registry / dsh-volcengine-provider / 0.2.7
dsh-volcengine-provider@0.2.7
火山方舟 Agent Plan 与 Coding Plan：OAuth 登录、账号、模型与额度管理。
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe reviewed runtime behavior fits a Volcengine provider: credentials are resolved through the host, quota requests target Volcengine, and OAuth requires an explicit login operation. The Windows bridge binary could not be inspected, but its caller confines it to the login flow and the package describes it as a generated browser bridge.
Static reason
No blocking static signals were detected.
Trigger
Provider initialization loads saved state; quota queries, account changes, and OAuth login are requested through the client interface.
Impact
No unauthorized credential disclosure, account action, install-time contact, or unrelated execution was identified.
Mechanism
Quota credentials are used for signed requests to Volcengine’s fixed API host. OAuth uses an isolated ArkCli environment and a loopback bridge that accepts approved login URLs.
AI rationale
The reviewed runtime behavior fits a Volcengine provider: credentials are resolved through the host, quota requests target Volcengine, and OAuth requires an explicit login operation. The Windows bridge binary could not be inspected, but its caller confines it to the login flow and the package describes it as a generated browser bridge.
Evidence
lib/index.mjslib/manager.mjslib/cli.mjslib/quota.mjslib/oauth.mjslib/browser-bridge.mjslib/browser-bridge/win32/rundll32.exe
Network endpoints4
open.volcengineapi.comark.cn-beijing.volces.comark.volcengine.com127.0.0.1
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exports a host plugin and browser client, with no install lifecycle hook shown in its manifest.
- The plugin reads credentials through the host credential service and stores account metadata under its configured state path.
- Account and login operations are handled through explicit client requests; OAuth starts only on a startLogin request.
- Quota requests use the fixed Volcengine API host and signed credentials for the package’s stated quota feature.
- The ArkCli environment removes inherited cloud credential variables before launching an isolated login flow.
- The Windows bridge is invoked as part of browser setup and relays an approved login URL over authenticated loopback IPC.
Evidence against
- The shipped Windows rundll32.exe could not be analyzed by the provided binary inspection; package documentation describes it as a generated browser bridge, and its caller limits use to login setup.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
5 flaggedlib/browser-bridge/win32/rundll32.exeView file
•path = lib/browser-bridge/win32/rundll32.exe
kind = native_binary
sizeBytes = 5632
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
lib/browser-bridge/win32/rundll32.exeView on unpkgcordis.patch.ymlView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
cordis.patch.ymlView on unpkgpackage.jsonView file
Findings
1 High4 Medium7 Low
HighSemantic Analysis Limitedcordis.patch.yml
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarylib/browser-bridge/win32/rundll32.exe
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencelib/index.mjs
LowAi Review Evidencelib/manager.mjs
Affected versions and remediation
This report applies to dsh-volcengine-provider@0.2.7.
See all versions of dsh-volcengine-provider for other recorded verdicts.
- Review the evidence and your use of dsh-volcengine-provider@0.2.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.