registry / @qlingzzy/qling / 1.2.1

@qlingzzy/qling@1.2.1

轻灵 Qling - 本地优先的中文 AI Agent CLI 工作台 / Local-first Chinese AI Agent CLI workbench

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 217 file(s), 1.24 MB of source, external domains: 127.0.0.1, api.deepseek.com, api.example.com, api.minimaxi.com, api.moonshot.cn, api.openai.com, api.siliconflow.cn, api.telegram.org, api.xiaomimimo.com, api.xxx.com, dashscope.aliyuncs.com, example.com, github.com, nextjs.org, nodejs.org, open.bigmodel.cn, playwright.dev, registry.npmjs.org, slack.com, token-plan-cn.xiaomimimo.com

Source & flagged code

6 flagged

dist/tools/bash.jsView file

Lines 1-35javascript

1// ============================================================

2// 轻灵 - bash 工具 v3

3// - exec → spawn（非阻塞父进程）

4// - 超时自动 kill

5// - stdout/stderr 正确路由（避免 NotADirectoryError）

6// ============================================================

7import { spawn, execFileSync } from "child_process";

8import { stat } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/tools/bash.jsView on unpkg · L6

9import { toolError, toolSuccess } from "./error-utils.js";

10import { getRuntimeRootsFromEnv, isWithinAllowedRoots, resolveToolPath } from "../runtime-paths.js";

11const MAX_COMMAND_LENGTH = 5000;

12const MAX_OUTPUT_BYTES = 1024 * 1024; // 1MB per stream

13export const bashTool = {

14 name: "bash",

16 longDescription: `执行 shell 命令的万能工具。**Linux**: 通过 /bin/sh 执行。**Windows**: 通过 cmd.exe 执行（而非 PowerShell）。

17**重要 - Windows 用户**：Windows 上请使用标准的 cmd.exe 命令（dir, type, copy, del 等），不要使用 PowerShell 独有语法（Invoke-WebRequest 等）。cmd.exe 不支持 PowerShell cmdlet。

High

Shell

Package source references shell execution.

dist/tools/bash.jsView on unpkg · L15

18**Linux 用户**：通过 /bin/sh 执行标准 POSIX 命令。

20**使用场景**:

21- git 操作（git add, git commit, git push）

22- npm/node 命令（npm install, node scripts）

23- **opencli**（本机已安装时）：opencli list / opencli douyin search … -f json（先 skill name="opencli"）

24- 文件操作（ls, cp, mv, mkdir）

25- 进程管理（ps, kill, pgrep）

26- 网络工具（curl, wget, ping）— 强反爬社交站不要用 curl 硬抓

27- 编译构建（make, gcc, cargo）

29**注意事项**:

30- rm -rf 等危险操作会被 Hook 拦截并要求确认

31- Windows 下需要通过 cmd.exe /c 执行

32- 长时间运行的命令建议设置 timeout

33- opencli 写操作（delete/publish）须用户确认`,

34 parameters: {

35 type: "object",

dist/memory/wal.jsView file

Lines 32-72javascript

32 timestamp: Date.now(),

33 data,

34 checksum: this.computeChecksum(this.state.lastSeq, op, data),

35 };

36 const line = JSON.stringify(entry) + "\n"

scripts/build-portable-win.mjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * Build a Windows portable zip that embeds a Node.js runtime (no system Node required).

4 * Usage: node scripts/build-portable-win.mjs [--skip-node]

5 *

6 * Output: dist-portable/qling-win-x64.zip

7 * Layout:

8 * qling-win-x64/

9 * runtime/node.exe # bundled Node (same major as build host by default)

10 * package/ # npm pack contents

11 * qling.cmd # launcher → runtime\node.exe package\dist\index.js

scripts/check_image.ps1View file

•path = scripts/check_image.ps1 kind = build_helper sizeBytes = 738 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check_image.ps1View on unpkg

Source & flagged code

6 flagged · loading source

dist/tools/bash.jsView file

6// ============================================================ L7: import { spawn, execFileSync } from "child_process"; L8: import { stat } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/tools/bash.jsView on unpkg · L6

15description: "Execute shell commands (git, npm, opencli, file ops). For Douyin/Xiaohongshu/Weibo/etc. run opencli after skill name=opencli; prefer opencli … -f json. Not for raw fe... L16: longDescription: `执行 shell 命令的万能工具。**Linux**: 通过 /bin/sh 执行。**Windows**: 通过 cmd.exe 执行（而非 PowerShell）。 L17: **重要 - Windows 用户**：Windows 上请使用标准的 cmd.exe 命令（dir, type, copy, del 等），不要使用 PowerShell 独有语法（Invoke-WebRequest 等）。cmd.exe 不支持 PowerShell cmdlet。

High

Shell

Package source references shell execution.

dist/tools/bash.jsView on unpkg · L15

dist/memory/wal.jsView file

52try { L53: const entry = JSON.parse(trimmed); L54: if (entry.seq >= fromSeq) { ... L92: } L93: // --- Private --- L94: computeChecksum(seq, op, data) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/memory/wal.jsView on unpkg · L52

scripts/build-portable-win.mjsView file

13*/ L14: import { spawnSync, execFileSync } from "node:child_process"; L15: import { createHash } from "node:crypto"; ... L27: import { pipeline } from "node:stream/promises"; L28: import { get } from "node:https"; L29: L30: const __dirname = dirname(fileURLToPath(import.meta.url)); L31: const ROOT = resolve(__dirname, ".."); ... L36: L37: const pkg = JSON.parse(await readFile(join(ROOT, "package.json"), "utf8")); L38: const version = pkg.version; ... L43: console.log(`[portable] building qling ${version} for win-x64…`);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/build-portable-win.mjsView on unpkg · L13

146npm alternative: L147: npm install -g @qlingzzy/qling@${version} --registry https://registry.npmjs.org/ L148: ... L153: await rm(ZIP_PATH, { force: true }); L154: execFileSync("tar", ["-a", "-cf", ZIP_PATH, "-C", OUT_DIR, "qling-win-x64"], { L155: stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/build-portable-win.mjsView on unpkg · L146

scripts/check_image.ps1View file

•path = scripts/check_image.ps1 kind = build_helper sizeBytes = 738 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check_image.ps1View on unpkg

Findings

4 High4 Medium6 Low

HighChild Processdist/tools/bash.js

HighShelldist/tools/bash.js

HighSandbox Evasion Gated Capabilityscripts/build-portable-win.mjs

HighRuntime Package Installscripts/build-portable-win.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/check_image.ps1

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/memory/wal.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/tools/bash.jsView file

Lines 1-35javascript

1// ============================================================

2// 轻灵 - bash 工具 v3

3// - exec → spawn（非阻塞父进程）

4// - 超时自动 kill

5// - stdout/stderr 正确路由（避免 NotADirectoryError）

6// ============================================================

7import { spawn, execFileSync } from "child_process";

8import { stat } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/tools/bash.jsView on unpkg · L6

9import { toolError, toolSuccess } from "./error-utils.js";

10import { getRuntimeRootsFromEnv, isWithinAllowedRoots, resolveToolPath } from "../runtime-paths.js";

11const MAX_COMMAND_LENGTH = 5000;

12const MAX_OUTPUT_BYTES = 1024 * 1024; // 1MB per stream

13export const bashTool = {

14 name: "bash",

16 longDescription: `执行 shell 命令的万能工具。**Linux**: 通过 /bin/sh 执行。**Windows**: 通过 cmd.exe 执行（而非 PowerShell）。

High

Shell

Package source references shell execution.

dist/tools/bash.jsView on unpkg · L15

18**Linux 用户**：通过 /bin/sh 执行标准 POSIX 命令。

20**使用场景**:

21- git 操作（git add, git commit, git push）

22- npm/node 命令（npm install, node scripts）

23- **opencli**（本机已安装时）：opencli list / opencli douyin search … -f json（先 skill name="opencli"）

24- 文件操作（ls, cp, mv, mkdir）

25- 进程管理（ps, kill, pgrep）

26- 网络工具（curl, wget, ping）— 强反爬社交站不要用 curl 硬抓

27- 编译构建（make, gcc, cargo）

29**注意事项**:

30- rm -rf 等危险操作会被 Hook 拦截并要求确认

31- Windows 下需要通过 cmd.exe /c 执行

32- 长时间运行的命令建议设置 timeout

33- opencli 写操作（delete/publish）须用户确认`,

34 parameters: {

35 type: "object",

dist/memory/wal.jsView file

Lines 32-72javascript

32 timestamp: Date.now(),

33 data,

34 checksum: this.computeChecksum(this.state.lastSeq, op, data),

35 };

36 const line = JSON.stringify(entry) + "\n"

scripts/build-portable-win.mjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * Build a Windows portable zip that embeds a Node.js runtime (no system Node required).

4 * Usage: node scripts/build-portable-win.mjs [--skip-node]

5 *

6 * Output: dist-portable/qling-win-x64.zip

7 * Layout:

8 * qling-win-x64/

9 * runtime/node.exe # bundled Node (same major as build host by default)

10 * package/ # npm pack contents

11 * qling.cmd # launcher → runtime\node.exe package\dist\index.js

scripts/check_image.ps1View file

•path = scripts/check_image.ps1 kind = build_helper sizeBytes = 738 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check_image.ps1View on unpkg