registry / reflex-browser / 0.5.0
reflex-browser@0.5.0
Token-efficient browser automation for AI agents. Local MCP server + CLI: compressed page snapshots, batched actions, forensic failures.
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
4 flaggeddist/reflex.jsView file
1#!/usr/bin/env node
L2: "use strict";var y=(e,t)=>()=>{try{return t||e((t={exports:{}}).exports,t),t.exports}catch(r){throw t=0,r}};var le=y((mr,k)=>{"use strict";var X=require("fs"),ot=require("path"),{e...
L3: `)){let o=n.match(/^\s*(\d+)\s+(.*)$/);if(o&&o[1]===r&&/chrome|chromium|ms-playwright|playwright[\/\\]/i.test(o[2]))return!0}return!1}function it(e){if(process.platform==="win32")r...
High
1#!/usr/bin/env node
L2: "use strict";var y=(e,t)=>()=>{try{return t||e((t={exports:{}}).exports,t),t.exports}catch(r){throw t=0,r}};var le=y((mr,k)=>{"use strict";var X=require("fs"),ot=require("path"),{e...
L3: `)){let o=n.match(/^\s*(\d+)\s+(.*)$/);if(o&&o[1]===r&&/chrome|chromium|ms-playwright|playwright[\/\\]/i.test(o[2]))return!0}return!1}function it(e){if(process.platform==="win32")r...
L4: `)){let n=r.match(/^\s*(\d+)\s+(\d+)\s+(\d+)\s+(.*)$/);if(!n)continue;let[,o,a,s,l]=n;if(a===String(e)&&/chrome|chromium|ms-playwright/i.test(l)&&!/crashpad/i.test(l))return{pid:pa...
L5: <style>html{color-scheme:dark}body{margin:0;display:grid;place-items:center;min-height:100vh;
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/reflex.jsView on unpkg · L1Findings
4 High3 Medium6 Low
HighChild Processdist/reflex.js
HighSame File Env Network Executiondist/reflex.js
HighCommand Output Exfiltrationdist/daemon.js
HighSandbox Evasion Gated Capabilitydist/reflex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to reflex-browser@0.5.0.
See all versions of reflex-browser for other recorded verdicts.
- Review the evidence and your use of reflex-browser@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.