registry / betterwright / 0.4.0

betterwright@0.4.0

A persistent, policy-guarded Playwright browser for AI agents with network controls, trusted credential filling, proof screenshots, and CAPTCHA helpers.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 201 KB of source, external domains: 127.0.0.1, example.com, example.org

Source & flagged code

4 flagged

bin/betterwright.mjsView file

Lines 1-37javascript

1#!/usr/bin/env node

2// BetterWright command-line interface (Node).

3//

4// betterwright setup install the managed Cloak browser

5// betterwright doctor report runtime readiness

6// betterwright run <file|-|-c> execute a Playwright snippet

7// betterwright repl run blank-line-separated snippets from stdin

9import { spawnSync } from "node:child_process";

10import fs from "node:fs";

High

Child Process

Package source references child process execution.

bin/betterwright.mjsView on unpkg · L8

11import { createRequire } from "node:module";

12import path from "node:path";

13import readline from "node:readline";

14import { fileURLToPath, pathToFileURL } from "node:url";

16import { BetterWright, NetworkPolicy } from "../src/index.mjs";

18const require = createRequire(import.meta.url);

19const PINNED_PLAYWRIGHT_VERSION = "1.61.1";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/betterwright.mjsView on unpkg · L17

20const PINNED_CLOAKBROWSER_VERSION = "0.4.10";

22function resolveCoreDir() {

23 const override = (process.env.BETTERWRIGHT_PLAYWRIGHT_CORE_PATH || "").trim();

24 if (override && fs.existsSync(path.join(override, "package.json"))) return override;

25 try {

26 return path.dirname(require.resolve("playwright-core/package.json"));

27 } catch {

28 return null;

29 }

30}

32function resolveCloakDir() {

33 const override = (process.env.BETTERWRIGHT_CLOAKBROWSER_PATH || "").trim();

34 if (override && fs.existsSync(path.join(override, "package.json"))) return override;

35 try {

36 return path.resolve(

37 path.dirname(fileURLToPath(import.meta.resolve("cloakbrowser"))),

src/chrome.mjsView file

Lines 39-79javascript

39 const requested = String(explicit || "").trim();

40 if (requested && fs.existsSync(requested)) return requested;

41 return chromeExecutableCandidates().find((candidate) => fs.existsSync(candidate))

src/worker.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

3// Long-lived, Playwright-native browser worker for betterwright.

4//

5// The model writes normal Playwright JavaScript, but it never receives Node's

6// process, module loader, filesystem, or the route APIs that protect the host's

7// network policy. This is defense in depth, not a claim that node:vm is a

8// security boundary. The non-removable metadata endpoint floor is installed

9// on Chromium's command line before any model code can run.

11import crypto from "node:crypto"

Source & flagged code

4 flagged · loading source

bin/betterwright.mjsView file

8L9: import { spawnSync } from "node:child_process"; L10: import fs from "node:fs";

High

Child Process

Package source references child process execution.

bin/betterwright.mjsView on unpkg · L8

17L18: const require = createRequire(import.meta.url); L19: const PINNED_PLAYWRIGHT_VERSION = "1.61.1";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/betterwright.mjsView on unpkg · L17

src/chrome.mjsView file

59const configuredHome = String( L60: options.home || process.env.BETTERWRIGHT_HOME || path.join(os.homedir(), ".betterwright"), L61: ); L62: const port = Math.max(1024, Math.min(Number(options.port) || DEFAULT_CDP_PORT, 65535)); L63: const endpoint = `http://127.0.0.1:${port}`; L64: if (await endpointReady(endpoint)) { ... L71: fs.mkdirSync(profileDir, { recursive: true, mode: 0o700 }); L72: const child = spawn( L73: executable,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/chrome.mjsView on unpkg · L59

src/worker.mjsView file

11import crypto from "node:crypto"; L12: import dns from "node:dns/promises"; L13: import fs from "node:fs"; ... L45: L46: const playwrightCoreDir = process.env.BETTERWRIGHT_PLAYWRIGHT_CORE_PATH || ""; L47: const playwrightModule = playwrightCoreDir ... L117: function send(message) { L118: process.stdout.write(`${JSON.stringify(message)}\n`); L119: } ... L146: L147: function mkdirPrivate(dir) { L148: fs.mkdirSync(dir, { recursive: true, mode: 0o700 });

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/worker.mjsView on unpkg · L11

Findings

4 High4 Medium5 Low

HighChild Processbin/betterwright.mjs

HighShell

HighSame File Env Network Executionsrc/chrome.mjs

HighCloud Metadata Accesssrc/worker.mjs

MediumDynamic Requirebin/betterwright.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

bin/betterwright.mjsView file

Lines 1-37javascript

1#!/usr/bin/env node

2// BetterWright command-line interface (Node).

3//

4// betterwright setup install the managed Cloak browser

5// betterwright doctor report runtime readiness

6// betterwright run <file|-|-c> execute a Playwright snippet

7// betterwright repl run blank-line-separated snippets from stdin

9import { spawnSync } from "node:child_process";

10import fs from "node:fs";

High

Child Process

Package source references child process execution.

bin/betterwright.mjsView on unpkg · L8

11import { createRequire } from "node:module";

12import path from "node:path";

13import readline from "node:readline";

14import { fileURLToPath, pathToFileURL } from "node:url";

16import { BetterWright, NetworkPolicy } from "../src/index.mjs";

18const require = createRequire(import.meta.url);

19const PINNED_PLAYWRIGHT_VERSION = "1.61.1";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/betterwright.mjsView on unpkg · L17

20const PINNED_CLOAKBROWSER_VERSION = "0.4.10";

22function resolveCoreDir() {

23 const override = (process.env.BETTERWRIGHT_PLAYWRIGHT_CORE_PATH || "").trim();

24 if (override && fs.existsSync(path.join(override, "package.json"))) return override;

25 try {

26 return path.dirname(require.resolve("playwright-core/package.json"));

27 } catch {

28 return null;

29 }

30}

32function resolveCloakDir() {

33 const override = (process.env.BETTERWRIGHT_CLOAKBROWSER_PATH || "").trim();

34 if (override && fs.existsSync(path.join(override, "package.json"))) return override;

35 try {

36 return path.resolve(

37 path.dirname(fileURLToPath(import.meta.resolve("cloakbrowser"))),

src/chrome.mjsView file

Lines 39-79javascript

39 const requested = String(explicit || "").trim();

40 if (requested && fs.existsSync(requested)) return requested;

41 return chromeExecutableCandidates().find((candidate) => fs.existsSync(candidate))

src/worker.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

3// Long-lived, Playwright-native browser worker for betterwright.

4//

5// The model writes normal Playwright JavaScript, but it never receives Node's

6// process, module loader, filesystem, or the route APIs that protect the host's

7// network policy. This is defense in depth, not a claim that node:vm is a

8// security boundary. The non-removable metadata endpoint floor is installed

9// on Chromium's command line before any model code can run.

11import crypto from "node:crypto"