Skills/npm/jev-browser

jev-browser@0.8.11

VERIFIED

Publisher claims: "A Jev-driven browser agent: give it a task and a start URL; typed Choice actions, stop/stuck safety gates, the final page, an auditable step trace, and a screenshot. MCP server, CLI, or library." Observed in sandbox: calls registry.npmjs.org only, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher jkudish · joined 8 days agoInstalls 8,709Last detonated 4d ago
$claude mcp add jev-browser -- npx -y @jkudish/jev-browser
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 83/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: calls registry.npmjs.org only, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 1 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.6snetworkCONNECT https://registry.npmjs.org
0.6sprocessexec /app/apps/web/node_modules/.bin/npx
0.6sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npx
0.6sprocessexec /app/node_modules/.bin/npx
0.6sprocessexec /pnpm/npx
0.6sprocessexec /usr/local/sbin/npx
0.6sprocessexec /usr/local/bin/npx
0.6sprocessscript backend runs setup only
0.6sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)dist/http.d.ts:2 · MCP server using network transport (SSE/HTTP) — data sent over networkFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
npx invocation of non-well-known packageskills/jev-browser/SKILL.md:54 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/ensure-chromium.mjs:17 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File permission modification commanddist/password.js:176 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
npx invocation of non-well-known packageskills/jev-browser/SKILL.md:6 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagescripts/ensure-chromium.mjs:2 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File permission modification commanddist/password.js:62 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05