registry / @qlingzzy/qling / 1.2.1

@qlingzzy/qling@1.2.1

轻灵 Qling - 本地优先的中文 AI Agent CLI 工作台 / Local-first Chinese AI Agent CLI workbench

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 217 file(s), 1.24 MB of source, external domains: 127.0.0.1, api.deepseek.com, api.example.com, api.minimaxi.com, api.moonshot.cn, api.openai.com, api.siliconflow.cn, api.telegram.org, api.xiaomimimo.com, api.xxx.com, dashscope.aliyuncs.com, example.com, github.com, nextjs.org, nodejs.org, open.bigmodel.cn, playwright.dev, registry.npmjs.org, slack.com, token-plan-cn.xiaomimimo.com

Source & flagged code

6 flagged

dist/tools/bash.jsView file

Lines 1-35javascript

1// ============================================================

2// 轻灵 - bash 工具 v3

3// - exec → spawn（非阻塞父进程）

4// - 超时自动 kill

5// - stdout/stderr 正确路由（避免 NotADirectoryError）

6// ============================================================

7import { spawn, execFileSync } from "child_process";

8import { stat } from "fs/promises"

Source & flagged code

6 flagged · loading source

dist/tools/bash.jsView file

6// ============================================================ L7: import { spawn, execFileSync } from "child_process"; L8: import { stat } from "fs/promises";

High

Child Process

Package source references child process execution.

dist/tools/bash.jsView on unpkg · L6

15description: "Execute shell commands (git, npm, opencli, file ops). For Douyin/Xiaohongshu/Weibo/etc. run opencli after skill name=opencli; prefer opencli … -f json. Not for raw fe... L16: longDescription: `执行 shell 命令的万能工具。**Linux**: 通过 /bin/sh 执行。**Windows**: 通过 cmd.exe 执行（而非 PowerShell）。 L17: **重要 - Windows 用户**：Windows 上请使用标准的 cmd.exe 命令（dir, type, copy, del 等），不要使用 PowerShell 独有语法（Invoke-WebRequest 等）。cmd.exe 不支持 PowerShell cmdlet。

High

Shell

Package source references shell execution.

dist/tools/bash.jsView on unpkg · L15

dist/memory/wal.jsView file

52try { L53: const entry = JSON.parse(trimmed); L54: if (entry.seq >= fromSeq) { ... L92: } L93: // --- Private --- L94: computeChecksum(seq, op, data) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/memory/wal.jsView on unpkg · L52

scripts/build-portable-win.mjsView file

13*/ L14: import { spawnSync, execFileSync } from "node:child_process"; L15: import { createHash } from "node:crypto"; ... L27: import { pipeline } from "node:stream/promises"; L28: import { get } from "node:https"; L29: L30: const __dirname = dirname(fileURLToPath(import.meta.url)); L31: const ROOT = resolve(__dirname, ".."); ... L36: L37: const pkg = JSON.parse(await readFile(join(ROOT, "package.json"), "utf8")); L38: const version = pkg.version; ... L43: console.log(`[portable] building qling ${version} for win-x64…`);

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/build-portable-win.mjsView on unpkg · L13

146npm alternative: L147: npm install -g @qlingzzy/qling@${version} --registry https://registry.npmjs.org/ L148: ... L153: await rm(ZIP_PATH, { force: true }); L154: execFileSync("tar", ["-a", "-cf", ZIP_PATH, "-C", OUT_DIR, "qling-win-x64"], { L155: stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/build-portable-win.mjsView on unpkg · L146

scripts/check_image.ps1View file

•path = scripts/check_image.ps1 kind = build_helper sizeBytes = 738 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/check_image.ps1View on unpkg

Findings

4 High4 Medium6 Low

HighChild Processdist/tools/bash.js

HighShelldist/tools/bash.js

HighSandbox Evasion Gated Capabilityscripts/build-portable-win.mjs

HighRuntime Package Installscripts/build-portable-win.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/check_image.ps1

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/memory/wal.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

dist/memory/wal.jsView file

Lines 32-72javascript

32 timestamp: Date.now(),

33 data,

34 checksum: this.computeChecksum(this.state.lastSeq, op, data),

35 };

36 const line = JSON.stringify(entry) + "\n";

37 await fs.appendFile(this.walPath, line, "utf-8");

38 await this.saveState();

39 return this.state.lastSeq;

40 }

41 async readEntries(fromSeq) {

42 if (!fsSync.existsSync(this.walPath))

43 return [];

44 const raw = await fs.readFile(this.walPath, "utf-8");

45 if (!raw.trim())

46 return [];

47 const entries = [];

48 for (const line of raw.split("\n")) {

49 const trimmed = line.trim();

50 if (!trimmed)

51 continue;

52 try {

53 const entry = JSON.parse(trimmed);

54 if (entry.seq >= fromSeq) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/memory/wal.jsView on unpkg · L52

55 if (!this.verifyChecksum(entry)) {

56 console.error(`[WAL] checksum mismatch on seq=${entry.seq}, skipping`);

57 continue;

58 }

59 entries.push(entry);

60 }

61 }

62 catch {

63 // skip corrupted lines

64 }

65 }

66 return entries.sort((a, b) => a.seq - b.seq);

67 }

68 async checkpoint(checkpointData) {

69 if (!this.initialized)

70 throw new Error("WAL not initialized");

71 const checkpointPath = path.join(path.dirname(this.walPath), "memory.json");

72 await fs.writeFile(checkpointPath, JSON.stringify(checkpointData, null, 2), "utf-8");

scripts/build-portable-win.mjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * Build a Windows portable zip that embeds a Node.js runtime (no system Node required).

4 * Usage: node scripts/build-portable-win.mjs [--skip-node]

5 *

6 * Output: dist-portable/qling-win-x64.zip

7 * Layout:

8 * qling-win-x64/

9 * runtime/node.exe # bundled Node (same major as build host by default)

10 * package/ # npm pack contents

11 * qling.cmd # launcher → runtime\node.exe package\dist\index.js

12 * README.txt

13 */

14import { spawnSync, execFileSync } from "node:child_process";

15import { createHash } from "node:crypto";

16import {

17 mkdir,

18 rm,

19 readFile,

20 writeFile,

21 copyFile,

22 access,

23} from "node:fs/promises";

24import { createWriteStream, existsSync } from "node:fs";

25import { join, dirname, resolve } from "node:path";

26import { fileURLToPath } from "node:url";

27import { pipeline } from "node:stream/promises";

28import { get } from "node:https";

30const __dirname = dirname(fileURLToPath(import.meta.url));

31const ROOT = resolve(__dirname, "..");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/build-portable-win.mjsView on unpkg · L13

32const OUT_DIR = join(ROOT, "dist-portable");

33const STAGE = join(OUT_DIR, "qling-win-x64");

Lines 126-166javascript

126`;

127await writeFile(join(STAGE, "qling.cmd"), launcher, "utf8");

128

129const readme = `Qling ${version} — Windows portable layout

130========================================

131

132${bundledNode ? "This build embeds a Node.js runtime — no system Node install required." : "This build expects system Node.js >= 18 on PATH."}

133

134Runtime:

135 ${nodeNote}

136

137Run: