dskcode@0.1.55: Suspicious npm security report (Warn)

Flagged — allowed with a warning

Allowed by default policy, but 15 finding(s) warrant review before installing.

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Previous Version Dangerous Delta

Same File Env Network Execution

Command Output Exfiltration

Cross File Remote Execution Context

Source & flagged code

6 flagged

dist/chunk-FJL5WURJ.jsView file

Lines 1-11javascript

1import{d as v,e as y}from"./chunk-EEH2ZJA5.js";import{d as p}from"./chunk-LPD7BHH5.js";p();p();p();import{mkdir as H,readFile as K,writeFile as q}from"fs/promises";import{dirname

,source:i,config:{appId:r,accessKey:s,resourceId:o?.resourceId

2`,"utf8")}p();p();var a=class extends Error{constructor(t,r,s){super(t,s);this.kind=r;this.name="TransportError"}kind},u=class extends Error{constructor(t,r,s){super(`MCP server "${t}" \u542F\u52A8\u5931\u8D25\uFF1A${r}`,s);this.serverId=t;this.name="McpStartupError"}serverId};var w=class extends Error{constructor(e,t){super(e,t),this.name="McpProtocolError"}};p();import{spawn as G}from"child_process";import{existsSync as W}from"fs";import{isAbsolute as k}from"path";import{createInterface as O}from"readline";var z=3e3;function Y(o){return!(process.platform!=="win32"||k(o)||o.includes("/")||o.i ...

3`,n=>{n&&r(new a(`stdio write \u5931\u8D25\uFF1A${n.message}`,"io_error",{cause:n}))})?t():(s.once("drain",()=>t()),s.once("error",n=>{r(new a(`stdio write \u5931\u8D25\uFF1A${n.message}`,"io_error",{cause:n}))}))})}async*receive(){if(!this.#n)throw new a("stdio transport: \u672A\u521D\u59CB\u5316","io_error");if(this.#r)throw new a(`stdio transport: \u5B50\u8FDB\u7A0B\u542F\u52A8\u5931\u8D25\uFF08${this.#r.message}\uFF09`,"spawn_failed",{cause:this.#r});try{for(;;){let{value:e,done:t}=await this.#n.next();if(t){if(this.#r){let r=this.#r;throw new a(`stdio transport: \u5B50\u8FDB\u7A0B\u542F\u ...

High

Child Process

Package source references child process execution.

dist/chunk-FJL5WURJ.jsView on unpkg · L1

4\r

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-FJL5WURJ.jsView on unpkg · L1

5`?4:2;d=d.slice(f+V);let _=N(h);_&&this.#c(_)}}}catch(l){this.#i(new a(`http SSE \u9519\u8BEF\uFF1A${l.message}`,"io_error",{cause:l}))}finally{let l=N(d);l&&this.#c(l)}})();return}if(i.includes(E)){let n=await r.text();n.length>0&&this.#c(n);return}throw new a(`http transport: \u610F\u5916\u7684 Content-Type "${i}"`,"io_error")}async*receive(){for(;!this.#s;){if(this.#a){let t=this.#a;throw this.#a=null,t}if(this.#r.length>0){yield this.#r.shift();continue}let e=await new Promise(t=>{this.#o=t});if(this.#o=null,e.done)return;yield e.value}}async*receiveErr(){}async dispose(){this.#s||(this.#s ...

9`),r=o.indexOf("\r\r"),s=-1;return e!==-1&&(s=e),t!==-1&&(s===-1||t<s)&&(s=t),r!==-1&&(s===-1||r<s)&&(s=r),s}function N(o){let e=o.split(/\r\n|\n|\r/),t=[];for(let s of e)if(!s.startsWith(":")&&s.startsWith("data:")){let i=s.replace(/^data:\s?/,"");t.push(i)}if(t.length===0)return null;let r=t.join(`

10`);return r==="ping"?null:r}function $(o){let{serverId:e,settings:t}=o,r=t.timeout??o.globalTimeoutSeconds??60;if(v(t)&&y(t))throw new u(e,"MCP server \u4E0D\u80FD\u540C\u65F6\u4E3A stdio \u4E0E http\uFF1B\u8BF7\u4E8C\u9009\u4E00\uFF08\u79FB\u9664 command \u6216 url \u5B57\u6BB5\uFF09");if(!v(t)&&!y(t))throw new u(e,"MCP server \u914D\u7F6E\u7F3A\u5C11 command\uFF08stdio\uFF09\u6216 url\uFF08http\uFF09\u5B57\u6BB5");return v(t)?Z(e,t,r):ee(e,t,r)}function Z(o,e,t){try{return new M({command:e.command,args:e.args,env:e.env})}catch(r){throw r instanceof a?new u(o,r.message,{cause:r}):r}}function ...

