registry / betterwright / 0.4.0

betterwright@0.4.0

A persistent, policy-guarded Playwright browser for AI agents with network controls, trusted credential filling, proof screenshots, and CAPTCHA helpers.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 201 KB of source, external domains: 127.0.0.1, example.com, example.org

Source & flagged code

4 flagged

bin/betterwright.mjsView file

Lines 1-37javascript

1#!/usr/bin/env node

2// BetterWright command-line interface (Node).

3//

4// betterwright setup install the managed Cloak browser

5// betterwright doctor report runtime readiness

6// betterwright run <file|-|-c> execute a Playwright snippet

7// betterwright repl run blank-line-separated snippets from stdin

9import { spawnSync } from "node:child_process";

Source & flagged code

4 flagged · loading source

bin/betterwright.mjsView file

8L9: import { spawnSync } from "node:child_process"; L10: import fs from "node:fs";

High

Child Process

Package source references child process execution.

bin/betterwright.mjsView on unpkg · L8

17L18: const require = createRequire(import.meta.url); L19: const PINNED_PLAYWRIGHT_VERSION = "1.61.1";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/betterwright.mjsView on unpkg · L17

src/chrome.mjsView file

59const configuredHome = String( L60: options.home || process.env.BETTERWRIGHT_HOME || path.join(os.homedir(), ".betterwright"), L61: ); L62: const port = Math.max(1024, Math.min(Number(options.port) || DEFAULT_CDP_PORT, 65535)); L63: const endpoint = `http://127.0.0.1:${port}`; L64: if (await endpointReady(endpoint)) { ... L71: fs.mkdirSync(profileDir, { recursive: true, mode: 0o700 }); L72: const child = spawn( L73: executable,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/chrome.mjsView on unpkg · L59

src/worker.mjsView file

11import crypto from "node:crypto"; L12: import dns from "node:dns/promises"; L13: import fs from "node:fs"; ... L45: L46: const playwrightCoreDir = process.env.BETTERWRIGHT_PLAYWRIGHT_CORE_PATH || ""; L47: const playwrightModule = playwrightCoreDir ... L117: function send(message) { L118: process.stdout.write(`${JSON.stringify(message)}\n`); L119: } ... L146: L147: function mkdirPrivate(dir) { L148: fs.mkdirSync(dir, { recursive: true, mode: 0o700 });

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/worker.mjsView on unpkg · L11

Findings

4 High4 Medium5 Low

HighChild Processbin/betterwright.mjs

HighShell

HighSame File Env Network Executionsrc/chrome.mjs

HighCloud Metadata Accesssrc/worker.mjs

MediumDynamic Requirebin/betterwright.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

src/chrome.mjsView file

Lines 39-79javascript

39 const requested = String(explicit || "").trim();

40 if (requested && fs.existsSync(requested)) return requested;

41 return chromeExecutableCandidates().find((candidate) => fs.existsSync(candidate)) || null;

42}

44async function endpointReady(endpoint) {

45 try {

46 const response = await fetch(`${endpoint}/json/version`, {

47 signal: AbortSignal.timeout(750),

48 });

49 if (!response.ok) return false;

50 const payload = await response.json();

51 return Boolean(payload?.webSocketDebuggerUrl);

52 } catch {

53 return false;

54 }

55}

57/** Start (or reuse) a dedicated, persistent Google Chrome CDP profile. */

58export async function ensureChromeCdp(options = {}) {

59 const configuredHome = String(

60 options.home || process.env.BETTERWRIGHT_HOME || path.join(os.homedir(), ".betterwright"),

61 );

62 const port = Math.max(1024, Math.min(Number(options.port) || DEFAULT_CDP_PORT, 65535));

63 const endpoint = `http://127.0.0.1:${port}`;

64 if (await endpointReady(endpoint)) {

65 return { endpoint, profileDir: path.join(configuredHome, "chrome-cdp-profile"), started: false };

66 }

68 const executable = findChromeExecutable(options.executablePath);

69 if (!executable) throw new Error("Google Chrome is not installed.");

70 const profileDir = path.join(configuredHome, "chrome-cdp-profile");

71 fs.mkdirSync(profileDir, { recursive: true, mode: 0o700 });

72 const child = spawn(

73 executable,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/chrome.mjsView on unpkg · L59

74 [

75 `--remote-debugging-port=${port}`,

76 "--remote-debugging-address=127.0.0.1",

77 `--user-data-dir=${profileDir}`,

78 "--no-first-run",

79 "--no-default-browser-check",

src/worker.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

3// Long-lived, Playwright-native browser worker for betterwright.

4//

5// The model writes normal Playwright JavaScript, but it never receives Node's

6// process, module loader, filesystem, or the route APIs that protect the host's

7// network policy. This is defense in depth, not a claim that node:vm is a

8// security boundary. The non-removable metadata endpoint floor is installed

9// on Chromium's command line before any model code can run.

11import crypto from "node:crypto";

12import dns from "node:dns/promises";

13import fs from "node:fs";

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/worker.mjsView on unpkg · L11

14import net from "node:net";

15import os from "node:os";

16import path from "node:path";

17import readline from "node:readline";

18import { pathToFileURL } from "node:url";

19import vm from "node:vm";

21import {

22 detectBotChallenge,

23 isPublicSearchNavigation,

24 PUBLIC_SEARCH_BLOCK_ADVICE,

25} from "./challenges.mjs";

26import {

27 assertProfileNotNewer,

28 cloakBinaryInfo,

29 launchCloakPersistentContext,

30 managedCloakViewport,

31} from "./cloak.mjs";