registry / @kafca/agentdock / 0.1.62

@kafca/agentdock@0.1.62

基于 Local AI Core 的本地桌面 AI 工作台，内置原生 Feishu/Lark 网关与本地 ACP 会话运行时。

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 322 file(s), 3.17 MB of source, external domains: 127.0.0.1, accounts.feishu.cn, accounts.larksuite.com, api.anthropic.com, api.deepseek.com, api.minimax.chat, api.openai.com, cdn.example, example.com, example.test, github.com, host.docker.internal, ilinkai.weixin.qq.com, liteapp.weixin.qq.com, novac2c.cdn.weixin.qq.com, open.feishu.cn, open.larksuite.com, opencode.ai, openrouter.ai, radix-ui.com, react.dev, sandbox.example.com, weixin.example, www.w3.org

Source & flagged code

7 flagged

dist-electron/tests/electron/condition-trigger-skill.test.jsView file

Lines 1-30javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty(exports, "__esModule", { value: true });

6const node_test_1 = __importDefault(require("node:test"));

7const strict_1 = __importDefault(require("node:assert/strict"));

8const node_fs_1 = require("node:fs");

9const node_path_1 = require("node:path");

10const node_os_1 = require("node:os");

11const node_child_process_1 = require("node:child_process");

12const managed_skill_catalog_js_1 = require("../../services/local-ai-core/src/runtime/managed-skill-catalog.js");

High

Child Process

Package source references child process execution.

dist-electron/tests/electron/condition-trigger-skill.test.jsView on unpkg · L10

13const sourceSkillPath = (0, node_path_1.join)(process.cwd(), 'electron', 'managed-skills', 'condition-trigger', 'SKILL.md');

14(0, node_test_1.default)('condition trigger skill requires the staged two-approval workflow and helper owns exact LAC requests', () => {

15 const content = (0, node_fs_1.readFileSync)(sourceSkillPath, 'utf8');

16 strict_1.default.match(content, /temporary source bundle/i);

17 strict_1.default.match(content, /create.*Automation Script.*record/is);

18 strict_1.default.match(content, /manifest\.json.*entrypoint.*fixtures.*tests/is);

19 strict_1.default.match(content, /stage/i);

20 strict_1.default.match(content, /stop.*test authorization/is);

21 strict_1.default.match(content, /apply.*approved.*decision.*before.*test/is);

22 strict_1.default.match(content, /sandbox test/i);

23 strict_1.default.match(content, /stop.*final.*approval/is);

24 strict_1.default.match(content, /apply.*approved.*decision.*before.*Automation/is);

25 strict_1.default.match(content, /create.*Automation/is);

26 strict_1.default.match(content, /Do not write.*managed script directory/i);

27 strict_1.default.doesNotMatch(content, /automations\/scripts\/[^\s]+\/(?:sha|hash)/i);

28 const helper = (0, node_fs_1.readFileSync)((0, node_path_1.join)(process.cwd(), 'electron', 'managed-skills', 'condition-trigger', 'scripts', 'register-condition-trigger.sh'), 'utf8');

29 strict_1.default.match(helper, /lac script stage --script/);

30 strict_1.default.match(helper, /lac script create --title/);

dist-electron/services/local-ai-core/src/automation/scripts/anthropic-sandbox-runner.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.isPrivateNetworkAddress = exports.AnthropicSandboxRunner = exports.buildSandboxConfig = exports.SandboxUnavailableError = exports.PRIVATE_NETWORK_DENY_HOSTS

dist-electron/tests/integration/lark-gateway.test.jsView file

Lines 1-25javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.

dist-electron/electron/main.jsView file

Lines 1-23javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const electron_1 = require("electron");

4const node_child_process_1 = require("node:child_process");

5const

dist-electron/tests/electron/knowledge-skill-script.test.jsView file

Lines 1-27javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

dist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.shView file

•path = dist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.sh kind = build_helper sizeBytes = 309 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.shView on unpkg

Source & flagged code

7 flagged · loading source

dist-electron/tests/electron/condition-trigger-skill.test.jsView file

10const node_os_1 = require("node:os"); L11: const node_child_process_1 = require("node:child_process"); L12: const managed_skill_catalog_js_1 = require("../../services/local-ai-core/src/runtime/managed-sk[redacted]");

High

Child Process

Package source references child process execution.

dist-electron/tests/electron/condition-trigger-skill.test.jsView on unpkg · L10

dist-electron/services/local-ai-core/src/automation/scripts/anthropic-sandbox-runner.jsView file

2Object.defineProperty(exports, "__esModule", { value: true }); L3: exports.isPrivateNetworkAddress = exports.AnthropicSandboxRunner = exports.buildSandboxConfig = exports.SandboxUnavailableError = exports.PRIVATE_NETWORK_DENY_HOSTS = void 0; L4: exports.buildSandboxRuntimeConfig = buildSandboxRuntimeConfig; L5: exports.createAnthropicSandboxRunner = createAnthropicSandboxRunner; L6: const node_child_process_1 = require("node:child_process"); L7: const promises_1 = require("node:dns/promises"); L8: const node_fs_1 = require("node:fs"); ... L83: function buildSandboxRuntimeConfig(input) { L84: const cwd = input.cwd || input.workspacePath || process.cwd(); L85: const packagePath = absolutePath(input.packagePath || input.packageRoot || cwd); ... L160: constructor(options = {}) { L161: this.platform = normalizePlatform(options.platform || process.platform);

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist-electron/services/local-ai-core/src/automation/scripts/anthropic-sandbox-runner.jsView on unpkg · L2

432// Function avoids transpiling this call to require(), since ASRT is ESM. L433: const dynamicImport = new Function('specifier', 'return import(specifier)'); L434: const module = await dynamicImport('@anthropic-ai/sandbox-runtime');