11//# sourceMappingURL=chunk-FJL5WURJ.js.map

Long lines were clipped for display.

•matchType = previous_version_dangerous_delta matchedPackage = dskcode@0.1.44 matchedIdentity = npm:ZHNrY29kZQ:0.1.44 similarity = 0.556 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-FJL5WURJ.jsView on unpkg

dist/angular-ts-UGSD62EB.jsView file

Lines 1-2javascript

1import{a as t,b as a,c as n,d as s,e as r}from"./chunk-QJECRGEC.js";import{a as i}from"./chunk-HMJAMNJ2.js";import"./chunk-QJGESXXN.js";import"./chunk-QP24BTOT.js";import"./chunk-QQZDJQIZ.js";import{d as e}from"./chunk-LPD7BHH5.js";e();e();var p=Object.freeze(JSON.parse('{"injectTo":["source.ts.ng"],"injectionSelector":"L:source.ts#meta.decorator.ts -comment","name":"angular-inline-style","patterns":[{"include":"#inlineStyles"}],"repository":{"inlineStyles":{"begin":"(styles)\\\\s*(:)","beginCaptures":{"1":{"name":"meta.object-literal.key.ts"},"2":{"name":"meta.object-literal.key.ts punctuatio ...

2//# sourceMappingURL=angular-ts-UGSD62EB.js.map

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/angular-ts-UGSD62EB.jsView on unpkg · L1

Long lines were clipped for display.

dist/index.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import{a as wn,b as gl,c as Tn,d as _r,e as Mt,f as yl,h as xl}from"./chunk-V3LN4R4P.js";import{a as Tp}from"./chunk-XW3DXEJJ.js";import{a as hl,b as xp,c as go}from"./chunk-FJL5WURJ.js";import{a as je,b as qn,c as bl}from"./chunk-5Z3DMHRQ.js";import{a as wp}from"./chunk-5NFOBNG6.js";import{a as pp,b as fp,c as bn,f as mp,g as hp,h as gp,i as yp,k as kn}from"./chunk-EEH2ZJA5.js";import{a as bp,b as kp,c as Xs,f as Js}from"./chunk-O3L436MU.js";import{a as Ks}from"./chunk-XAWVLVWL.js";import{a as xx,b as dp,c as bx,d as p}from"./chunk-LPD7BHH5.js";var Lf=xx((DE,$f)=>{"use strict";p();var ql,{def ...

3`)?u.replace(/(\r?\n)/g,s+"$1"+o):u)+s};return Pf(i,b0(e)).p={t,o:n,p:e.p},i.open=o,i.close=s,i},If=new function e(t=globalThis){let n=typeof t=="number"?t:(E=>{let I=E.process??{},F=I.argv??[],M=

4`)}p();import{createInterface as _p}from"readline";import we from"chalk";function vp(e){return!!(e.some(t=>t.apiKey)||process.env.DEEPSEEK_API_KEY)}var kl=10;async function Rp(){console.log(we.yellow(`

5 \u26A0 \u672A\u68C0\u6D4B\u5230 API Key \u914D\u7F6E`)),console.log(we.dim(" \u4F60\u53EF\u4EE5\u901A\u8FC7\u4EE5\u4E0B\u4EFB\u4E00\u65B9\u5F0F\u914D\u7F6E\uFF1A")),console.log(we.dim(" \xB7 \u73AF\u5883\u53D8\u91CF: export DEEPSEEK_API_KEY=sk-xxx")),console.log(we.dim(" \xB7 \u914D\u7F6E\u6587\u4EF6: ~/.dskcode/settings.json")),console.log(we.dim(` \xB7 \u4E0B\u9762\u76F4\u63A5\u8F93\u5165\uFF0C\u81EA\u52A8\u4FDD\u5B58\u5230\u5168\u5C40\u914D\u7F6E

