registry / @msout/microsoft-webauth / 0.0.5

@msout/microsoft-webauth@0.0.5

Microsoft web authentication module, using playwright to automate the login process and retrieve cookies for authenticated sessions.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time execution or confirmed credential-exfiltration path is present. The package includes a repository-scoped Qwen permission configuration that can authorize broad agent shell actions when that project is opened in Qwen.

Static reason

One or more suspicious static signals were detected.

Trigger

Opening the package root in a Qwen agent session; separately, an explicit `microsoft-webauth login` command runs the browser login flow.

Impact

A Qwen session may be permitted to run allowed Git and Node commands; the CLI stores authenticated browser session state locally.

Mechanism

Qwen Bash permission allowlist plus user-invoked Playwright Microsoft authentication.

Rationale

No concrete malicious execution or exfiltration chain was found in source. The shipped Qwen permission configuration is a real, non-install-time agent control-surface risk and warrants a warning.

Evidence

.qwen/settings.jsonpackage.jsonsrc/index.jssrc/auth.jssrc/config.jssrc/utils/logger.jssrc/utils/retry.jsREADME.mdtest/auth.test.js

Network endpoints2

onenote.cloud.microsoft/en-usoutlook.cloud.microsoft/mail/

@msout/microsoft-webauth@0.0.5

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code