registry / website-api / 1.2.2

website-api@1.2.2

CLI and library to query website private APIs with your real logged-in Chrome session

AI Security Review

scanned 8d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The package is a CLI/library for querying website APIs using the user's Chrome session, with sensitive capabilities aligned to its documented purpose and activated by user commands.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs the CLI/library for a site query or extension command.

Impact

May send the user's site cookies to the selected site's own APIs or run user-installed extension code after confirmation; no unconsented install/import-time exfiltration found.

Mechanism

User-directed browser cookie/session API querying and optional integrity-checked extension install.

Rationale

Static source inspection found powerful cookie, browser, network, and extension-loading features, but they are documented, user-invoked, domain-aligned, and include confirmation/integrity checks for remote extensions. No lifecycle execution, import-time exfiltration, credential harvesting to unrelated endpoints, persistence, destructive behavior, or AI-agent control-surface mutation was found.

Evidence

package.jsonREADME.mddist/bin/cli.jsdist/src/website-api.jsdist/src/core/context.jsdist/src/core/registry.jsdist/src/capabilities/cookies.jsdist/src/cli/ext.jsdist/src/sites/voice.google.com/api/voice-helpers.jsdist/src/core/loader.js

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

dist/src/capabilities/cookies.js reads decrypted Chrome cookies/passwords for requested site domains.
dist/src/core/registry.js can download and import extension site modules, but only via user-invoked ext commands.
dist/src/cli/ext.js writes output files and installed extensions when explicitly requested.

Evidence against

package.json has no install/preinstall/postinstall lifecycle hooks.
dist/src/website-api.js import only loads package .env and exports APIs; no network or exfiltration on import.
dist/bin/cli.js performs actions only after CLI invocation and routes to declared website adapters.
dist/src/core/registry.js verifies downloaded extension files by sha256 before writing/importing.
dist/src/sites/voice.google.com/api/voice-helpers.js contains a documented public Google web-client API key, not a private secret.
README.md documents cookie/session access and warns that registry extensions run with browser-session access.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 44 file(s), 265 KB of source, external domains: api.census.gov, api.e-zpassny.com, claude.ai, clients6.google.com, cursor.com, gemini.google.com, mysmartenergy.nj.pseg.com, ollama.com, raw.githubusercontent.com, secure.chase.com, tigerweb.geo.census.gov, voice.google.com, website-api-list.lgnat.com, www.e-zpassny.com, www.google.com, www.perplexity.ai, www.zillow.com

Source & flagged code

8 flagged

dist/src/sites/voice.google.com/api/voice-helpers.jsView file

Lines 1-32javascript

1import { createHash } from "node:crypto";

2/**

3 * Google Voice's web app fetches data from a private JSON+protobuf API:

4 * POST https://clients6.google.com/voice/v1/voiceclient/<method>?alt=protojson&key=<API_KEY>

5 *

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/sites/voice.google.com/api/voice-helpers.jsView on unpkg · L2

6 * It can be replayed over plain HTTP (no browser) once you mirror the exact

7 * cross-domain handshake the gapi client uses — see the long note in

8 * `voiceHeaders()`.

9 */

10export const VOICE_API_BASE = "https://clients6.google.com/voice/v1/voiceclient";

11/** Public web-client API key embedded in voice.google.com's JS (not a secret). */

12export const VOICE_API_KEY = "AIzaSyDTYc1N4xiODyrQYK0Kl6g_y279LjYkrBg"; // secret-scan: allow

High

High Secret

Package contains a high-severity secret pattern.

dist/src/sites/voice.google.com/api/voice-helpers.jsView on unpkg · L12

High

Secret Pattern

Google API key in dist/src/sites/voice.google.com/api/voice-helpers.js

dist/src/sites/voice.google.com/api/voice-helpers.jsView on unpkg · L12

13/** Origin the SAPISIDHASH is bound to (the app's real origin). */

14export const VOICE_ORIGIN = "https://voice.google.com";

15/** Host that actually serves the API (and that XD3 wants the Origin to match). */

16export const CLIENTS6_ORIGIN = "https://clients6.google.com";

17/** Full request URL for a voiceclient method. */

18export function voiceUrl(method) {

19 return `${VOICE_API_BASE}/${method}?alt=protojson&key=${VOICE_API_KEY}`;

20}

21/** Substring identifying the send-SMS response (used when driving the browser). */

22export const SEND_SMS_PATH = "/voiceclient/api2thread/sendsms";

23/**

24 * `sendsms` is gated by reCAPTCHA Enterprise (this site key) + a BotGuard token,

25 * both minted only by Google's in-browser anti-bot JS — so `send` can't go over

26 * pure HTTP and must drive the authenticated page instead.

27 */

28export const RECAPTCHA_SITE_KEY = "6Lfv4cYpAAAAABTKDTZu0jpcgdQ5Ak4XxeUBqA7B";

29export const RECAPTCHA_ACTION = "SEND_SMS";

30/** Builds the in-app conversation URL for a given target. */

31export function threadUrl(target, authUser = 0) {

32 return `https://voice.google.com/u/${authUser}/messages?itemId=${encodeURIComponent(toThreadId(target))}`;

dist/src/core/context.jsView file

Lines 115-155javascript

115 }

116 throw err;

117 });

118 }

119 return pagePromise;

120 };

121 const outDir = options.outDir ? resolve(providers.cwd ?? process.cwd(), options.outDir) :

dist/src/core/registry.jsView file

Lines 288-328javascript

288 const target = join(dir, name);

289 mkdirSync(dirname(target), { recursive: true });

290 writeFileSync(target, buf);

291 }

292 // Validate it loads as a site whose id matches the catalog.

293 await assertLoadsAsSite(join

dist/src/capabilities/login/login-helper.jsView file

Lines 134-174javascript

134 if (debug)

135 console.log(`[LoginHelper] Already logged in. Skipping login flow.`);

136 return false;

137 }

138 // Resolve credentials lazily, only now that login is confirmed necessary.

139 let emailValue = options.emailValue;

140 let passwordValue

dist/src/sites/voice.google.com/api/voice-helpers.d.tsView file

Lines 1-32typescript

1import type { CookieEntry } from "chrome-tools";

2/**

3 * Google Voice's web app fetches data from a private JSON+protobuf API:

4 * POST https://clients6.google.com/voice/v1/voiceclient/<method>?alt=protojson&key=<API_KEY>

5 *

6 * It can be replayed over plain HTTP (no browser) once you mirror the exact

7 * cross-domain handshake the gapi client uses — see the long note in

8 * `voiceHeaders()`.

9 */

Source & flagged code

8 flagged · loading source

dist/src/sites/voice.google.com/api/voice-helpers.jsView file

12patternName = google_api_key severity = high line = 12 matchedText = export c...llow

High

High Secret

Package contains a high-severity secret pattern.

dist/src/sites/voice.google.com/api/voice-helpers.jsView on unpkg · L12

12patternName = google_api_key severity = high line = 12 matchedText = export c...llow

High

Secret Pattern

Google API key in dist/src/sites/voice.google.com/api/voice-helpers.js

dist/src/sites/voice.google.com/api/voice-helpers.jsView on unpkg · L12

2/** L3: * Google Voice's web app fetches data from a private JSON+protobuf API: L4: * POST https://clients6.google.com/voice/v1/voiceclient/<method>?alt=protojson&key=<API_KEY> L5: * ... L96: "x-javascript-user-agent": "google-api-javascript-client/1.1.0", L97: "x-goog-encode-response-if-executable": "base64", L98: Cookie: cookieHeader,

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/sites/voice.google.com/api/voice-helpers.jsView on unpkg · L2

dist/src/core/context.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = website-api@1.2.1 matchedIdentity = npm:d2Vic2l0ZS1hcGk:1.2.1 similarity = 0.977 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/src/core/context.jsView on unpkg

135browser, L136: async eval(fn, arg) { L137: const page = await browser();

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/core/context.jsView on unpkg · L135

dist/src/core/registry.jsView file

308try { L309: mod = await import(pathToFileURL(filePath).href); L310: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/src/core/registry.jsView on unpkg · L308

dist/src/capabilities/login/login-helper.jsView file

154patternName = generic_password severity = medium line = 154 matchedText = console....'`);

Medium

Secret Pattern

Hardcoded password in dist/src/capabilities/login/login-helper.js

dist/src/capabilities/login/login-helper.jsView on unpkg · L154

dist/src/sites/voice.google.com/api/voice-helpers.d.tsView file

12patternName = google_api_key severity = high line = 12 matchedText = export d...Bg";

High

Secret Pattern

Google API key in dist/src/sites/voice.google.com/api/voice-helpers.d.ts

dist/src/sites/voice.google.com/api/voice-helpers.d.tsView on unpkg · L12

Findings

1 Critical3 High4 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/src/core/context.js

HighHigh Secretdist/src/sites/voice.google.com/api/voice-helpers.js

HighSecret Patterndist/src/sites/voice.google.com/api/voice-helpers.js

HighSecret Patterndist/src/sites/voice.google.com/api/voice-helpers.d.ts

MediumDynamic Requiredist/src/core/registry.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/src/capabilities/login/login-helper.js

LowScripts Present

LowEvaldist/src/core/context.js

LowWeak Cryptodist/src/sites/voice.google.com/api/voice-helpers.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