6`));let e=_p({input:process.stdin,output:process.stdout});return new Promise(t=>{let n=!1,r=()=>{n||(n=!0,process.stdin.removeListener("keypress",o),e.close())},o=(s,i)=>{i.ctrl&&i.name==="c"&&(r(),t(null))};process.stdin.on("keypress",o),e.question(` ${we.cyan("\u{1F511}")} ${we.bold("\u8BF7\u8F93\u5165\u4F60\u7684 DeepSeek API Key:")} `,s=>{r();let i=s.trim();if(!i){console.log(we.red(" \u2716 API Key \u4E0D\u80FD\u4E3A\u7A7A")),t(null);return}if(i.length<kl){console.log(we.red(" \u2716 API Key \u683C\u5F0F\u4E0D\u6B63\u786E\uFF0C\u957F\u5EA6\u81F3\u5C11 10 \u4F4D")),t(null);return}t(i)}) ...

7 \u26A0 \u672A\u68C0\u6D4B\u5230\u706B\u5C71 ASR \u51ED\u636E`)),console.log(we.dim(" \u4F60\u53EF\u4EE5\u901A\u8FC7\u4EE5\u4E0B\u4EFB\u4E00\u65B9\u5F0F\u914D\u7F6E\uFF1A")),console.log(we.dim(" \xB7 \u73AF\u5883\u53D8\u91CF: export VOLC_ASR_APP_ID=... VOLC_ASR_ACCESS_KEY=...")),console.log(we.dim(" \xB7 \u914D\u7F6E\u6587\u4EF6: ~/.dskcode/settings.json \u7684 voice \u6BB5")),console.log(we.dim(` \xB7 \u4E0B\u9762\u76F4\u63A5\u8F93\u5165\uFF0C\u81EA\u52A8\u4FDD\u5B58\u5230\u5168\u5C40\u914D\u7F6E

8`)),console.log(we.dim(` \u51ED\u636E\u83B7\u53D6\u8DEF\u5F84\uFF1A\u706B\u5C71\u63A7\u5236\u53F0 \u2192 \u8BED\u97F3\u6280\u672F \u2192 \u6211\u7684\u5E94\u7528

9`));let e=_p({input:process.stdin,output:process.stdout});return new Promise(t=>{let n=!1,r=()=>{n||(n=!0,process.stdin.removeListener("keypress",o),e.close())},o=(s,i)=>{i.ctrl&&i.name==="c"&&(r(),t(null))};process.stdin.

10`));return}if(await Px())return;let n=await Rx();if(n.length===0)return;console.log(ot.cyan(`

11 \u2726 \u68C0\u6D4B\u5230\u4F60\u5728 Claude Code \u4E2D\u5B89\u88C5\u4E86 ${String(n.length)} \u4E2A skill\uFF1A`));let r=n.slice(0,5).map(s=>ot.dim(` \xB7 ${s}`)).join(`

12`);if(console.log(r),n.length>5&&console.log(ot.dim(` \xB7 ...\u7B49 ${String(n.length)} \u4E2A`)),console.log(ot.dim(` \u6E90\u76EE\u5F55: ${wl()}`)),console.log(ot.dim(` \u76EE\u6807\u76EE\u5F55: ${Ar()}

13`)),!await Ax(` ${ot.cyan("\u{1F4E6}")} \u662F\u5426\u5C06\u8FD9\u4E9B skill \u5BFC\u5165\u5230 dskcode\uFF1F${ot.dim("[y/N] ")} `)){console.log(ot.dim(` \u5DF2\u8DF3\u8FC7 skill \u5BFC\u5165

14`));return}try{let{imported:s,skipped:i}=await Ex(n);s.length>0&&console.log(ot.green(` \u2714 \u5DF2\u5BFC\u5165 ${String(s.length)} \u4E2A skill \u5230 ~/.dskcode/skills`)),i.length>0&&console.log(ot.yellow(` \u26A0 ${String(i.length)} \u4E2A skill \u5DF2\u5B58\u5728\uFF0C\u5DF2\u8DF3\u8FC7\uFF1A${i.join(", ")}`)),console.log("")}catch(s){console.log(ot.red(` \u2716 \u5BFC\u5165 skill \u5931\u8D25: ${s instanceof Error?s.message:String(s)}`)),console.log(ot.dim(` \u4F60\u53EF\u4EE5\u7A0D\u540E\u624B\u52A8\u590D\u5236 ~/.claude/skills \u5230 ~/.dskcode/skills

