Loading npm security reports…

mcp-chrome-scalemaker-bridge@1.0.37: AI-agent control-surface | LPM Firewall

registry / mcp-chrome-scalemaker-bridge / 1.0.37

mcp-chrome-scalemaker-bridge@1.0.37

Chrome Native-Messaging host (Node) — scalemaker fork with Force Reconnect + Playwright CDP fallback

AI Security Review

scanned 6d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. npm postinstall mutates Claude Code's global skill directory without an explicit user command. The injected skill can automatically influence future Claude Code conversations and direct command execution.

Static reason

One or more suspicious static signals were detected.

Trigger

Global npm install while ~/.claude exists and SCALEMAKER_NO_SKILL is not set

Impact

Persists package-authored instructions into a foreign AI-agent control surface.

Mechanism

postinstall global AI-agent skill injection

Policy narrative

At global install, postinstall detects ~/.claude and copies a package-controlled SKILL.md into Claude Code's global skills directory unless an opt-out environment variable was pre-set. The skill declares broad automatic triggers and instructs the agent to run package diagnostic and repair commands. This is unconsented lifecycle-time mutation of a foreign AI-agent control surface.

Rationale

The lifecycle hook performs a concrete, persistent write to ~/.claude/skills rather than merely printing setup guidance. This meets the blocking policy for unconsented postinstall mutation of a foreign AI-agent control surface.

Evidence

package.jsondist/scripts/postinstall.jsdist/skill/SKILL.mddist/mcp/mcp-server-stdio.js~/.claude/skills/chrome-mcp-scalemaker-doctor/SKILL.md~/.mcp-chrome-scalemaker/extension.zip~/Downloads/mcp-chrome-scalemaker-extension-v1.0.37

Network endpoints

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const f='dist/scripts/postinstall.js';require('fs').existsSync(f)&&require('child_process').execFileSync(process.execPath,[f],{stdio:'inherit'})"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node -e "const f='dist/scripts/postinstall.js';require('fs').existsSync(f)&&require('child_process').execFileSync(process.execPath,[f],{stdio:'inherit'})"

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/scripts/utils.jsView file

20Trigger-reachable persistence chain: manifest.bin -> dist/cli.js -> dist/scripts/utils.js L20: const os_1 = __importDefault(require("os")); L21: const child_process_1 = require("child_process"); L22: const util_1 = require("util"); ... L36: function getLogDir() { L37: const homedir = os_1.default.homedir(); L38: if (os_1.default.platform() === 'darwin') { ... L41: else if (os_1.default.platform() === 'win32') { L42: return path_1.default.join(process.env.LOCALAPPDATA || path_1.default.join(homedir, 'AppData', 'Local'), 'mcp-chrome-bridge', 'logs'); L43: } ... L102: const packageDistDir = path_1.default.join(__dirname, '..'); L103: const wrapperScriptName = process.platform === 'win32' ? 'run_host.bat' : 'run_host.sh'; L104: const absoluteWrapperPath = path_1.default.resolve(packageDistDir,

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/scripts/utils.jsView on unpkg · L20

20const os_1 = __importDefault(require("os")); L21: const child_process_1 = require("child_process"); L22: const util_1 = require("util"); ... L36: function getLogDir() { L37: const homedir = os_1.default.homedir(); L38: if (os_1.default.platform() === 'darwin') { ... L41: else if (os_1.default.platform() === 'win32') { L42: return path_1.default.join(process.env.LOCALAPPDATA || path_1.default.join(homedir, 'AppData', 'Local'), 'mcp-chrome-bridge', 'logs'); L43: } ... L102: const packageDistDir = path_1.default.join(__dirname, '..'); L103: const wrapperScriptName = process.platform === 'win32' ? 'run_host.bat' : 'run_host.sh'; L104: const absoluteWrapperPath = path_1.default.resolve(packageDistDir, wrapperScriptName);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/scripts/utils.jsView on unpkg · L20

dist/scripts/doctor.jsView file

424package = mcp-chrome-scalemaker-bridge; repositoryIdentity = mcp-chrome-scalemaker; dependency = node-fetch L424: try { L425: const mod = require('node-fetch'); L426: return ((_a = mod.default) !== null && _a !== void 0 ? _a : mod);

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/scripts/doctor.jsView on unpkg · L424

dist/run_host.shView file

•path = dist/run_host.sh kind = build_helper sizeBytes = 9803 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/run_host.shView on unpkg