registry / craftdriver / 1.3.0

craftdriver@1.3.0

Modern WebDriver automation library for NodeJS

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `craftdriver init <flavor>`; overwrite requires its `--force` option.

Impact

Can influence AI-agent behavior in the selected project by installing craftdriver guidance.

Mechanism

Explicit project-local AI-agent guide creation

Rationale

Source inspection contradicts the scanner's malicious label: no unconsented install-time action, secret exfiltration, or stealth payload execution was found. The explicit agent-guide writer remains a real, non-blocking capability risk.

Evidence

package.jsonbin/craftdriver.mjsdist/cli/index.jsdist/cli/init.jsdist/lib/driverManager.jsdist/lib/vibiumTrace.jsAGENTS.md.github/copilot-instructions.mdCLAUDE.md.cursor/rules/craftdriver.mdcGEMINI.md~/.cache/craftdriver/metadata.json

Network endpoints2

googlechromelabs.github.io/chrome-for-testing/known-good-versions-with-downloads.jsonapi.github.com/repos/mozilla/geckodriver/releases/latest

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/cli/init.js` maps explicit `init` flavors to `AGENTS.md`, `CLAUDE.md`, `GEMINI.md`, Copilot, and Cursor rule paths.
`runInit` writes those files under the caller's project directory and supports overwriting with `--force`.
`dist/cli/index.js` invokes `runInit` only for the user-requested `craftdriver init` command.

Evidence against

`package.json` has only `prepublishOnly`; no install, preinstall, or postinstall hook executes for consumers.
`bin/craftdriver.mjs` only loads the package CLI when the user invokes it.
Agent-guide content documents browser-automation usage; no credential harvesting, exfiltration, or remote payload path was found.
`dist/lib/driverManager.js` network use is driver resolution from Chrome-for-Testing and GitHub APIs, aligned with WebDriver functionality.
`docs/public/traces/vitest-login.zip` is a bundled documentation trace archive, not an executed payload.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 53 file(s), 490 KB of source, external domains: 127.0.0.1, api.github.com, example.com, googlechromelabs.github.io, www.npmjs.com

Source & flagged code

10 flagged

dist/cli/index.jsView file

Lines 1-32javascript

1/**

2 * CLI entry point — `bin/craftdriver` invokes this after compile.

3 *

4 * Three modes:

5 *

6 * 1. `daemon start` — fork into a long-running daemon process.

7 * 2. `--ephemeral` — short-lived browser, read commands from stdin

8 * (one per line). Required for sandboxed cloud

9 * agents that can't keep a daemon between calls.

10 * 3. default — talk to the running daemon over the socket;

11 * auto-start one if none is up.

12 */

13import { spawn } from 'child_process';

14import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L12

15import { Browser } from '../lib/browser.js';

16import { ErrorCode } from '../lib/errors.js';

17import { createBrowserHandle, dispatch } from './dispatcher.js';

18import { parseArgv, HELP_TEXT } from './parseArgs.js';

19import { DaemonClient } from './client.js';

20import { runDaemon, toWireError } from './daemon.js';

21import { DAEMON_SOCKET_PATH } from './defaults.js';

22import { runInit, SUPPORTED_FLAVORS } from './init.js';

23import { runMcpServer } from './mcp/server.js';

24const VERSION = '0.1.0';

25export async function main(argv) {

26 const parsed = parseArgv(argv);

27 if (parsed === null) {

28 process.stdout.write(HELP_TEXT);

29 return 0;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.jsView on unpkg · L12

30 }

31 if (parsed.cmd === '__version__') {

32 process.stdout.write(VERSION + '\n');

dist/lib/driverManager.jsView file

Lines 5-45javascript

5 * 1. options.binaryPath (explicit)

6 * 2. CRAFTDRIVER_DRIVER_PATH

7 * 3. Legacy env vars (CHROMEDRIVER_PATH, SE_CHROMEDRIVER, etc.)

8 * 3.5. Known CI-provided driver directories (e.g. GitHub Actions

dist/lib/clock.jsView file

Lines 96-136javascript

96 earliest = t;

97 }

98 }

99 }

100 if (!earliest) break;

101

102 state.virtualNow = earliest.deadline;

103

104 if (earliest.interval !== null) {

bin/craftdriver.mjsView file

Lines 3-27javascript

3 * craftdriver — CLI entry shim.

4 *

5 * Resolves the compiled CLI in `dist/cli/index.js` and invokes its

6 * `main()`. If the dist tree is missing, fail with a clear message

7 * pointing at `npm run build` rather than a stack trace.

8 */

docs/public/traces/vitest-login.zipView file

•path = docs/public/traces/vitest-login.zip kind = high_entropy_blob sizeBytes = 58409 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

docs/public/traces/vitest-login.zipView on unpkg

•path = docs/public/traces/vitest-login.zip kind = compressed_blob sizeBytes = 58409 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

docs/public/traces/vitest-login.zipView on unpkg

•path = docs/public/traces/vitest-login.zip kind = nested_archive_needs_inspection sizeBytes = 58409 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

docs/public/traces/vitest-login.zipView on unpkg

dist/lib/vibiumTrace.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = craftdriver@1.1.1 matchedIdentity = npm:Y3JhZnRkcml2ZXI:1.1.1 similarity = 0.878 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lib/vibiumTrace.jsView on unpkg

Source & flagged code

10 flagged · loading source

dist/cli/index.jsView file

12*/ L13: import { spawn } from 'child_process'; L14: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L12

