jsnode_modules/.cache/screentest/actualnode_modules/.cache/screentest/doc.jsontests/snapshot.json

Network endpoints1

screentests.x-cevek.workers.dev

Decision evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The CLI can upload local screenshot PNG bytes with a bearer token to a remote Worker.
The remote Worker has a built-in default endpoint and token fallback.
The exported Vitest setup clears a project cache and can launch the package CLI during test runs.

Evidence against

package.json has only a prepublishOnly script, so registry installation does not run package code.
The upload path is part of screenshot acceptance and repair commands, not an install hook.
Child-process use is limited to the package CLI, Git metadata lookup, Firefox, and Docker commands.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 1015 KB of source, external domains: 127.0.0.1, json-schema.org, react.dev, screentests.x-cevek.workers.dev, www.w3.org

Source & flagged code

6 flagged

dist/global-setup.jsView file

Lines 1-21javascript

1// src/runner/global-setup.ts

2import { spawn } from "child_process";

3import { promises as fs2 } from "fs";

High

Child Process

Package source references child process execution.

dist/global-setup.jsView on unpkg · L1

4import { createConnection } from "net";

5import { dirname, join as join3 } from "path";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/global-setup.jsView on unpkg · L1

6import { fileURLToPath } from "url";

7import { firefox } from "playwright";

9// src/doc-builder.ts

10import { spawnSync } from "child_process";

11import { promises as fs } from "fs";

12import { join, relative, sep } from "path";

14// src/hash.ts

15import { createHash } from "crypto";

16function sha256Hex(buf) {

17 return createHash("sha256").update(buf).digest("hex");

18}

20// src/doc-builder.ts

21function detectBranch(projectRoot) {

•matchType = previous_version_dangerous_delta matchedPackage = @cevek/screentest@0.3.7 matchedIdentity = npm:QGNldmVrL3NjcmVlbnRlc3Q:0.3.7 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/global-setup.jsView on unpkg

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/global-setup.jsView on unpkg

dist/index.jsView file

15462} L15463: process.stdout.write( L15464: ` ... L15466: 1. screentest serve # one-time: starts the shared Firefox daemon L15467: 2. APP_URL=http://localhost:<port> \\ L15468: npx vitest run --config vitest.screentest.config.ts ... L15477: // src/daemon.ts L15478: import { spawn as spawn2, spawnSync as spawnSync2 } from "child_process"; L15479: import { existsSync as existsSync4 } from "fs";

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L15462

15462Trigger-reachable command-output exfiltration chain: scripts.start -> dist/index.js L15462: } L15463: process.stdout.write( L15464: ` ... L15466: 1. screentest serve # one-time: starts the shared Firefox daemon L15467: 2. APP_URL=http://localhost:<port> \\ L15468: npx vitest run --config vitest.screentest.config.ts ... L15477: // src/daemon.ts L15478: import { spawn as spawn2, spawnSync as spawnSync2 } from "child_process"; L15479: import { existsSync as existsSync4 } from "fs";

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L15462

Source & flagged code

6 flagged · loading source

dist/global-setup.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/global-setup.jsView on unpkg

1// src/runner/global-setup.ts L2: import { spawn } from "child_process"; L3: import { promises as fs2 } from "fs";

High

Child Process

Package source references child process execution.

dist/global-setup.jsView on unpkg · L1

1Cross-file remote execution chain: dist/global-setup.js spawns dist/index.js; helper contains network access plus dynamic code execution. L1: // src/runner/global-setup.ts L2: import { spawn } from "child_process"; L3: import { promises as fs2 } from "fs"; L4: import { createConnection } from "net"; L5: import { dirname, join as join3 } from "path"; ... L26: if (r.status !== 0) return null; L27: const branch = r.stdout.trim(); L28: return branch || null; ... L34: try { L35: return JSON.parse(await fs.readFile(snapshotFile, "utf8")); L36: } catch { ... L146: const deletedSummary = detectDeletions ? `deleted: ${summary.deleted}, ` : "";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/global-setup.jsView on unpkg · L1

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/global-setup.jsView on unpkg

dist/index.jsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L15462

High

Trigger Reachable Command Output Exfiltration

A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.

dist/index.jsView on unpkg · L15462

Findings

1 Critical6 High3 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/global-setup.js

HighChild Processdist/global-setup.js

HighShell

HighCommand Output Exfiltrationdist/index.js

HighCross File Remote Execution Contextdist/global-setup.js

HighTrigger Reachable Command Output Exfiltrationdist/index.js

HighSemantic Analysis Limiteddist/global-setup.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Affected versions and remediation

This report applies to @cevek/screentest@0.4.0.

See version security history for other recorded verdicts.

Review the evidence and your use of @cevek/screentest@0.4.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 22:43:37.417Z (UTC).