github TypeScript analyzed 6f0b708

lespaceman/agent-web-interface

Token-efficient browser automation MCP for AI agents, with semantic page snapshots and stable element IDs.

Drift inferred · capture-to-capture

HIGH 2026-08-01 code analysis flagged dynamic code execution in lespaceman/agent-web-interface

capabilities 1 tools

transport stdio · streamable-http · http counts 1 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 6f0b708 · analyzer v28 · 1d ago

code evidence vv4.6.7 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 280

fs drisplabs-browser-mcp-6f0b708/src/browser/browser-session-config.ts :20 import { mkdirSync } from 'node:fs';
fs drisplabs-browser-mcp-6f0b708/src/browser/connection-utils.ts :11 import fs from 'node:fs';
fs drisplabs-browser-mcp-6f0b708/src/browser/session-manager.ts :8 import fs from 'node:fs';
fs drisplabs-browser-mcp-6f0b708/src/install/config-io.ts :1 import { readFile, writeFile, rename, copyFile, stat, mkdir } from 'node:fs/promises';
fs drisplabs-browser-mcp-6f0b708/src/install/skill-source.ts :1 import { readFile } from 'node:fs/promises';
fs drisplabs-browser-mcp-6f0b708/src/lib/temp-file.ts :8 import { writeFile, unlink } from 'fs/promises';
fs drisplabs-browser-mcp-6f0b708/src/non-dom/file-path-validator.ts :8 import fs from 'node:fs';
fs drisplabs-browser-mcp-6f0b708/src/shared/version.ts :10 import { readFileSync } from 'node:fs';
fs drisplabs-browser-mcp-6f0b708/src/worker/chrome-worker-process.ts :10 import { existsSync } from 'fs';

shell drisplabs-browser-mcp-6f0b708/src/worker/chrome-worker-process.ts :8 import { spawn, type ChildProcess } from 'child_process';

net drisplabs-browser-mcp-6f0b708/src/http-entry.ts :16 import http from 'node:http';
net drisplabs-browser-mcp-6f0b708/src/worker/chrome-worker-process.ts :349 const response = await fetch(`http://127.0.0.1:${this.port}/json/version`, {
net drisplabs-browser-mcp-6f0b708/src/worker/health-monitor.ts :279 const response = await fetch(url, {
net drisplabs-browser-mcp-6f0b708/src/worker/port-allocator.ts :8 import { createServer } from 'net';