registry / browser-ipc-cdp / 2.3.0

browser-ipc-cdp@2.3.0

Control remoto de navegadores Chromium (Brave, Chrome, Edge) via IPC + CDP dinamico. Un comando para conectar Claude Code a tu navegador real.

AI Security Review

scanned 1h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `browser-ipc-cdp` or `browser-ipc-cdp-mcp`.

Impact

Potential access to browser sessions and data if the forwarded CDP port is reachable by an untrusted network peer.

Mechanism

local CDP setup, MCP registration, and Windows CDP port forwarding

Rationale

Source establishes a user-invoked dangerous browser-control and port-exposure capability, not covert or install-time malicious behavior. Warn rather than block because no exfiltration, payload staging, stealth persistence, or foreign control-surface mutation without user invocation was found.

Evidence

package.jsonbin/cli.jsbrave_mcp_launcher.jsbrave_ipc.pybrave_cdp.batlib/cdp-proxy.jslib/mcp.jslib/network.jslib/browser.jslib/config.jsREADME.md

Network endpoints2

127.0.0.10.0.0.0

browser-ipc-cdp@2.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code