15`))}}async function $x(){let e=Ar();if(!zt(e))return[];let t;try{t=await Rr(e)}catch{return[]}let n=[];for(let r of t){let o=st(e,r);vr(o).isDirectory()&&await Er(o)&&n.push(r)}return n}async function Lx(e){let t=Tl(e);if(!zt(t))return[];let n;try{n=await Rr(t)}catch{return[]}let r=[];for(let o of n){let s=st(t,o);vr(s).isDirectory()&&await Er(s)&&r.push(o)}return r}async function Ep(e){try{let n=(await vx(st(e,"SKILL.md"),"utf-8")).match(/^---\n([\s\S]*?)\n---/);if(!n)return null;let r=n[1],o=r.match(/^name:\s*(.+)$/m),s=r.match(/^description:\s*(.+)$/m);return{name:o?.[1]?.trim()??"",descrip ...

16`)}function Rl(e,t=80){if(e===null)return"null";if(e===void 0)return"undefined";if(typeof e=="string")return e.length>t?e.slice(0,t-1)+

17`)){if(r.length===0){n.push("");continue}let o=Zx(r,t);for(let s of o)n.push(s)}return n.length===0?[""]:n}function Zx(e,t){if(ko(e)<=t)return[e];let n=[],r="",o=0,s=-1,i=0;for(let{ch:a,width:l}of Xx(e)){if(a===" "||a===" "){s=r.length,i=o+l,r+=a,o+=l;continue}if(o+l>t)if(s>0){let c=r.slice(0,s).replace(/[ \t]+$/,"");n.push(c),r=r.slice(s).replace(/^[ \t]+/,"")+a,o=ko(r),s=-1,i=0}else n.push(r),r=a,o=l;else r+=a,o+=l}return r.length>0&&n.push(r),n}function Yx(e,t,n){return e.map((r,o)=>{let s=t[o]??3;return Jx(r,s).map(a=>Qx(a,s,n[o]??"left"))})}function Qx(e,t,n="left"){let r=ko(e),o=t-r;if(o ...

18`).filter(C=>C.trim().length>0);if(s.length<2)return{lines:s,colWidths:[],totalWidth:0};let i=-1;for(let C=0;C<s.length;C++){let N=(s[C

19`),n=[],r="";function o(){r&&(n.push({text:r,type:"plain"}),r="")}for(let s=0;s<t.length;s++){let i=t[s]??"";if(Pl(i)&&s+1<t.length&&nb(t[s+1]??"")&&s+2<t.length&&Pl(t[s+2]??"")){o();let a=[],l=s;for(;l<t.length&&Pl(t[l]??"");)a.push(t[l]),l++;n.push({text:a.join(`

20`),type:"table"}),s=l-1}else r?r+=`

21`+i:r=i}return o(),n}function ob(e){let t=[],n=0;for(;n<e.length;){let r=e.indexOf("**",n);if(r===-1){t.push({text:e.slice(n),type:"plain"});break}r>n&&t.push({text:e.slice(n,r),type:"plain"});let o=e.indexOf("**",r+2);if(o===-1){t.push({text:e.slice(r),type:"plain"});break}t.push({text:e.slice(r+2,o),type:"bold"}),n=o+2}return t}function sb(e){let t=[],n=0;for(;n<e.length;){let r=e.indexOf("`",n);if(r===-1){t.push({text:e.slice(n),type:"plain"});break}r>n&&t.push({text:e.slice(n,r),type:"plain"});let o=1;for(;r+o<e.length&&e[r+o]==="`";)o++;if(o===1){let s=e.indexOf("`",r+1);if(s===-1){t.push ...

22`),n=t[0]??"",r=n.trim().length>0&&!n.startsWith("+")&&!n.startsWith("-")&&!n.startsWith("@@")&&!n.startsWith(" "),o=r?n:void 0,s=r?t.slice(1):t;return s.length===0?r?ve(Ys,{marginLeft:2,children:$l(Ge,{color:"#888888",children:["\u250C ",o]})}):null:$l(Ys,{flexDirection:"column",marginLeft:2,marginTop:1,children:[o&&$l(Ge,{color:"#888888",children:["\u250C ",o]}),s.map((i,a)=>i.startsWith("+")?ve(Ge,{color:ab,children:i},a):i.startsWith("-")?ve(Ge,{color:lb,children:i},a):i.startsWith("@@")?ve(Ge,{color:cb,children:i},a):ve(Ge,{children:i},a))]})}function db({text:e}){let t=Fp(),n=Gp(e,{termW ...

