registry / aims-workstation / 0.1.9
aims-workstation@0.1.9
⚠ Under reviewAIMS 工作站：本地智能体工作站——ARM 助手本地化（下载/离线/升级）、工作台对话式定制、多工作区隔离、分级自主与审计
Static Scan Results
scanned 14d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
3 flaggedscripts/check-panel.mjsView file
20try {
L21: const factory = new Function('React', 'html', 'useState', 'useEffect', 'useRef', 'useMemo',
L22: `"use strict";\n${code}\n;if (typeof Panel !== 'function') throw new Error('no Panel');\nreturn Panel;`);
Low
Eval
Package source references a known benign dynamic code generation pattern.
scripts/check-panel.mjsView on unpkg · L20server.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
server.js:
if (s.includes(oldP)) fs.writeFileSync(reg, s.split(oldP).join(newP));
function saveCfg() { fs.writeFileSync(CFG_FILE, JSON.stringify(cfg, null, 2)); }
// LLM：OpenAI 兼容端点（baseUrl/模型/密钥），缺省公司内网 bifrost 网关（内网可达即可用，无需配置）
const llmBaseUrl = () => cfg.llm_base_url || env.LLM_BASE_URL || LLM_DEFAULT_BASE;
return req.headers.authorization === `Bearer ${accessToken()}`;
const base = llmBaseUrl(), key = llmApiKey(), name = llmModelName();
// 官方模型条目为模板（compat/thinkingLevelMap 等字段不自行猜测）；任意模型名按 glm-5.3 克隆；条目 baseUrl 一并改写
const entries = zaiCodingCnProvider().getModels().map((m) => ({ ...m, provider: 'platform-llm', baseUrl: base }));
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
Findings
1 High4 Medium6 Low
HighCredential Redirect Persistenceserver.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/publish-npm.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalscripts/check-panel.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to aims-workstation@0.1.9.
See all versions of aims-workstation for other recorded verdicts.
- Review the evidence and your use of aims-workstation@0.1.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.