registry / betterwright / 0.8.2

betterwright@0.8.2

A persistent, policy-guarded Playwright browser for AI agents with network controls, trusted credential filling, proof screenshots, and CAPTCHA helpers.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 342 KB of source, external domains: 127.0.0.1, api.openai.com, api.x.ai, auth.openai.com, auth.x.ai, chatgpt.com, example.com, example.org, site.example

Source & flagged code

3 flagged

bin/betterwright.mjsView file

Lines 9-49javascript

9// betterwright repl run blank-line-separated snippets from stdin

10// betterwright exec <task> run a task with BetterWright's own agent loop

11// betterwright auth --login <p> OAuth sign-in for a model backend (codex|grok)

12// betterwright skill print paste-ready agent instructions

13// betterwright skills [list|show] read on-demand site/provider knowledge packs

14// betterwright mcp serve the MCP stdio server (needs the MCP SDK)

15//

16// run/repl flags: --headed, network flags (--block-private-network,

17// --block-loopback, --allow-host/--block-host), and --stealth (isolated-world

18// driver that evades main-world automation detection; needs patchright-core).

20import fs from "node:fs";

21import { createRequire } from "node:module";

22import path from "node:path";

23import readline from "node:readline";

24import { pathToFileURL } from "node:url";

26import { makeLineReader } from "../src/cli-io.mjs";

27import { doctorReport, resolveCloakDir, resolveCoreDir } from "../src/doctor.mjs";

28import { agentSystemPrompt, BetterWright, NetworkPolicy } from "../src/index.mjs";

30const require = createRequire(import.meta.url);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/betterwright.mjsView on unpkg · L29

32function policyFromFlags(flags) {

33 // Private networks and loopback are open by default; --block-private-network

34 // / --block-loopback re-harden. The --allow-* flags are accepted no-ops.

35 return new NetworkPolicy({

36 allowLoopback: !flags.has("--block-loopback"),

37 allowPrivateNetwork: !flags.has("--block-private-network"),

38 allowHosts: collectValues(process.argv, "--allow-host"),

39 blockHosts: collectValues(process.argv, "--block-host"),

40 });

41}

43function collectValues(argv, flag) {

44 const values = [];

45 for (let i = 0; i < argv.length - 1; i += 1)

46 if (argv[i] === flag) values.push(argv[i + 1]);

47 return values;

48}

•matchType = previous_version_dangerous_delta matchedPackage = betterwright@0.8.1 matchedIdentity = npm:YmV0dGVyd3JpZ2h0:0.8.1 similarity = 0.920 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/betterwright.mjsView on unpkg

src/worker.mjsView file

Lines 76-116javascript

76const MAX_ACTIVE_SECRETS = 200;

78// Chromium applies these mappings below page/network routing. They remain in

79// force even if evaluated code finds a way around the best-effort JS facades.

80// Current Chromium spells the resolver failure sentinel "^NOTFOUND".

81export const METADATA_RESOLVER_RULES = [

Source & flagged code

3 flagged · loading source

bin/betterwright.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code