registry / chromepilot / 0.2.11
chromepilot@0.2.11
ChromePilot CLI
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe manifest has no install lifecycle hooks, and the reviewed CLI and extension behavior aligns with ChromePilot’s stated browser-control purpose. Although the extension includes telemetry sink code, its setup is gated on configuration fields absent from the shipped server response.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI commands run when invoked; extension code runs when Chrome loads the extension and its content script matches a page.
Impact
No unintended credential transfer, account action, or harmful automatic behavior was found in the reviewed paths.
Mechanism
CLI actions use a local server. Extension telemetry checks the local config endpoint and returns without setup unless telemetry is enabled with an endpoint and API key.
AI rationale
The manifest has no install lifecycle hooks, and the reviewed CLI and extension behavior aligns with ChromePilot’s stated browser-control purpose. Although the extension includes telemetry sink code, its setup is gated on configuration fields absent from the shipped server response.
Evidence
package.jsondist/index.jsdist/assets/server/http-api.jsdist/assets/extension/background.jsdist/assets/extension/content.jsdist/assets/extension/manifest.json
Network endpoints1
localhost (local API; extension config request uses port 34568)
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and contains no install, preinstall, or postinstall hook.
- The extension telemetry setup requires an enabled configuration with an endpoint and API key; the shipped server config route returns only error-tracking settings.
- The telemetry startup event contains only the generic `plugin` / `sw.boot` event.
- The extension’s network recording code redacts common credential headers and query parameters.
- The extension’s all-sites access and recording capabilities fit its stated browser-control purpose.
Evidence against
- The extension requests `<all_urls>` access and runs a content script on all URLs.
- The extension bundle contains code for telemetry sinks, though the shipped config route does not activate them.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
8 flaggeddist/index.jsView file
30import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L31: import { spawn } from "node:child_process";
L32: import fs from "node:fs";
High
30import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L31: import { spawn } from "node:child_process";
L32: import fs from "node:fs";
...
L37: initCliLogger({
L38: serverUrl: process.env.CP_PORT
L39: ? `http://localhost:${process.env.CP_PORT}/api`
L40: : `http://localhost:${__cliCfg.port}/api`,
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L30dist/utils/quarantine.jsView file
14* single argv element and never interpreted by a shell — important on
L15: * Windows where `cmd.exe` would re-interpret `%` characters.
L16: */
Findings
1 Critical4 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/commands/doctor.js
HighChild Processdist/index.js
HighShelldist/utils/quarantine.js
HighSame File Env Network Executiondist/index.js
HighCross File Remote Execution Contextdist/commands/start.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/index.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/assets/extension/background.js
LowWeak Cryptodist/version-manager.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to chromepilot@0.2.11.
See all versions of chromepilot for other recorded verdicts.
- Review the evidence and your use of chromepilot@0.2.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.