registry / @sofagent/audit / 1.0.2

@sofagent/audit@1.0.2

sofagent 提交时审计——扫描 git diff，检查 Agent 是否遵守工作纪律

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 51 file(s), 293 KB of source, external domains: github.com, nodejs.org, registry.npmjs.org

Source & flagged code

3 flagged

dist/env-check.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2"use strict";

3// env-check.ts · FDE 环境验证 CLI — v1.0.2

4// 用法: sofagent-env-check [--json]

5Object.defineProperty(exports, "__esModule", { value: true });

6exports.checkEnv = checkEnv;

7const child_process_1 = require("child_process");

8const fs_1 = require("fs");

High

Child Process

Package source references child process execution.

dist/env-check.jsView on unpkg · L6

9const path_1 = require("path");

10const os_1 = require("os");

11const constants_js_1 = require("./shared/constants.js");

12const R = '\x1b[31m', G = '\x1b[32m', Y = '\x1b[33m', N = '\x1b[0m', D = '\x1b[2m';

13const C = (ok) => ok ? `${G}✓${N}` : `${R}✗${N}`;

14function checkEnv() {

15 const nodeVersion = process.version;

16 const nodeMajor = parseInt(nodeVersion.slice(1).split('.')[0], 10);

17 let gitAvail = false, gitRepo = false;

18 try {

19 (0, child_process_1.execFileSync)('git', ['--version'], { stdio: 'pipe' });

20 gitAvail = true;

21 }

22 catch { /* */ }

23 if (gitAvail) {

24 try {

25 (0, child_process_1.execFileSync)('git', ['rev-parse', '--git-dir'], { stdio: 'pipe' });

26 gitRepo = true;

dist/rules/skill-safety-rules.jsView file

Lines 16-56javascript

16 // === 恶意命令 (DANGEROUS) ===

17 { pattern: /(^|[^a-zA-Z0-9_])rm\s+-rf\s+\//, category: '恶意命令', severity: 'DANGEROUS', description: 'rm -rf / 危险删除' },

18 { pattern: /curl

dist/verify/checks.jsView file

Lines 280-320javascript

280 else {

281 v.checkWarn('handler.ts 回归：sofagent-load-chain hook 在最近日志中未检测到触发');

282 }

283 }

284 else {

285 v.checkWarn('handler.ts 回归：最近 30 天无 OpenClaw 日志，跳过');

286 }

287 }

288

Source & flagged code

3 flagged · loading source

dist/env-check.jsView file

6exports.checkEnv = checkEnv; L7: const child_process_1 = require("child_process"); L8: const fs_1 = require("fs");

High

Child Process

Package source references child process execution.

dist/env-check.jsView on unpkg · L6

dist/rules/skill-safety-rules.jsView file

36// === 危险调用 (SUSPICIOUS) === L37: { pattern: /eval$.*[^0-9"'].*$/, category: '危险调用', severity: 'SUSPICIOUS', description: 'eval() 非常量参数' }, L38: { pattern: /os\.system\(/, category: '危险调用', severity: 'SUSPICIOUS', description: 'os.system() 系统调用' },

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/rules/skill-safety-rules.jsView on unpkg · L36

dist/verify/checks.jsView file

300// ao compose 健康检查 L301: const aoComposeOut = (0, utils_js_1.tryExec)('ao', ['compose', '--version']); L302: if (aoComposeOut) { ... L314: if (aoMajor === 0 && (aoMinor < 7 || (aoMinor === 7 && aoPatch < 5))) { L315: v.checkWarn(`ao 版本低于 0.7.5（当前 ${aoVer}），建议升级：npm install -g agency-orchestrator@0.7.5`); L316: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/verify/checks.jsView on unpkg · L300

Findings

2 High3 Medium6 Low

HighChild Processdist/env-check.js

HighRuntime Package Installdist/verify/checks.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/rules/skill-safety-rules.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/env-check.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2"use strict";

3// env-check.ts · FDE 环境验证 CLI — v1.0.2

4// 用法: sofagent-env-check [--json]

5Object.defineProperty(exports, "__esModule", { value: true });

6exports.checkEnv = checkEnv;

7const child_process_1 = require("child_process");

8const fs_1 = require("fs");

High

Child Process

Package source references child process execution.

dist/env-check.jsView on unpkg · L6

9const path_1 = require("path");

10const os_1 = require("os");

11const constants_js_1 = require("./shared/constants.js");

12const R = '\x1b[31m', G = '\x1b[32m', Y = '\x1b[33m', N = '\x1b[0m', D = '\x1b[2m';

13const C = (ok) => ok ? `${G}✓${N}` : `${R}✗${N}`;

14function checkEnv() {

15 const nodeVersion = process.version;

16 const nodeMajor = parseInt(nodeVersion.slice(1).split('.')[0], 10);

17 let gitAvail = false, gitRepo = false;

18 try {

19 (0, child_process_1.execFileSync)('git', ['--version'], { stdio: 'pipe' });

20 gitAvail = true;

21 }

22 catch { /* */ }

23 if (gitAvail) {

24 try {

25 (0, child_process_1.execFileSync)('git', ['rev-parse', '--git-dir'], { stdio: 'pipe' });

26 gitRepo = true;

dist/rules/skill-safety-rules.jsView file

Lines 16-56javascript

16 // === 恶意命令 (DANGEROUS) ===

17 { pattern: /(^|[^a-zA-Z0-9_])rm\s+-rf\s+\//, category: '恶意命令', severity: 'DANGEROUS', description: 'rm -rf / 危险删除' },

18 { pattern: /curl

dist/verify/checks.jsView file

Lines 280-320javascript

280 else {

281 v.checkWarn('handler.ts 回归：sofagent-load-chain hook 在最近日志中未检测到触发');

282 }

283 }

284 else {

285 v.checkWarn('handler.ts 回归：最近 30 天无 OpenClaw 日志，跳过');

286 }

287 }

288