registry / chromepilot / 0.2.12
chromepilot@0.2.12
ChromePilot CLI
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged shell execution is part of an explicit external CLI installation command, while extension telemetry requires an enabled local configuration and uses its configured destination. The inspected automatic startup paths did not show credential theft or unrelated execution.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI startup, extension service-worker startup, or explicit user commands.
Impact
No malicious behavior identified. Configured telemetry sends install IDs, usage events, and log records to the configured endpoint.
Mechanism
The extension gates usage and log reporting on enabled local telemetry configuration; shell installation is available through an explicit CLI action, and doctor self-healing requires an option.
AI rationale
The flagged shell execution is part of an explicit external CLI installation command, while extension telemetry requires an enabled local configuration and uses its configured destination. The inspected automatic startup paths did not show credential theft or unrelated execution.
Network endpoints5
localhost:34568/api/config${configured telemetry endpoint}/v1/register${configured telemetry endpoint}/usagesink/ingest${configured telemetry endpoint}/logsink/ingestlocalhost:${CP_PORT or configured port}/api
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI entry point at dist/index.js; no install lifecycle hook is declared in the inspected metadata.
- Extension telemetry starts only when local config sets telemetry.devops.enabled and provides an endpoint and API key.
- The extension telemetry payload contains install IDs and usage events; its destination comes from local configuration.
- CLI logging sends to localhost using the configured port and CP_TOKEN.
- External CLI installation runs only through the explicit external install action.
- Doctor self-healing requires the explicit --self-heal option.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
8 flaggeddist/index.jsView file
32import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L33: import { spawn } from "node:child_process";
L34: import fs from "node:fs";
High
32import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L33: import { spawn } from "node:child_process";
L34: import fs from "node:fs";
...
L39: initCliLogger({
L40: serverUrl: process.env.CP_PORT
L41: ? `http://localhost:${process.env.CP_PORT}/api`
L42: : `http://localhost:${__cliCfg.port}/api`,
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L3232Cross-file remote execution chain: dist/index.js spawns dist/assets/extension/logger.js; helper contains network access plus dynamic code execution.
L32: import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L33: import { spawn } from "node:child_process";
L34: import fs from "node:fs";
...
L39: initCliLogger({
L40: serverUrl: process.env.CP_PORT
L41: ? `http://localhost:${process.env.CP_PORT}/api`
L42: : `http://localhost:${__cliCfg.port}/api`,
...
L51: let currentCommandStartTs = 0;
L52: function logToStderr(level, message) {
L53: process.stderr.write(message + "\n");
L54: try {
...
L153: const h = await fetch(`http://localhost:${loadConfig().port}/api/health`, { signal: AbortSignal.timeout(3000) });
Findings
1 Critical4 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/commands/doctor.js
HighChild Processdist/index.js
HighShelldist/utils/spawn.js
HighSame File Env Network Executiondist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/index.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/assets/extension/background.js
LowWeak Cryptodist/version-manager.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to chromepilot@0.2.12.
See all versions of chromepilot for other recorded verdicts.
- Review the evidence and your use of chromepilot@0.2.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.