chromepilot@0.2.8
ChromePilot CLI
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe extension automatically sends runtime usage telemetry to a vendor DevOps sink when enabled by server-provided configuration, with no user-facing disclosure or opt-out found in the reviewed package source. The observed event is limited to startup telemetry, so this warrants a warning rather than a malicious verdict.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Extension service-worker startup, when the local server supplies enabled DevOps sink settings.
Impact
The vendor can observe extension usage associated with an installation ID. The inspected startup event does not include credentials or page contents.
Mechanism
The extension registers or reuses an installation ID and sends usage events and logs to the configured sink; the embedded source map names dev-ops.hiredchina.com as the endpoint.
AI rationale
The extension automatically sends runtime usage telemetry to a vendor DevOps sink when enabled by server-provided configuration, with no user-facing disclosure or opt-out found in the reviewed package source. The observed event is limited to startup telemetry, so this warrants a warning rather than a malicious verdict.
Evidence
dist/assets/extension/background.jsdist/assets/extension/background.js.map
Network endpoints5
localhost:34568/api/configdev-ops.hiredchina.com/v1/registerdev-ops.hiredchina.com/usagesink/ingestdev-ops.hiredchina.com/logsink/ingestconfigured telemetry endpoint: /v1/register, /usagesink/ingest, /logsink/ingest
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The extension reads its DevOps telemetry settings from the local server and skips the sink unless it is enabled and has an endpoint and API key.
- When the extension service worker starts, it automatically records a `plugin` / `sw.boot` event and a readiness log.
- Usage uploads include an installation ID and event fields; the embedded source map documents `https://dev-ops.hiredchina.com` as the sink endpoint.
Evidence against
- The observed telemetry event is a service-worker startup event; no browser credentials or page contents were seen in its payload.
- The CLI is presented as a browser-control tool, and its extension connects to its local server for browser commands.
- The shell-based installer is reached through the explicit external CLI install command.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
8 flaggeddist/index.jsView file
28import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L29: import { spawn } from "node:child_process";
L30: import fs from "node:fs";
High
28import { initCliLogger, flushCliLogger, getCliLogger } from "./logger.js";
L29: import { spawn } from "node:child_process";
L30: import fs from "node:fs";
...
L35: initCliLogger({
L36: serverUrl: process.env.CP_PORT
L37: ? `http://localhost:${process.env.CP_PORT}/api`
L38: : `http://localhost:${__cliCfg.port}/api`,
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L28dist/utils/quarantine.jsView file
14* single argv element and never interpreted by a shell — important on
L15: * Windows where `cmd.exe` would re-interpret `%` characters.
L16: */
Findings
1 Critical4 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/commands/doctor.js
HighChild Processdist/index.js
HighShelldist/utils/quarantine.js
HighSame File Env Network Executiondist/index.js
HighCross File Remote Execution Contextdist/commands/start.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/index.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/assets/extension/background.js
LowWeak Cryptodist/version-manager.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to chromepilot@0.2.8.
See all versions of chromepilot for other recorded verdicts.
- Review the evidence and your use of chromepilot@0.2.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.