registry / chromepilot / 0.2.6
chromepilot@0.2.6
ChromePilot CLI
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged execution and browser-control capabilities align with ChromePilot’s stated CLI and extension purpose. The telemetry sink requires configuration that this package’s local API does not return, and the download-and-run command is behind an explicit external install action.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI commands or user-installed Chrome extension activity; the external installer requires an explicit named install command.
Impact
No concrete unauthorized data collection, credential exfiltration, or hidden execution was identified.
Mechanism
The extension’s telemetry setup checks local configuration, but the package’s configuration endpoint does not provide the telemetry settings it requires. Browser control and external CLI installation align with the package’s described functions.
AI rationale
The flagged execution and browser-control capabilities align with ChromePilot’s stated CLI and extension purpose. The telemetry sink requires configuration that this package’s local API does not return, and the download-and-run command is behind an explicit external install action.
Network endpoints2
localhost:34568/api/configget.docker.com (explicit external install command)
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI entry point and declares build, development, typecheck, and test scripts; it has no install lifecycle script.
- The extension’s telemetry setup looks for telemetry.devops in the local server configuration, but this version’s /api/config response provides only error-tracking settings.
- The Docker download-and-run command is part of the named external CLI installer and requires an explicit install command.
Evidence against
- The extension includes broad Chrome permissions for browser control, including cookies, debugger, scripting, and access to all URLs.
- The extension contains usage and log sinks that can send events and log messages to a configured endpoint.
- The CLI runs an automatic update check when most commands are invoked.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
8 flaggeddist/index.jsView file
28import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L29: import { spawn } from "node:child_process";
L30: import fs from "node:fs";
High
28import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L29: import { spawn } from "node:child_process";
L30: import fs from "node:fs";
...
L35: initCliLogger({
L36: serverUrl: process.env.CP_PORT
L37: ? `http://localhost:${process.env.CP_PORT}/api`
L38: : `http://localhost:${__cliCfg.port}/api`,
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L28dist/utils/quarantine.jsView file
14* single argv element and never interpreted by a shell — important on
L15: * Windows where `cmd.exe` would re-interpret `%` characters.
L16: */
Findings
1 Critical4 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/commands/doctor.js
HighChild Processdist/index.js
HighShelldist/utils/quarantine.js
HighSame File Env Network Executiondist/index.js
HighCross File Remote Execution Contextdist/commands/start.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/index.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/assets/extension/background.js
LowWeak Cryptodist/version-manager.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to chromepilot@0.2.6.
See all versions of chromepilot for other recorded verdicts.
- Review the evidence and your use of chromepilot@0.2.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.