Long lines were clipped for display.

Lines 532-572javascript

532`),l=a.length>0&&a[a.length-1]===""&&i.endsWith(`

533`)?a.slice(0,-1):a,c=Math.max(1,e.startLine??1)-1,u=e.endLine?Math.min(e.endLine,l.length):l.length,d=l.slice(c,u),f=String(u).length,h=d.map((k,T)=>`${String(c+T+1).padStart(f," ")}\u2192${k}`).join(`

534`),m=l.length-u,g=m>0?`

535

536[\u8FD8\u6709 ${m} \u884C\uFF1B\u4F7F\u7528 startLine=${u+1} \u7EE7\u7EED\u67E5\u770B]`:"",b=c>0||u<l.length?`\u7B2C ${c+1}-${u} \u884C`:`${l.length} \

\uFF08\u7EAF\u6570\u5B57\uFF09

\u5FC5\u987B\u662F\u7EAF\u6570\u5B57

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L2

{lines:s,colWidths:[],totalWidth:

`;return{success:!0,data:Ze(h)+g,summary:`

`}}catch(o){return{success:!1,data:`

\u8BFB\u53D6\u6587\u4EF6\u5931\u8D25\uFF1A${o

`,error:"READ_ERROR"}}}};p();import{mkdir as JC,readFile as ZC}from"fs/promises";import{dirname as YC,relative as QC,basename as e_}from"path";p();function ga(e){if(e.length===0)return{lines:[],eol:`

537`,eofStyle:"no-eol"};let t=e.indexOf(`\r

539`),r=t!==-1&&(n===-1||t<=n)?`\r

541`,o=e.split(r),s;return e.endsWith(r)?(o.length>0&&o[o.length-1]===""&&o.pop(),s="lf"):s="no-eol",{lines:o,eol:r,eofStyle:s}}function HC(e,t){let n=e.length,r=t.length;if(n===0&&r===0)return[];if(n===0)return t.map(l=>({op:"add",line:l}));if(r===0)return e.map(l=>({op:"remove",line:l}));let o=[],s=n+r,i=new Array(2*s+2).fill(-1),a=s;i[a+1]=0;for(let l=0;l<=s;l++){let c=new Map,u=-l,d=l;for(let f=u;f<=d;f+=2){let h=f+a,m;f===-l||f!==l&&i[h-1]<i[h+1]?m=i[h+1]:m=i[h-1]+1;let g=m-f;for(;m<n&&g<r&&e[m]===t[g];)m++,g++;if(i[h]=m,c.set(f,m),m>=n&&g>=r)return o.push(c),VC(o,n,r,e,t,a)}o.push(c)}return ...

542`)}function KC(e,t){let n=Bu(t),r=[];r.push("--- /dev/null"),r.push(`+++ b/${n}`),r.push(`@@ -0,0 +1,${String(e.length)} @@`);for(let o of e)r.push(`+${o}`);return r.join(`

543`)}function XC(e,t){let n=Bu(t),r=[];r.push(`--- a/${n}`),r.push("+++ /dev/null"),r.push(`@@ -1,${String(e.length)} +0,0 @@`);for(let o of e)r.push(`-${o}`);return r.join(`

544`)}function Bu(e){return e.replace(/\\/g,"/").split("/").pop()??e}function sn(e,t,n){if(e===t)return{filePath:n,patch:"",existedBefore:e.length>0,additions:0,deletions:0};if(e.length===0){let u=ga(t),d=KC(u.lines,n);return{filePath:n,patch:d,existedBefore:!1,additions:u.lines.length,deletions:0}}if(t.length===0){let u=ga(e),d=XC(u.lines,n);return{filePath:n,patch:d,existedBefore:!0,additions:0,deletions:u.lines.length}}let r=ga(e),o=ga(t),s=HC(r.lines,o.lines),i=0,a=0;for(let u of s)u.op==="add"&&i++,u.op==="remove"&&a++;let l=zC(s),c=qC(l,n);return{filePath:n,patch:c,existedBefore:!0,addition ...

545`).length,l=Buffer.byteLength(s,"utf-8"),c=o?"\u5DF2\u4FEE\u6539":"\u5DF2\u521B\u5EFA",u=o?`\uFF0C+${i.additions} -${i.deletions}`:`\uFF0C+${i.additions} \u884C\uFF08\u65B0\u5EFA\uFF09`,d=e_(n),f=o?`\u{1F4DD} \u4FEE\u6539: ${d} (+${i.additions} -${i.deletions})`:`\u{1F4DD} \u65B0\u5EFA: ${d} (+${i.additions} \u884C)`;return{success:!0,data:`\u6587\u4EF6${c}\uFF1A${QC(t.cwd,n).replace(/\\/g,"/")}\uFF08${a} \u884C\uFF0C${l} \u5B57\u8282${u}\uFF09`,summary:f,diff:i}}catch(r){return{success:!1,data:`\u5199\u5165\u6587\u4EF6\u5931\u8D25\uFF1A${r instanceof Error?r.message:String(r)}`,error:"WRITE_E ...

546`).length,m=s.split(`

547`).length,g=i.split(`

548`).length,b=`+${d.additions} -${d.deletions}`,k=`\u{1F4DD} \u4FEE\u6539: ${r_(n)} (+${d.additions} -${d.deletions})`;return{success:!0,data:`\u6587\u4EF6\u5DF2\u7F16\u8F91\uFF1A${n}

549\u66FF\u6362\u4F4D\u7F6E\uFF1A\u7B2C ${h} \u884C

550${m} \u884C \u2192 ${g} \u884C

551\u53D8\u66F4\uFF1A${b}`,summary:k,diff:d}}catch(r){return{success:!1,data:`\u7F16\u8F91\u6587\u4EF6\u5931\u8D25\uFF1A${r instanceof Error?r.message:String(r)}`,error:"EDIT_ERROR"}}}};p();import{readFile as o_,writeFile as s_}from"fs/promises";import{basename as i_}from"path";var ju={name:"multi_edit",kind:"edit",description:"\u5BF9\u6587\u4EF6\u8FDB\u884C\u539F\u5B50\u6279\u91CF\u66FF\u6362\u7F16\u8F91\u3002\u5728\u4E00\u4E2A\u8BF7\u6C42\u4E2D\u6267\u884C\u591A\u4E2A\u7CBE\u786E\u66FF\u6362\uFF0C\u4EFB\u4E00\u5931\u8D25\u5219\u5168\u90E8\u56DE\u6EDA\u3002\u652F\u6301 replaceAll \u53C2\u6570\u5 ...

552\u5171\u6267\u884C ${e.edits.length} \u6B65\u66FF\u6362

553\u53D8\u66F4\uFF1A+${i.additions} -${i.deletions}`,summary:`\u{1F4DD} \u4FEE\u6539: ${i_(n)} (${e.edits.length} \u6B65, +${i.additions} -${i.deletions})`,diff:i}}catch(r){return{success:!1,data:`\u6279\u91CF\u7F16\u8F91\u5931\u8D25\uFF1A${r instanceof Error?r.message:String(r)}`,error:"MULTI_EDIT_ERROR"}}}};p();import{readFile as a_}from"fs/promises";import{writeFile as l_}from"fs/promises";import{basename as c_}from"path";function jg(e,t,n){let r=Ye(t),o=[];for(let s=0;s<e.length;s++)Ye(e[s])===r&&o.push(s);return o.length===0?{error:`\u672A\u627E\u5230 "${n}" \u951A\u70B9\u884C\uFF0C\u8BF7\u ...

554`),i=jg(s,e.startAnchor,"start_anchor");if("error"in i)return{success:!1,data:i.error,error:"ANCHOR_NOT_FOUND"};let a=jg(s,e.endAnchor,"end_anchor");if("error"in a)return{success:!1,data:a.error,error:"ANCHOR_NOT_FOUND"};let l=i.line,c=a.line;if(l>=c)return{success:!1,data:"end_anchor \u5FC5\u987B\u5728 start_anchor \u4E4B\u540E",error:"ANCHOR_ORDER_ERROR"};let u=r?l:l+1,d=r?c:c-1;if(u>d)return{success:!1,data:"\u5220\u9664\u8303\u56F4\u4E3A\u7A7A\uFF08\u4E24\u884C\u951A\u70B9\u76F8\u90BB\u4E14 inclusive=false\uFF09",error:"EMPTY_RANGE"};let h=[...s.slice(0,u),...s.slice(d+1)].join(`

