Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- lib/windows-processes.js:17
- Evidence
return cp.execFileSync(command, args, { ...options, env: windowsProcessEnvironment(), windowsHide: true });
Security audit
Camofox Browser
Security checks for vulnerabilities and agentic risk
Overview
This browser automation plugin is transparent about its purpose, but it needs review because it auto-starts a powerful REST browser-control server that is network-accessible and unauthenticated unless an access key is configured.
Install only if you need an anti-detection browser automation server. Before running it on any shared, container, VM, or network-reachable host, set CAMOFOX_BIND_HOST=127.0.0.1 or configure CAMOFOX_ACCESS_KEY, review cookie/session persistence under ~/.camofox, and disable telemetry with CAMOFOX_CRASH_REPORT_ENABLED=false if you do not want crash reports sent externally.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec