registry / dsh-volcengine-provider / 0.2.6
dsh-volcengine-provider@0.2.6
火山方舟 Agent Plan 与 Coding Plan：OAuth 登录、账号、模型与额度管理。
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package has no install hook, and its inspected credential, browser, and network behavior fits the stated Volcengine provider functions. The Windows browser bridge binary was unreadable to the provided analyzer, but its caller and login flow provide no indication of malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
Plugin initialization loads local account metadata; login and quota requests are initiated through package functionality.
Impact
No unauthorized data collection or account action was identified in the inspected source.
Mechanism
Credentials are resolved through the host credential service or isolated ArkCli account storage. Login URLs are restricted to the official Ark host, and quota requests target the fixed Volcengine API host.
AI rationale
The package has no install hook, and its inspected credential, browser, and network behavior fits the stated Volcengine provider functions. The Windows browser bridge binary was unreadable to the provided analyzer, but its caller and login flow provide no indication of malicious behavior.
Evidence
~/.dsh/dsh-volcengine-provider/state.json<state directory>/accounts/<account id>/sessions/<session id>
Network endpoints3
ark.volcengine.comopen.volcengineapi.com127.0.0.1
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install, preinstall, or postinstall hook; its scripts are build, test, and check commands.
- Plugin initialization loads account metadata and resolves credential references through the host credential service.
- OAuth browser login is started through the UI and restricts the login URL to the official Ark host and path.
- Quota requests use the fixed Volcengine API host; the browser bridge forwards the approved URL only to authenticated loopback IPC.
Evidence against
- The package uses credentials, network requests, filesystem writes, and a native browser bridge, but the inspected source ties these to account setup, quota queries, or explicit login.
- The shipped Windows bridge binary could not be analyzed by the provided artifact viewer; its JavaScript caller uses it as a browser URL opener during login.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggedlib/browser-bridge/win32/rundll32.exeView file
•path = lib/browser-bridge/win32/rundll32.exe
kind = native_binary
sizeBytes = 5632
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
lib/browser-bridge/win32/rundll32.exeView on unpkgcordis.patch.ymlView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
cordis.patch.ymlView on unpkgpackage.jsonView file
Findings
1 High4 Medium7 Low
HighSemantic Analysis Limitedcordis.patch.yml
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarylib/browser-bridge/win32/rundll32.exe
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencelib/index.mjs
LowAi Review Evidencelib/oauth-browser.mjs
Affected versions and remediation
This report applies to dsh-volcengine-provider@0.2.6.
See all versions of dsh-volcengine-provider for other recorded verdicts.
- Review the evidence and your use of dsh-volcengine-provider@0.2.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.