12Cross-file remote execution chain: dist/cli/index.js spawns dist/lib/browser.js; helper contains network access plus dynamic code execution. L12: */ L13: import { spawn } from 'child_process'; L14: import { fileURLToPath } from 'url'; ... L27: if (parsed === null) { L28: process.stdout.write(HELP_TEXT); L29: return 0; ... L100: if (flags.headless === true) L101: process.env.HEADLESS = 'true'; L102: else if (flags.headless === false) ... L171: const dryRun = parsed.args['dry-run'] === true || parsed.args.dryRun === true; L172: const result = runInit({ flavor: flavor, cwd: process.cwd(), force, dryRun }); L173: const prefix = dryRun ? '[dry-run] ' : '';

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.jsView on unpkg · L12

dist/lib/driverManager.jsView file

192// if the cache path contains special characters. L193: const r = spawnSync('powershell', [ L194: '-NoProfile', '-Command',

High

Shell

Package source references shell execution.

dist/lib/driverManager.jsView on unpkg · L192

25import os from 'os'; L26: import https from 'https'; L27: import { spawnSync } from 'child_process'; L28: import { fileURLToPath } from 'url'; ... L31: function cacheDir() { L32: return process.env.CRAFTDRIVER_CACHE_DIR ?? path.join(os.homedir(), '.cache', 'craftdriver'); L33: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lib/driverManager.jsView on unpkg · L25

dist/lib/clock.jsView file

116// eslint-disable-next-line no-new-func L117: new Function(earliest.fn)(); L118: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/lib/clock.jsView on unpkg · L116

bin/craftdriver.mjsView file

23L24: const mod = await import(pathToFileURL(distEntry).href); L25: const rc = await mod.main(process.argv.slice(2));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/craftdriver.mjsView on unpkg · L23

docs/public/traces/vitest-login.zipView file

•path = docs/public/traces/vitest-login.zip kind = high_entropy_blob sizeBytes = 58409 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

docs/public/traces/vitest-login.zipView on unpkg

•path = docs/public/traces/vitest-login.zip kind = compressed_blob sizeBytes = 58409 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

docs/public/traces/vitest-login.zipView on unpkg

•path = docs/public/traces/vitest-login.zip kind = nested_archive_needs_inspection sizeBytes = 58409 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

docs/public/traces/vitest-login.zipView on unpkg

dist/lib/vibiumTrace.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lib/vibiumTrace.jsView on unpkg

Findings

1 Critical5 High5 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/lib/vibiumTrace.js

HighChild Processdist/cli/index.js

HighShelldist/lib/driverManager.js

HighSame File Env Network Executiondist/lib/driverManager.js

HighCross File Remote Execution Contextdist/cli/index.js

HighShips High Entropy Blobdocs/public/traces/vitest-login.zip

MediumDynamic Requirebin/craftdriver.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Compressed Blobdocs/public/traces/vitest-login.zip

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/lib/clock.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectiondocs/public/traces/vitest-login.zip

Source & flagged code

10 flagged

dist/cli/index.jsView file

Lines 1-32javascript

1/**

2 * CLI entry point — `bin/craftdriver` invokes this after compile.

3 *

4 * Three modes:

5 *

6 * 1. `daemon start` — fork into a long-running daemon process.

7 * 2. `--ephemeral` — short-lived browser, read commands from stdin

8 * (one per line). Required for sandboxed cloud

9 * agents that can't keep a daemon between calls.

10 * 3. default — talk to the running daemon over the socket;

11 * auto-start one if none is up.

12 */

13import { spawn } from 'child_process';

14import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L12

15import { Browser } from '../lib/browser.js';

16import { ErrorCode } from '../lib/errors.js';

17import { createBrowserHandle, dispatch } from './dispatcher.js';

18import { parseArgv, HELP_TEXT } from './parseArgs.js';

19import { DaemonClient } from './client.js';

20import { runDaemon, toWireError } from './daemon.js';

21import { DAEMON_SOCKET_PATH } from './defaults.js';

22import { runInit, SUPPORTED_FLAVORS } from './init.js';

23import { runMcpServer } from './mcp/server.js';

24const VERSION = '0.1.0';

25export async function main(argv) {

26 const parsed = parseArgv(argv);

27 if (parsed === null) {

28 process.stdout.write(HELP_TEXT);

29 return 0;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/cli/index.jsView on unpkg · L12

30 }

31 if (parsed.cmd === '__version__') {

32 process.stdout.write(VERSION + '\n');

dist/lib/driverManager.jsView file

Lines 5-45javascript

5 * 1. options.binaryPath (explicit)

6 * 2. CRAFTDRIVER_DRIVER_PATH

7 * 3. Legacy env vars (CHROMEDRIVER_PATH, SE_CHROMEDRIVER, etc.)

8 * 3.5. Known CI-provided driver directories (e.g. GitHub Actions

dist/lib/clock.jsView file

Lines 96-136javascript

96 earliest = t;

97 }

98 }

99 }

100 if (!earliest) break;

101

102 state.virtualNow = earliest.deadline;

103

104 if (earliest.interval !== null) {

bin/craftdriver.mjsView file

Lines 3-27javascript

3 * craftdriver — CLI entry shim.

4 *

5 * Resolves the compiled CLI in `dist/cli/index.js` and invokes its

6 * `main()`. If the dist tree is missing, fail with a clear message

7 * pointing at `npm run build` rather than a stack trace.

8 */

docs/public/traces/vitest-login.zipView file

•path = docs/public/traces/vitest-login.zip kind = high_entropy_blob sizeBytes = 58409 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

docs/public/traces/vitest-login.zipView on unpkg

•path = docs/public/traces/vitest-login.zip kind = compressed_blob sizeBytes = 58409 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

docs/public/traces/vitest-login.zipView on unpkg

•path = docs/public/traces/vitest-login.zip kind = nested_archive_needs_inspection sizeBytes = 58409 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

docs/public/traces/vitest-login.zipView on unpkg

dist/lib/vibiumTrace.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/lib/vibiumTrace.jsView on unpkg