555`),m=Mn(o,h);await l_(n,m,"utf-8");let g=sn(o,m,n);g.existedBefore=!0;let b=d-u+1,k=`\u{1F4DD} \u4FEE\u6539: ${c_(n)} (\u5220 ${b} \u884C, +${g.additions} -${g.deletions})`;return{success:!0,data:`\u6587\u4EF6\u5DF2\u7F16\u8F91\uFF1A${n}

556\u5220\u9664\u884C\u8303\u56F4\uFF1A\u7B2C ${u+1} \u884C ~ \u7B2C ${d+1} \u884C\uFF08\u5171 ${b} \u884C\uFF09

557\u53D8\u66F4\uFF1A+${g.additions} -${g.deletions}`,summary:k,diff:g}}catch(o){return{success:!1,data:`\u5220\u9664\u8303\u56F4\u5931\u8D25\uFF1A${o instanceof Error?o.message:String(o)}`,error:"DELETE_RANGE_ERROR"}}}};p();import Kr from"process";import{existsSync as Ug}from"fs";import{join as Wg}from"path";var u_=Kr.platform==="win32";function d_(){if(!u_)return{bin:"sh",args:["-c"],label:"sh",hint:"\u5F53\u524D shell \u662F bash \u517C\u5BB9\u8BED\u6CD5\uFF0C\u652F\u6301 pwd/ls/&&/\u7BA1\u9053\u7B49\u6807\u51C6 Unix \u5DE5\u5177\u3002"};let e=Kr.env.DSKCODE_BASH;if(e&&Ug(e))return{bin:e,args: ...

558${Ze(s.stderr)}`);let a=s.exitCode===0,l=i.length>0?i.join(`

559`):"(\u65E0\u8F93\u51FA)",u=`\u{1F527} $ ${e.command.length>60?e.command.slice(0,57)+"...":e.command}\uFF08exit ${s.exitCode??"\u672A\u77E5"}\uFF09`;return{success:a,data:`${l}

560[\u9000\u51FA\u7801: ${s.exitCode??"\u672A\u77E5"}]`,summary:u,error:a?void 0:`EXIT_CODE_${s.exitCode??"UNKNOWN"}`}}catch(r){return{success:!1,data:`\u547D\u4EE4\u6267\u884C\u5931\u8D25\uFF1A${r instanceof Error?r.message:String(r)}`,error:"EXECUTION_ERROR"}}}};p();import{readdir as p_,stat as f_}from"fs/promises";import{join as Vg,relative as m_,isAbsolute as h_}from"path";function g_(e){let t=e;return t=t.replace(/\*\*\//g,"<<GLOBSTAR_SLASH>>"),t=t.replace(/\*\*/g,"<<GLOBSTAR>>"),t=t.replace(/\?/g,"<<QUESTION>>"),t=t.replace(/[.+^${}()|[\]\\]/g,"\\$&"),t=t.replace(/\*/g,"[^/]*"),t=t.replace( ...

561`),d=a.length>l?`

563... \u5171 ${a.length} \u4E2A\u6587\u4EF6\uFF0C\u53EA\u663E\u793A\u524D ${l} \u4E2A`:"";return{success:!0,data:Ze(u+d),summary:`${e.pattern} \u2192 ${a.length} \u4E2A\u6587\u4EF6`}}catch(s){return{success:!1,data:`\u6587\u4EF6\u641C\u7D22\u5931\u8D25\uFF1A${s instanceof Error?s.message:String(s)}`,error:"GLOB_ERROR"}}}};p();import{readdir as y_,readFile as x_,stat as b_}from"fs/promises";import{join as qg,relative as k_,isAbsolute as w_}from"path";async function Kg(e,t,n=200){let r=[],o;try{o=await y_(e,{withFileTypes:!0})}catch{return r}for(let s of o){if(r.length>=n)break;if(s.isDirectory()& ...

564`),b=k_(r,h);for(let k=0;k<g.length&&!(i.test(g[k]??"")&&(i.lastIndex=0,c.push({file:b,line:k+1,content:g[k]}),c.length>=500));k++);if(c.length>=500)break}catch{continue}if(c.length===0)return{success:!0,data:`\u672A\u627E\u5230\u5339\u914D "${e.pattern}" \u7684\u5185\u5BB9`,summary:`\u{1F50D} "${e.pattern}" \u2192 0 \u6761\u547D\u4E2D`};let u=c.map(h=>`${h.file}:${h.line}: ${h.content}`).join(`

