registry / @easbot/gateway / 0.2.48

@easbot/gateway@0.2.48

EASBot Gateway - AI Agent Server and Multi-channel Integration Platform - 支持 WebSocket、HTTP、Discord、Telegram、Slack 等多渠道集成

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 768 KB of source, external domains: api.telegram.org, chat.signal.org, discord.com, ilinkai.weixin.qq.com, novac2c.cdn.weixin.qq.com, open.feishu.cn, slack.com

Source & flagged code

2 flagged

dist/chunks/chunk-RZS4QZWL.cjsView file

Lines 1-21javascript

1'use strict';var chunkAUPHFE34_cjs=require('./chunk-AUPHFE34.cjs'),chunkGY3SWWW3_cjs=require('./chunk-GY3SWWW3.cjs'),utils=require('@easbot/utils'),u=require('zod'),pe=require('path'),se=require('fs'),W=require('fs/promises'),ws=require('ws'),xi=require('https'),Mi=require('http'),ki=require('crypto'),url=require('url'),os$1=require('os'),plugin=require('@easbot/plugin');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}function _interopNamespace(e){if(e&&e.__esModule)return e;var n=Object.create(null);if(e){Object.keys(e).forEach(function(k){if(k!=='default'){var d=Object.getOw ...

3`),a=t[t.length-1]?.metadata.tokens;return {output:i,title:s.title??"Gateway Response",metadata:{sessionId:e,source:s.source,agent:s.agent,messageCount:t.length,finishReason:n,messages:t,...a?{tokens:a}:{}}}}formatOutput(t){let e=[];if(t.text&&e.push(t.text),t.tools&&this.filterConfig.includeToolOutput)for(let s of t.tools)s.output&&e.push(`

4[Tool: ${s.name}]

5${String(s.output)}

6`),s.error&&e.push(`

7[Tool Error: ${s.name}]

8${s.error}

9`);return e.join(`

10`).trim()}getSessionId(){return this.sessionId}resetSession(){this.sessionId=void 0;}async stop(){this.bridgeStarted&&(await this.eventBridge.stop(),this.bridgeStarted=false,this.sessionId=void 0);}};var ls=chunkAUPHFE34_cjs.a.create({service:"gateway:interfaces"}),$;function Ra(o){$=o,o?ls.debug("Agent adapter registered",{hasSubAgentRunner:!!o.subAgentRunner}):ls.debug("Agent adapter cleared");}function Da(){return $}function ue(){return $!==void 0}function X(){if(!$)throw new Error("Agent adapter not set. Call setAgentAdapter() before using Gateway.");return $}var Nn={Path:{home:process.env ...

11`&&t[r]!=="\r";)r++;continue}if(!s&&a==="/"&&t[r+1]==="*"){for(r+=2;r<t.length-1;){if(t[r]==="*"&&t[r+1]==="/"){r+=

12`)}buildSessionId(t,e,s){let n=[this.platform,t,e];return s&&n.push(s),n.join("_")}async handleMessage(t){if(!this.messageHandler){this.log.warn("no message handler set, dropping message",{id:t.id});return}this.updateActivity(),await this.messageHandler.onMessage(t);}async handleEvent(t,e){if(!this.messageHandler){this.log.warn("no message handler set, dropping event",{type:t});return}await this.messageHandler.onEvent({type:t,channelId:this.id,data:e,timestamp:Date.now()});}async getCommandList(){try{let t=X(),s=(await t.sdk.config.get().then(i=>i.data).catch(()=>{}))?.context?.mode??"general" ...

13`)}}catch(t){return this.log.error("failed to process /commands command",{error:String(t)}),{handled:true,reply:`\u274C Failed to list commands: ${String(t)}`}}}async handleNewCommand(t){try{return this.messageHandler?.session?this.messageHandler.session.getSession(t)?(await this.messageHandler.session.unbindBackendSession(t),this.log.debug(

14`)}formatUptime(t){if(t<=0)return "0s";let e=Math.floor(t/1e3),s=Math.floor(e/60),n=Math.floor(s/60),i=Math.floor(n/24),r=[];return i>0&&r.push(`${i}d`),n%24

16${p.content}`});}catch(g){this.log.warn("failed to download text file, storing as file",{platform:"telegram",fileId:d,error:String(g)}),s.push({type:"file",data:d,mime:a});}else try{let g=c.includes(".")?c.split(".").pop():utils.Filesystem.mimeTypeToExt(a)||"bin",p=`${e.document.file_unique_id||d}.${g}`,h=utils.Filesystem.join(r,`${e.chat.id}_${d}_${p}`);this.log.debug("downloading binary file",{filePath:h,fileId:d,fileName:c,mimeType:a}),await this.downloadBinaryFile(d,h),s.push({type:"file",data:url.pathToFileURL(h).href,mime:a});}catch(g){this.log.warn("failed to download file, storing as f ...

