registry / @lyra_wang/chrome-frequent-pages / 0.4.3
@lyra_wang/chrome-frequent-pages@0.4.3
Chrome 高频网页 → 飞书「常用网页」表 + 按分类导出 Chrome 书签（根域名 / 10 天 / >5 次）
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe inspected source implements the package’s stated Chrome history collection and Feishu table workflow. Table writes require the write option, while recurring writes are set up by an optional installer the user runs; no concrete attack behavior was identified.
Static reason
No blocking static signals were detected.
Trigger
The user runs the command, selects the write option, or explicitly runs the optional installer to schedule weekly writes.
Impact
The selected browsing domains may be recorded in the configured table; no unrelated credential transfer or other attack behavior was found in the package source.
Mechanism
The Python program reads a copy of Chrome History, filters pages, and can send aggregated domain records to the configured table through the local command-line client.
AI rationale
The inspected source implements the package’s stated Chrome history collection and Feishu table workflow. Table writes require the write option, while recurring writes are set up by an optional installer the user runs; no concrete attack behavior was identified.
Evidence
bin/cli.jsinstall.shmain.py
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package manifest exposes a command that launches the bundled Python program.
- The Python program reads a copy of Chrome History and filters out non-HTTPS pages and configured exclusions.
- The destination table must be configured; writes occur only when the user selects the write option.
- The optional installer sets up a weekly write task when the user runs it, as its documentation describes.
Evidence against
Behavioral surface
ChildProcess
Source & flagged code
9 flaggedinstall.shView file
•path = install.sh
kind = build_helper
sizeBytes = 1747
magicHex = [redacted]
Medium
package.jsonView file
13"bin": { "chrome-frequent-pages": "bin/cli.js" },
"files": ["main.py", "bin/", "config.example.json", "README.md", "LICENSE", "install.sh"]
Low
Ai Review Evidence
The package manifest exposes a command that launches the bundled Python program.
package.jsonView on unpkg · L13bin/cli.jsView file
7const here = dirname(fileURLToPath(import.meta.url));
const script = join(here, '..', 'main.py');
const child = spawn('/usr/bin/python3', [script, ...process.arg
Findings
1 Medium8 Low
MediumShips Build Helperinstall.sh
LowAi Review Evidencepackage.json
LowAi Review Evidencebin/cli.js
LowAi Review Evidencemain.py
LowAi Review Evidencemain.py
LowAi Review Evidencemain.py
LowAi Review Evidencemain.py
LowAi Review Evidencemain.py
LowAi Review Evidencemain.py
Affected versions and remediation
This report applies to @lyra_wang/chrome-frequent-pages@0.4.3.
See all versions of @lyra_wang/chrome-frequent-pages for other recorded verdicts.
- Review the evidence and your use of @lyra_wang/chrome-frequent-pages@0.4.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.