registry / chromepilot / 0.2.10
chromepilot@0.2.10
ChromePilot CLI
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged process execution is used for the CLI's own self-healing start command or an explicit external install request. The extension sends its token to the local ChromePilot API, and telemetry setup is gated on enabled local configuration with a supplied endpoint.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI commands and browser extension startup; optional telemetry setup requires enabled settings and a supplied endpoint and API key.
Impact
No malicious impact identified from the inspected source.
Mechanism
Browser control and logging use the local ChromePilot API. The shell installer runs only through the explicit external install command.
AI rationale
The flagged process execution is used for the CLI's own self-healing start command or an explicit external install request. The extension sends its token to the local ChromePilot API, and telemetry setup is gated on enabled local configuration with a supplied endpoint.
Network endpoints5
localhost:${port}/apilocalhost:${ft}/api/config${endpoint}/v1/register${endpoint}/usagesink/ingest${endpoint}/logsink/ingest
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package is a ChromePilot CLI, and its browser control requests go to the local ChromePilot API.
- The extension reads telemetry settings from the local server and skips telemetry setup unless devops telemetry is enabled and an endpoint and API key are supplied.
- The browser extension sends its stored token to the configured localhost ChromePilot API.
- The shell installer belongs to the explicit external install command.
Evidence against
- The extension requests broad browser permissions, including cookies, debugger, and access to all URLs, consistent with browser automation capabilities.
- The external install command can run shell commands, including a Docker installer, when explicitly invoked.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinified
Source & flagged code
8 flaggeddist/index.jsView file
30import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L31: import { spawn } from "node:child_process";
L32: import fs from "node:fs";
High
30import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L31: import { spawn } from "node:child_process";
L32: import fs from "node:fs";
...
L37: initCliLogger({
L38: serverUrl: process.env.CP_PORT
L39: ? `http://localhost:${process.env.CP_PORT}/api`
L40: : `http://localhost:${__cliCfg.port}/api`,
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L30dist/utils/quarantine.jsView file
14* single argv element and never interpreted by a shell — important on
L15: * Windows where `cmd.exe` would re-interpret `%` characters.
L16: */
Findings
1 Critical4 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/commands/doctor.js
HighChild Processdist/index.js
HighShelldist/utils/quarantine.js
HighSame File Env Network Executiondist/index.js
HighCross File Remote Execution Contextdist/commands/start.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/index.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/assets/extension/background.js
LowWeak Cryptodist/version-manager.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to chromepilot@0.2.10.
See all versions of chromepilot for other recorded verdicts.
- Review the evidence and your use of chromepilot@0.2.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.