jo-inc/camofox-browser

GitHub ↗ · How this check works

Per-setup public labels: Linux / Haiku: Not tested (no product behavior was checked)

Static status badge · SVG · read-only JSON. Embed with ![Coldpass status](https://coldpass.dev/badge/jo-inc--camofox-browser.svg).

browser-automation

Not tested

No product behavior was checked.

Answers apply to each recorded setup, revision and operation. Earlier observations remain in Run details.

Tested on Linux
PlatformHaikuLuna
Linuxnot testednot tested

Linux / Haiku 5.5: not tested · Oct 23, 2026 · 39c820940134 · claude-code / 2.1.300 (Claude Code)
Recorded operation: No working operation verified.

MCP
No
Local or hosted
both local and hosted
Both a local install and a hosted service
Maintained
Slow
slow: last commit 18 days ago; 146 commits and 19 merged PRs in 90 days; 22 open issues, 38 open PRs; 0 of 18 recent threads got a maintainer reply; latest release 2026-10-07

Last commit Oct 23, 2026

Issue
not tested
Evidence
no product behavior checked
Agent interfaces
CLI (documented only)
CLI (documented only)

Observed interfaces were exercised by the checker. Documentation alone does not confirm compatibility.

Tested with
Claude Code / Haiku 5.5
  • Linux: Claude Code / Haiku 5.5 · agent 2.1.300 (Claude Code) · Not tested (no product behavior was checked) · Oct 23, 2026 on 39c820940134

Each entry describes its recorded operation and source revision. Other agent clients were not tested.

Safety
No unexpected network or file activity found in these checks

No problems traced to this repository code in these checks; a short run cannot prove safety. 33 listed items (named-host connections, static matches, dependency advisories) are below and do not change this verdict. 8 static matches retained as context.

Gitleaks found a possible hardcoded secret; value withheld. 2 distinct locations. 2 findings.

OSV reports a known vulnerability in this dependency version. 8 distinct locations. 17 findings.

Full event, path and process lists for each observed setup:

Run details

Haiku 5.5

Native agent · Not tested (no product behavior was checked)

Operation / attempted scope No working operation verified.

Run details
run
jo-inc--camofox-browser-claude-haiku-5-5-1792801373488094660
date
Oct 23, 2026
time to working
not recorded
product hosting / execution
Not recorded
recorded operation scope
not separately recorded
model
claude-haiku-5-5
agent / version
claude-code / 2.1.300 (Claude Code)
platform
linux
reported cost
$0.050154
Recorded source
https://github.com/jo-inc/camofox-browser
Backend
hyperv
Tool transport
mcp-assigned-vm
Requested source pin (not an observed revision)
{"commit": "39c82094013480b373df6600d44c7f036f58356e", "url": "https://github.com/jo-inc/camofox-browser"}
Test version
readme-bdc1b9b3c0d2673aef87e076d14084a8123ddcf09d520c1ee2e364a37c3f4bb9
revision
39c82094013480b373df6600d44c7f036f58356e
Whose fault: not assigned · pending

The guest ran out of memory or vanished and stopped answering during the product check.

Fix: fix-b6b0fe422e43f99218b3.

Recorded blocker / warning

Step: /bin/bash -c 'o=$(mktemp);e=$(mktemp);/bin/bash --noprofile --norc -c "$1" </dev/null >"$o" 2>"$e";c=$?;cat "$o";cat "$e" >&2;rm -f "$o" "$e";exit $c' coldpass 'exec /usr/bin/env -i USER=agent LOGNAME=agent USERNAME=agent <email> '"'"'GIT_AUTHOR_NAME=Coldpass Cold Agent'"'"' <email> '"'"'GIT_COMMITTER_NAME=Coldpass Cold Agent'"'"' <email> GIT_CONFIG_NOSYSTEM=1 GIT_CONFIG_SYSTEM=/dev/null GIT_CONFIG_GLOBAL=/dev/null GIT_CONFIG_COUNT=4 GIT_CONFIG_KEY_0=user.name '"'"'GIT_CONFIG_VALUE_0=Coldpass Cold Agent'"'"' GIT_CONFIG_KEY_1=user.email <email> GIT_CONFIG_KEY_2=user.useConfigOnly GIT_CONFIG_VALUE_2=true GIT_CONFIG_KEY_3=credential.helper GIT_CONFIG_VALUE_3= HOME=<guest-path> PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin LANG=C.UTF-8 SHELL=/bin/bash <env-var>=<guest-path> XDG_CONFIG_HOME=<guest-path> /bin/bash --noprofile --norc -c '"'"'cd <guest-path> && echo alive'"'"''

The guest ran out of memory or vanished and stopped answering during the product check.

Safety: Review signals: 2 hardcoded secret, 31 known vulnerability. 8 static matches retained as context.

Review signals: 2 hardcoded secret, 31 known vulnerability. 8 static matches retained as context.

Gitleaks found a possible hardcoded secret; value withheld. 2 distinct locations. 2 findings.

OSV reports a known vulnerability in this dependency version. 8 distinct locations. 17 findings.

8 hardcoded secret matches retained as context; full list in the evidence.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Behavior observation has not started.

No Linux syscall trace was collected.

Full safety evidence →

Answers recorded for this run

Local or hosted: both

Suggested next step (agent-reported): Inspect the recorded blocker and correct the README prerequisites or harness error.

run JSON · checker evidence · agent report + check · transcript excerpt unavailable · error excerpt unavailable