86%Pass

Verdict confidence

IntentBenign

False-positive riskMedium

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

Authorguocity

Maintainersguocity

Version1.2.10

PublishedJul 2, 2026

LicenseMIT

Dependencies7

Integrityverified

Package size104 KB

Files104

Keywordschromecookiesapiscrapingautomationcdpplaywrightchatgpt

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/src/website-api.jstypes → ./dist/src/website-api.d.tsexports mapbin → chrome-website-api, website-api

Runtimenode >=22

Artifact353 KB · 104 files1 signature(s)

Install lifecycleNo install hooks · other: build, check:secrets, generate:openapi, lint +5

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

8 flagged

dist/src/sites/voice.google.com/api/voice-helpers.jsView file

Lines 1-32javascript

1import { createHash } from "node:crypto";

2/**

3 * Google Voice's web app fetches data from a private JSON+protobuf API:

4 * POST https://clients6.google.com/voice/v1/voiceclient/<method>?alt=protojson&key=<API_KEY>

5 *

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/sites/voice.google.com/api/voice-helpers.jsView on unpkg · L2

6 * It can be replayed over plain HTTP (no browser) once you mirror the exact

7 * cross-domain handshake the gapi client uses — see the long note in

8 * `voiceHeaders()`.

9 */

10export const VOICE_API_BASE = "https://clients6.google.com/voice/v1/voiceclient";

11/** Public web-client API key embedded in voice.google.com's JS (not a secret). */

12export const VOICE_API_KEY = "AIzaSyDTYc1N4xiODyrQYK0Kl6g_y279LjYkrBg"; // secret-scan: allow

High

High Secret

Package contains a high-severity secret pattern.

dist/src/sites/voice.google.com/api/voice-helpers.jsView on unpkg · L12

High

Secret Pattern

Google API key in dist/src/sites/voice.google.com/api/voice-helpers.js

dist/src/sites/voice.google.com/api/voice-helpers.jsView on unpkg · L12

13/** Origin the SAPISIDHASH is bound to (the app's real origin). */

14export const VOICE_ORIGIN = "https://voice.google.com";

15/** Host that actually serves the API (and that XD3 wants the Origin to match). */

16export const CLIENTS6_ORIGIN = "https://clients6.google.com";

17/** Full request URL for a voiceclient method. */

18export function voiceUrl(method) {

19 return `${VOICE_API_BASE}/${method}?alt=protojson&key=${VOICE_API_KEY}`;

20}

21/** Substring identifying the send-SMS response (used when driving the browser). */

22export const SEND_SMS_PATH = "/voiceclient/api2thread/sendsms";

23/**

24 * `sendsms` is gated by reCAPTCHA Enterprise (this site key) + a BotGuard token,

25 * both minted only by Google's in-browser anti-bot JS — so `send` can't go over

26 * pure HTTP and must drive the authenticated page instead.

27 */

28export const RECAPTCHA_SITE_KEY = "6Lfv4cYpAAAAABTKDTZu0jpcgdQ5Ak4XxeUBqA7B";

29export const RECAPTCHA_ACTION = "SEND_SMS";

30/** Builds the in-app conversation URL for a given target. */

31export function threadUrl(target, authUser = 0) {

32 return `https://voice.google.com/u/${authUser}/messages?itemId=${encodeURIComponent(toThreadId(target))}`;

dist/src/core/context.jsView file

Lines 115-155javascript

115 }

116 throw err;

117 });

118 }

119 return pagePromise;

120 };

121 const outDir = options.outDir ? resolve(providers.cwd ?? process.cwd(), options.outDir) :

dist/src/core/registry.jsView file

Lines 288-328javascript

288 const target = join(dir, name);

289 mkdirSync(dirname(target), { recursive: true });

290 writeFileSync(target, buf);

291 }

292 // Validate it loads as a site whose id matches the catalog.

293 await assertLoadsAsSite(join

dist/src/capabilities/login/login-helper.jsView file

Lines 134-174javascript

134 if (debug)

135 console.log(`[LoginHelper] Already logged in. Skipping login flow.`);

136 return false;

137 }

138 // Resolve credentials lazily, only now that login is confirmed necessary.

139 let emailValue = options.emailValue;

140 let passwordValue

dist/src/sites/voice.google.com/api/voice-helpers.d.tsView file

Lines 1-32typescript

1import type { CookieEntry } from "chrome-tools";

2/**

3 * Google Voice's web app fetches data from a private JSON+protobuf API:

4 * POST https://clients6.google.com/voice/v1/voiceclient/<method>?alt=protojson&key=<API_KEY>

5 *

6 * It can be replayed over plain HTTP (no browser) once you mirror the exact

7 * cross-domain handshake the gapi client uses — see the long note in

8 * `voiceHeaders()`.

9 */