@taole/dd-playwright@0.1.5
Standalone stdio MCP & CLI: Playwright browser automation + isolated whistle proxy + diandian account storageState injection
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe dashboard has a concrete credential exposure risk: it listens on all interfaces and returns saved account credentials without an apparent authentication check. Because exposure requires an explicit dashboard command and no publisher-directed transfer is established, this warrants a warning rather than a publish block.
Decision evidence
public snapshot- The package exposes a CLI, and its dashboard is started through an explicit command.
- The dashboard listens on all network interfaces.
- The accounts endpoint returns both the account list and active account without visible authentication.
- Account records include cookies, and active account data includes saved browser state.
- Dashboard JSON responses allow requests from any web origin.
- The utility request wrapper returns an unsupported error for internal requests.
- The certificate helper looks up a cached certificate for the requested domain and creates a self-signed certificate if none is cached.
- Starting the dashboard requires an explicit CLI command.
Source & flagged code
4 flaggedPackage source references child process execution.
src/server/daemon.mjsView on unpkg · L1Package source invokes a package manager install command at runtime.
src/browser-check.mjsView on unpkg · L81Findings
Affected versions and remediation
This report applies to @taole/dd-playwright@0.1.5.
See all versions of @taole/dd-playwright for other recorded verdicts.
- Review the evidence and your use of @taole/dd-playwright@0.1.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.