565`),d=new Set(c.map(h=>h.file)),f=`\u{1F50D} "${e.pattern}" \u2192 ${c.length} \u6761\u547D\u4E2D / ${d.size} \u4E2A\u6587\u4EF6`;return{success:!0,data:Ze(u),summary:f}}catch(s){return{success:!1,data:`\u5185\u5BB9\u641C\u7D22\u5931\u8D25\uFF1A${s instanceof Error?s.message:String(s)}`,error:"GREP_ERROR"}}}};p();import{readdir as T_,stat as S_}from"fs/promises";import{join as C_,relative as Xg}from"path";var zu={name:"ls",kind:"read",description:"\u5217\u51FA\u76EE\u5F55\u5185\u5BB9\u3002\u663E\u793A\u6761\u76EE\u7C7B\u578B\uFF08\u6587\u4EF6/\u76EE\u5F55/\u94FE\u63A5\uFF09\u548C\u5927\u5C0F\u3 ...

567`)}`),summary:`\u{1F4C2} ${a}\uFF08${s.length} \u9879\uFF09`}}catch(o){return{success:!1,data:`\u5217\u76EE\u5F55\u5931\u8D25\uFF1A${o instanceof Error?o.message:String(o)}`,error:"LS_ERROR"}}}};p();var qu={name:"fetch",kind:"read",description:"\u53D1\u8D77 HTTP \u8BF7\u6C42\u5E76\u8FD4\u56DE\u54CD\u5E94\u5185\u5BB9\u3002\u652F\u6301\u81EA\u5B9A\u4E49\u65B9\u6CD5\u548C\u8BF7\u6C42\u5934\u3002\u9002\u7528\u4E8E\u83B7\u53D6\u7F51\u9875\u5185\u5BB9\u3001API \u8C03\u7528\u7B49\u573A\u666F\u3002",parameters:{type:"object",properties:{url:{type:"string",description:"\u8BF7\u6C42\u7684 URL"},method:{ ...

568\u5185\u5BB9\u7C7B\u578B: ${a}`,f=c.length>0?`

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L552

570`:"",h=e.url.length>60?e.url.slice(0,57)+"...":e.url,m=`\u{1F310} ${n} ${h} \u2192 ${i.status}`;return{success:i.ok,data:`${d}${f}${u}`,summary:m,error:i.ok?void 0:`HTTP_${i.status}`}}catch(s){return s instanceof DOMException&&s.name==="AbortError"?{success:!1,data:"\u8BF7\u6C42\u88AB\u4E2D\u6B62",error:"ABORTED"}:s instanceof TypeError&&s.message.includes("fetch")?{success:!1,data:`\u7F51\u7EDC\u9519\u8BEF\uFF1A${s.message}`,error:"NETWORK_ERROR"}:{success:!1,data:`HTTP \u8BF7\u6C42\u5931\u8D25\uFF1A${s instanceof Error?s.message:String(s)}`,error:"FETCH_ERROR"}}}};p();import{z as Jg}from"zod ...

571`),r=["# \u7528\u6237\u8BBE\u5B9A\u7684\u5B8C\u6210\u6761\u4EF6",e,"","# \u5F53\u524D\u5BF9\u8BDD\u8BB0\u5F55\uFF08\u4EC5\u542B\u6700\u8FD1\u82E5\u5E72\u8F6E\uFF09","<transcript>",t,"</transcript>","","\u8BF7\u6309 system \u7EA6\u675F\u8F93\u51FA JSON\u3002"].join(`

572`);return{systemPrompt:n,userPrompt:r}}function ed(e){let t=e.trim();if(!t)return null;let n=Zu(t);if(n)return Yu(n);let r=/^```(?:json)?\s*([\s\S]*?)\s*```$/i.exec(t);if(r){let i=r[1]?.trim();if(i){let a=Zu(i);if(a)return Yu(a)}}let o=t.indexOf("{"),s=t.lastIndexOf("}");if(o>=0&&s>o){let i=t.slice(o,s+1),a=Zu(i);if(a)return Yu(a)}return null}function Zu(e){try{let t=JSON.parse(e);return typeof t=="object"&&t!==null&&!Array.isArray(t)?t:null}catch{return null}}function Yu(e){let t=e.ok,n=e.reason;return typeof t!="boolean"||typeof n!="string"?null:{ok:t,reason:n}}function td(e){if(!e)return"co ...

Long lines were clipped for display.

dskcode@0.1.55

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code