sap-browser-automation
Warn
Audited by Socket on Aug 29, 2026
1 alert found:
AnomalyAnomalyscripts/cdp-agent.mjs
LOWAnomalyLOW
scripts/cdp-agent.mjs
This code is a high-capability CDP automation CLI for local browser control. It can execute arbitrary JavaScript in the page context (Runtime.evaluate) using user-provided expressions and can export/import authentication state (cookies + localStorage/sessionStorage), writing sensitive data to disk and injecting storage back into the browser. There is no clear evidence of external-network exfiltration or obfuscation in the snippet, but the functionality is strongly aligned with session capture/impersonation and therefore poses significant security risk if misused.
Confidence: 74%Severity: 68%
Audit Metadata