18${p.content}`});}else await this.downloadFile(r.url,d),s.push({type:"file",data:url.pathToFileURL(d).href,mime:r.content_type});}catch(a){this.log.warn("failed to download file, storing as URL",{attachmentId:r.id,error:String(a)}),s.push({type:"file",data:r.url,mime:r.content_type});}return s}async downloadFile(e,s){let n=await utils.Fetch.get(e,{responseType:"arrayBuffer",headers:{Authorization:`Bot ${

20${p.content}`});}else await this.downloadFile(r.url_private_download||r.url_private,d),s.push({type:"file",data:url.pathToFileURL(d).href,mime:r.mimetype});}catch(a){this.log.warn("failed to download file, storing as URL",{fileId:r.id,error:String(a)}),s.push({type:"file",data:r.url_private,mime:r.mimetype});}return s}async downloadFile(e,s){let n=await utils.Fetch.get(e,{responseType:"arrayBuffer",headers:{Authorization:`Bearer ${this.botConfig?.botToken}`}});if(!n.ok)throw new Error(`Failed to download file: ${n.status}`);let i=utils.Filesystem.dirname(s);await utils.Filesystem.mkdir(i,{recu ...

21`)}buildSessionId(e,s,n){let i=["feishu",e,s];return n&&i.push(n),i.join("_")}};var Ue=class extends P{constructor(e="wechat-main"){super();chunkGY3SWWW3_cjs.a(this,"id");chunkGY3SWWW3_cjs.a(this,"platform","wechat");chunkGY3SWWW3_cjs.

Long lines were clipped for display.

dist/chunks/chunk-LBRRMDDL.mjsView file

Lines 1-30javascript

1import {a}from'./chunk-7OFQ65NG.mjs';import {a as a$1}from'./chunk-HAMGVOQD.mjs';import {Identifier,Filesystem,TruncateContent,Fetch,PKG,createServer}from'@easbot/utils';import u,{z}from'zod';import*as he from'path';import he__default,{join,extname,basename}from'path';import*as ne from'fs'

Source & flagged code

2 flagged · loading source

dist/chunks/chunk-RZS4QZWL.cjsView file

1'use strict';var chunkAUPHFE34_cjs=require('./chunk-AUPHFE34.cjs'),chunkGY3SWWW3_cjs=require('./chunk-GY3SWWW3.cjs'),utils=require('@easbot/utils'),u=require('zod'),pe=require('pat... L2: ... L9: `);return e.join(` L10: `).trim()}getSessionId(){return this.sessionId}resetSession(){this.sessionId=void 0;}async stop(){this.bridgeStarted&&(await this.eventBridge.stop(),this.bridgeStarted=false,this.s... L11: `&&t[r]!=="\r";)r++;continue}if(!s&&a==="/"&&t[r+1]==="*"){for(r+=2;r<t.length-1;){if(t[r]==="*"&&t[r+1]==="/"){r+=2;break}r++;}continue}i.push(a);}return e=i.join("").trim(),e?JSO...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunks/chunk-RZS4QZWL.cjsView on unpkg · L1

dist/chunks/chunk-LBRRMDDL.mjsView file

10package = @easbot/gateway; repositoryIdentity = easbot; dependency = @easbot/utils L10: `).trim()}getSessionId(){return this.sessionId}resetSession(){this.sessionId=void 0;}async stop(){this.bridgeStarted&&(await this.eventBridge.stop(),this.bridgeStarted=false,this.s... L11: `&&t[r]!=="\r";)r++;continue}if(!s&&a==="/"&&t[r+1]==="*"){for(r+=2;r<t.length-1;){if(t[r]==="*"&&t[r+1]==="/"){r+=2;break}r++;}continue}i.push(a);}return e=i.join("").trim(),e?JSO... L12: `)}buildSessionId(t,e,s){let n=[this.platform,t,e];return s&&n.push(s),n.join("_")}async handleMessage(t){if(!this.messageHandler){this.log.warn("no message handler set, dropping m...

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/chunks/chunk-LBRRMDDL.mjsView on unpkg · L10

Findings

1 High3 Medium6 Low

HighCopied Package Dependency Bridgedist/chunks/chunk-LBRRMDDL.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/chunks/chunk-RZS4QZWL.cjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/chunks/chunk-RZS4QZWL.cjsView file

Lines 1-21javascript

4[Tool: ${s.name}]

5${String(s.output)}

6`),s.error&&e.push(`

7[Tool Error: ${s.name}]

8${s.error}

9`);return e.join(`

11`&&t[r]!=="\r";)r++;continue}if(!s&&a==="/"&&t[r+1]==="*"){for(r+=2;r<t.length-1;){if(t[r]==="*"&&t[r+1]==="/"){r+=

14`)}formatUptime(t){if(t<=0)return "0s";let e=Math.floor(t/1e3),s=Math.floor(e/60),n=Math.floor(s/60),i=Math.floor(n/24),r=[];return i>0&&r.push(`${i}d`),n%24

Long lines were clipped for display.

dist/chunks/chunk-LBRRMDDL.mjsView file

Lines 1-30javascript