registry / @roll-agent/browser-use-agent / 0.23.0

@roll-agent/browser-use-agent@0.23.0

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalNetworkShell

Supply chain

HighEntropyStringsMinifiedTrivialUrlStrings

Manifest

NoLicense

scanned 1 file(s), 376 KB of source, external domains: huajune.duliday.com, www.w3.org, www.yupao.com, www.zhipin.com

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-2javascript

1import{defineAgent as e,createAgentLogger as t}from"@roll-agent/sdk";import{defineTool as n}from"@roll-agent/sdk";import{z as r}from"zod";import{createAgentLogger as a}from"@roll-agent/sdk";import"@roll-agent/browser";import{AsyncLocalStorage as o}from"node:async_hooks";import{access as i}from"node:fs/promises";import{constants as s}from"node:fs";import{homedir as c}from"node:os";import{join as l}from"node:path";import{createHash as d}from"node:crypto";import{StructuredToolError as u}from"@roll-agent/sdk";import{BrowserContextManager as m,BrowserRuntime as p,BrowserRuntimeConfigSchema as g,pro ...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L1

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1

Long lines were clipped for display.

Source & flagged code

3 flagged · loading source

dist/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code