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist-electron/services/local-ai-core/src/automation/scripts/anthropic-sandbox-runner.jsView on unpkg · L432

dist-electron/tests/integration/lark-gateway.test.jsView file

5Object.defineProperty(exports, "__esModule", { value: true }); L6: const node_test_1 = __importDefault(require("node:test")); L7: const strict_1 = __importDefault(require("node:assert/strict"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist-electron/tests/integration/lark-gateway.test.jsView on unpkg · L5

dist-electron/electron/main.jsView file

3Manifest entrypoint (manifest.main) carries capability families absent from dist/build output: environment+network, execution+network L3: const electron_1 = require("electron"); L4: const node_child_process_1 = require("node:child_process"); L5: const node_fs_1 = require("node:fs"); L6: const node_net_1 = require("node:net"); L7: const node_path_1 = require("node:path"); ... L10: let localCoreStartupPromise = null; L11: const userDataOverride = process.env.AI_WORKSTATION_USER_DATA_DIR?.trim(); L12: const smokeOutputPath = process.env.AI_WORKSTATION_SMOKE_OUTPUT?.trim(); ... L73: } L74: return response.json(); L75: } ... L131: icon: (0, node_fs_1.existsSync)(iconPath) ? iconPath : undefined,

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-electron/electron/main.jsView on unpkg · L3

dist-electron/tests/electron/knowledge-skill-script.test.jsView file

7const strict_1 = __importDefault(require("node:assert/strict")); L8: const node_http_1 = require("node:http"); L9: const node_child_process_1 = require("node:child_process"); L10: const node_path_1 = require("node:path"); ... L16: env: { L17: ...process.env, L18: ...env,

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist-electron/tests/electron/knowledge-skill-script.test.jsView on unpkg · L7

dist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.shView file

•path = dist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.sh kind = build_helper sizeBytes = 309 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.shView on unpkg

Findings

5 High5 Medium5 Low

HighChild Processdist-electron/tests/electron/condition-trigger-skill.test.js

HighShell

HighEntrypoint Build Divergencedist-electron/electron/main.js

HighSame File Env Network Executiondist-electron/tests/electron/knowledge-skill-script.test.js

HighCloud Metadata Accessdist-electron/services/local-ai-core/src/automation/scripts/anthropic-sandbox-runner.js

MediumDynamic Requiredist-electron/tests/integration/lark-gateway.test.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist-electron/services/local-ai-core/src/automation/scripts/anthropic-sandbox-runner.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist-electron/tests/electron/condition-trigger-skill.test.jsView file

Lines 1-30javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty(exports, "__esModule", { value: true });

6const node_test_1 = __importDefault(require("node:test"));

7const strict_1 = __importDefault(require("node:assert/strict"));

8const node_fs_1 = require("node:fs");

9const node_path_1 = require("node:path");

10const node_os_1 = require("node:os");

11const node_child_process_1 = require("node:child_process");

12const managed_skill_catalog_js_1 = require("../../services/local-ai-core/src/runtime/managed-skill-catalog.js");

High

Child Process

Package source references child process execution.

dist-electron/tests/electron/condition-trigger-skill.test.jsView on unpkg · L10

13const sourceSkillPath = (0, node_path_1.join)(process.cwd(), 'electron', 'managed-skills', 'condition-trigger', 'SKILL.md');

14(0, node_test_1.default)('condition trigger skill requires the staged two-approval workflow and helper owns exact LAC requests', () => {

15 const content = (0, node_fs_1.readFileSync)(sourceSkillPath, 'utf8');

16 strict_1.default.match(content, /temporary source bundle/i);

17 strict_1.default.match(content, /create.*Automation Script.*record/is);

18 strict_1.default.match(content, /manifest\.json.*entrypoint.*fixtures.*tests/is);

19 strict_1.default.match(content, /stage/i);

20 strict_1.default.match(content, /stop.*test authorization/is);

21 strict_1.default.match(content, /apply.*approved.*decision.*before.*test/is);

22 strict_1.default.match(content, /sandbox test/i);

23 strict_1.default.match(content, /stop.*final.*approval/is);

24 strict_1.default.match(content, /apply.*approved.*decision.*before.*Automation/is);

25 strict_1.default.match(content, /create.*Automation/is);

26 strict_1.default.match(content, /Do not write.*managed script directory/i);

27 strict_1.default.doesNotMatch(content, /automations\/scripts\/[^\s]+\/(?:sha|hash)/i);

28 const helper = (0, node_fs_1.readFileSync)((0, node_path_1.join)(process.cwd(), 'electron', 'managed-skills', 'condition-trigger', 'scripts', 'register-condition-trigger.sh'), 'utf8');

29 strict_1.default.match(helper, /lac script stage --script/);

30 strict_1.default.match(helper, /lac script create --title/);

dist-electron/services/local-ai-core/src/automation/scripts/anthropic-sandbox-runner.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.isPrivateNetworkAddress = exports.AnthropicSandboxRunner = exports.buildSandboxConfig = exports.SandboxUnavailableError = exports.PRIVATE_NETWORK_DENY_HOSTS

dist-electron/tests/integration/lark-gateway.test.jsView file

Lines 1-25javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.

dist-electron/electron/main.jsView file

Lines 1-23javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const electron_1 = require("electron");

4const node_child_process_1 = require("node:child_process");

5const

dist-electron/tests/electron/knowledge-skill-script.test.jsView file

Lines 1-27javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

dist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.shView file

•path = dist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.sh kind = build_helper sizeBytes = 309 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist-electron/electron/managed-skills/agent-browser/templates/capture-workflow.shView on unpkg