Nanobrowser AI Agent

by nanobrowser• 14k•• Scanned•Claim this listing•Request removal
Browser Automationagentai agentsai toolsautomationbrowser

Open-source AI agent for web automation. Use your real, logged-in browser to automate daily tasks.

Nanobrowser is an open-source ai agent by nanobrowser, written mainly in TypeScript, with 14,211 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 24, 2026.

Scan summary: scanned Nov 5, 2026 at commit 19dc8e8. No capabilities flagged by our checks. Scan policy

Scanned
Full scan at 19dc8e8 · Nov 5, 2026
Scanned
Static code scanpass
Secrets scanpass
Dependency audit2 known vulnerabilitiespass
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (10)

  • medium
    Install or build failed in a clean environment
    RTED_ENGINE  Unsupported environment (bad pnpm and/or Node.js version) Your Node version is incompatible with "/w". Expected version: >=24.22.1 Got: v22.23.4 This is happening because the package's manifest has an engines.node field specified. To fix this issue, install the required Node version.
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    src/browser-control/probe/__tests__/probe.test.ts:8
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    src/browser-control/probe/__tests__/probe.test.ts:16
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    src/browser-control/probe/__tests__/probe.test.ts:18
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    src/browser-control/probe/__tests__/probe.test.ts:29
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    src/llm/__tests__/catalogue.test.ts:230
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    package.json has a postinstall script
    wxt prepare
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
registry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Nanobrowser alternatives

View more →

Similar ai agents in Browser Automation, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Nanobrowser (this page)
nanobrowser
14kApache-2.0Oct 24, 2026Scanned, no flagged issues
Browser Use
browser-use
120kMITOct 31, 2026Scanned, no flagged issues
CloakBrowser
CloakHQ
33kMITOct 31, 2026Scanned, no flagged issues
Invisible Dots
feder-cr
32kMITOct 31, 2026Scanned, no flagged issues
OpenCLI
jackwener
31kApache-2.0Oct 26, 2026Scanned, no flagged issues
Stagehand
browserbase
26kMITOct 30, 2026Scanned, no flagged issues