Histórico de Auditoria - browsing-with-playwright

Versão da auditoria 5

Mais recente Baixo Risco

Jan 16, 2026, 05:25 PM

Legitimate browser automation skill using official Playwright MCP protocol. All network traffic is localhost-only to the MCP server. Shell command patterns in static findings are false positives from markdown documentation formatting and legitimate local server lifecycle management. No data exfiltration or external network calls detected.

7

Arquivos analisados

1,865

Linhas analisadas

4

achados

claude

Auditado por

Problemas de Baixo Risco (1)

scripts/mcp-client.py:204-212

StdioTransport uses shell=True

The StdioTransport class uses shell=True for subprocess spawning when connecting to MCP servers. While this is legitimate for local MCP server spawning, the pattern is noted for completeness.

Fatores de risco

🌐 Acesso à rede (1)

scripts/mcp-client.py:33-34

⚡ Contém scripts (3)

scripts/start-server.sh:1-26 scripts/stop-server.sh:1-29 scripts/verify.py:1-21

⚙️ Comandos externos (1)

scripts/mcp-client.py:191-212

Versão da auditoria 4

Baixo Risco

Jan 16, 2026, 05:25 PM

Legitimate browser automation skill using official Playwright MCP protocol. All network traffic is localhost-only to the MCP server. Shell command patterns in static findings are false positives from markdown documentation formatting and legitimate local server lifecycle management. No data exfiltration or external network calls detected.

7

Arquivos analisados

1,865

Linhas analisadas

4

achados

claude

Auditado por

Problemas de Baixo Risco (1)

scripts/mcp-client.py:204-212

StdioTransport uses shell=True

The StdioTransport class uses shell=True for subprocess spawning when connecting to MCP servers. While this is legitimate for local MCP server spawning, the pattern is noted for completeness.

Fatores de risco

🌐 Acesso à rede (1)

scripts/mcp-client.py:33-34

⚡ Contém scripts (3)

scripts/start-server.sh:1-26 scripts/stop-server.sh:1-29 scripts/verify.py:1-21

⚙️ Comandos externos (1)

scripts/mcp-client.py:191-212

Versão da auditoria 3

Baixo Risco

Jan 10, 2026, 10:29 AM

Legitimate browser automation skill using official Playwright MCP protocol. All network traffic is localhost-only to the MCP server. Scripts manage local process lifecycle. No data exfiltration or external network calls detected.

6

Arquivos analisados

1,537

Linhas analisadas

5

achados

claude

Auditado por

Problemas de Baixo Risco (1)

scripts/mcp-client.py:204-212

Shell command execution in stdio transport

The mcp-client.py StdioTransport class uses shell=True when spawning subprocess (line 204-212). While used for legitimate MCP server spawning, shell=True can be risky if command input is not properly validated. Code: `subprocess.Popen(self.command, shell=True, stdin=...`

Fatores de risco

⚡ Contém scripts (2)

scripts/start-server.sh:1-26 scripts/stop-server.sh:1-29

🌐 Acesso à rede (1)

scripts/mcp-client.py:1-490

📁 Acesso ao sistema de arquivos (2)

scripts/start-server.sh:6-16 scripts/mcp-client.py:33-34

⚙️ Comandos externos (4)

scripts/verify.py:3-10 scripts/start-server.sh:15 scripts/stop-server.sh:28 scripts/mcp-client.py:204-212

Versão da auditoria 2

Baixo Risco

Jan 10, 2026, 10:29 AM

Legitimate browser automation skill using official Playwright MCP protocol. All network traffic is localhost-only to the MCP server. Scripts manage local process lifecycle. No data exfiltration or external network calls detected.

6

Arquivos analisados

1,537

Linhas analisadas

5

achados

claude

Auditado por

Problemas de Baixo Risco (1)

scripts/mcp-client.py:204-212

Shell command execution in stdio transport

The mcp-client.py StdioTransport class uses shell=True when spawning subprocess (line 204-212). While used for legitimate MCP server spawning, shell=True can be risky if command input is not properly validated. Code: `subprocess.Popen(self.command, shell=True, stdin=...`

Fatores de risco

⚡ Contém scripts (2)

scripts/start-server.sh:1-26 scripts/stop-server.sh:1-29

🌐 Acesso à rede (1)

scripts/mcp-client.py:1-490

📁 Acesso ao sistema de arquivos (2)

scripts/start-server.sh:6-16 scripts/mcp-client.py:33-34

⚙️ Comandos externos (4)

scripts/verify.py:3-10 scripts/start-server.sh:15 scripts/stop-server.sh:28 scripts/mcp-client.py:204-212

Versão da auditoria 1

Baixo Risco

Jan 10, 2026, 10:29 AM

Legitimate browser automation skill using official Playwright MCP protocol. All network traffic is localhost-only to the MCP server. Scripts manage local process lifecycle. No data exfiltration or external network calls detected.

6

Arquivos analisados

1,537

Linhas analisadas

5

achados

claude

Auditado por

Problemas de Baixo Risco (1)

scripts/mcp-client.py:204-212

Shell command execution in stdio transport

The mcp-client.py StdioTransport class uses shell=True when spawning subprocess (line 204-212). While used for legitimate MCP server spawning, shell=True can be risky if command input is not properly validated. Code: `subprocess.Popen(self.command, shell=True, stdin=...`

Fatores de risco

⚡ Contém scripts (2)

scripts/start-server.sh:1-26 scripts/stop-server.sh:1-29

🌐 Acesso à rede (1)

scripts/mcp-client.py:1-490

📁 Acesso ao sistema de arquivos (2)

scripts/start-server.sh:6-16 scripts/mcp-client.py:33-34

⚙️ Comandos externos (4)

scripts/verify.py:3-10 scripts/start-server.sh:15 scripts/stop-server.sh:28 scripts/mcp-client.py:204-212