registry / @luoyi-dsh/instagram-plugin / 1.0.8
@luoyi-dsh/instagram-plugin@1.0.8
DeepSeek Harness (DSH) Instagram 插件：背景標籤巡查推薦、被@提問上下文推理應答與私訊雙向互動
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged credential flows use configurable model API endpoints or the matching Google and xAI provider endpoints. The package’s scheduled reply behavior is part of its stated purpose, though DM replies are enabled by default.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
LLM requests from configured duties or an explicit connection test; scheduled duties run when enabled and the Instagram MCP client is ready.
Impact
Expected model inference and Instagram reply automation; no unrelated credential destination or concealed collection was found.
Mechanism
Reads configured API keys or subscription tokens and sends them with prompts to the configured API or the matching provider API.
AI rationale
The flagged credential flows use configurable model API endpoints or the matching Google and xAI provider endpoints. The package’s scheduled reply behavior is part of its stated purpose, though DM replies are enabled by default.
Evidence
~/.dsh/.credentials.yaml~/.dsh/plugins/subscriptions/auth.json../dsh-discord-plugin/data/config.json
Network endpoints5
api.deepseek.comdaily-cloudcode-pa.googleapis.comcloudcode-pa.googleapis.comoauth2.googleapis.comapi.x.ai
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes an Instagram automation plugin and exposes its plugin entry point.
- Custom API keys are sent to a configurable OpenAI-compatible API base, defaulting to api.deepseek.com.
- Subscription credentials are loaded for provider integrations and sent to the corresponding Google or xAI API endpoints.
- Background DM and mention reply duties are gated by plugin configuration and are part of the stated Instagram automation purpose.
Evidence against
- DM replies are enabled by default and scheduled every three minutes once the Instagram MCP client is ready.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedclient.jsView file
17factory: (require) => {
L18: const React = require('react')
L19: const h = React.createElement
Medium
Dynamic Require
Package source references dynamic require/import behavior.
client.jsView on unpkg · L17dist/lib/llm.jsView file
101try {
L102: const home = process.env.DSH_HOME || join(process.env.USERPROFILE || process.env.HOME || '', '.dsh');
L103: const authPath = join(home, 'plugins', 'subscriptions', 'auth.json');
L104: if (existsSync(authPath)) {
L105: const data = JSON.parse(readFileSync(authPath, 'utf-8'));
L106: const list = [];
...
L213: const timer = setTimeout(() => controller.abort(), 6000);
L214: const resp = await fetch(url, {
L215: headers: { 'User-Agent': 'Mozilla/5.0' },
...
L226: return {
L227: inlineData: {
L228: mimeType,
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/lib/llm.jsView on unpkg · L101101Trigger-reachable chain: manifest.main -> dist/index.js -> dist/lib/llm.js
L101: try {
L102: const home = process.env.DSH_HOME || join(process.env.USERPROFILE || process.env.HOME || '', '.dsh');
L103: const authPath = join(home, 'plugins', 'subscriptions', 'auth.json');
L104: if (existsSync(authPath)) {
L105: const data = JSON.parse(readFileSync(authPath, 'utf-8'));
L106: const list = [];
...
L213: const timer = setTimeout(() => controller.abort(), 6000);
L214: const resp = await fetch(url, {
L215: headers: { 'User-Agent': 'Mozilla/5.0' },
...
L226: return {
L227: inlineData: {
L228: mimeType,
Findings
2 Critical1 High4 Medium5 Low
CriticalCredential Exfiltrationdist/lib/llm.js
CriticalTrigger Reachable Dangerous Capabilitydist/lib/llm.js
HighTrigger Reachable Credential Exfiltrationdist/lib/llm.js
MediumDynamic Requireclient.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @luoyi-dsh/instagram-plugin@1.0.8.
See all versions of @luoyi-dsh/instagram-plugin for other recorded verdicts.
- Review the evidence and your use of @luoyi-dsh/instagram-plugin@1.0.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.