browser-tools

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/eval.mjs

This module is an intentional CLI-to-browser-page eval bridge: it takes arbitrary JavaScript from command-line arguments and executes it inside the target page via `page.evaluate` + `AsyncFunction`, then prints the returned value(s). That capability is inherently high-risk for data exposure if the CLI input is untrusted or if the page has sensitive content. No classic malware behaviors (persistence, credential theft, filesystem/network actions) are evident in this snippet itself, but overall security risk remains elevated due to unsafe dynamic code execution design and reliance on `browser-control.mjs` for session/target handling.

Confidence: 66%Severity: 65%
Audit Metadata
Analyzed At
Jul 11, 2026, 11:12 PM
Package URL
pkg:socket/skills-sh/rezkam%2Fboring-but-good%2Fbrowser-tools%2F@0e8b28f7fead262d421418c01d0f3ba1c8389de665b7b3f915f685b9bb0901c1
Security Audit — socket — browser-tools