registry / langcli-com / 0.1.51
langcli-com@0.1.51
Langcli - interactive AI coding assistant in the terminal
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe automatic MCP setup creates a real but unresolved agent extension lifecycle risk. The inspected source does not establish unconsented broad control-surface mutation or another concrete attack, so this warrants a warning rather than a block.
Static reason
High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review
Trigger
Package installation runs the postinstall hook.
Impact
The bridge may configure Chrome MCP integration; the affected configuration and scope are not established by the inspected source.
Mechanism
The script resolves the declared bridge CLI and, without arguments, invokes its permission-fix, Chrome registration, and diagnostic commands.
AI rationale
The automatic MCP setup creates a real but unresolved agent extension lifecycle risk. The inspected source does not establish unconsented broad control-surface mutation or another concrete attack, so this warrants a warning rather than a block.
Evidence
package.jsonscripts/setup-chrome-mcp.mjs
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs its Chrome MCP setup script automatically after installation and depends on the bridge it invokes.
- With no arguments, the setup script runs the bridge’s permission-fix, Chrome registration, and diagnostic commands.
Evidence against
- The inspected script delegates to the package’s declared Chrome MCP bridge dependency; it shows no credential access or remote payload execution.
- The inspected source does not establish what configuration the bridge changes or whether it reaches a foreign or broad agent control surface.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
NoLicense
Oversized source lightweight scan
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/setup-chrome-mcp.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgscripts/setup-chrome-mcp.mjsView file
11import { execFileSync } from 'node:child_process'
L12: import { mkdirSync } from 'node:fs'
L13: import { createRequire } from 'node:module'
...
L16:
L17: if (process.env.CLAUDE_CODE_SKIP_CHROME_MCP_SETUP === '1') {
L18: process.exit(0)
...
L57:
L58: mkdirSync(getChromeMcpLogDir(), { recursive: true })
L59:
Critical
Ai Agent Control Hijack
Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/setup-chrome-mcp.mjsView on unpkg · L11•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
#!/usr/bin/env node
import { execfilesync } from 'node:child_process'
import { mkdirsync } from 'node:fs'
import { createrequire } from 'node:module'
import { homedir } from 'node:os'
import { join } from 'node:path'
if (process.env.claude_code_skip_chrome_mcp_setup === '1') {
process.exit(0)
}
const require = createrequire(import.meta.url)
const clipath = require.resolve(
'@claude-code-best/mcp-chrome-bridge/dist/cli.js',
)
const userargs = process.argv.
Findings
1 Critical3 High5 Medium6 Low
CriticalAi Agent Control Hijackscripts/setup-chrome-mcp.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighExternal Ai Agent Control Surface Mutationscripts/setup-chrome-mcp.mjs
HighKnown Malware Source Fingerprint Signaturescripts/setup-chrome-mcp.mjs
MediumEnvironment Vars
MediumShips Native Binarydist/vendor/audio-capture/x64-darwin/audio-capture.node
MediumOversized Source Filedist/cli.js
MediumOversized Cli Entrypointdist/cli.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to langcli-com@0.1.51.
See all versions of langcli-com for other recorded verdicts.
- Review the evidence and your use of langcli-com@0.1.51 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.