registry / foliko / 2.0.9

foliko@2.0.9

⚠ Under review

简约的插件化 Agent 框架

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 189 file(s), 1.42 MB of source, external domains: api.anthropic.com, api.deepseek.com, api.example.com, api.github.com, api.ipify.org, api.minimaxi.com, api.openai.com, fcdn.foliko.com, github.com, httpbin.org, raw.githubusercontent.com

Source & flagged code

8 flagged

plugins/install/index.jsView file

Lines 1-25javascript

1/**

2 * InstallPlugin - npm 包安装工具

3 * 自动安装缺少的 node 模块到 .foliko 目录或指定目录

4 */

6const { execSync } = require('child_process')

7const fs = require('fs')

High

Child Process

Package source references child process execution.

plugins/install/index.jsView on unpkg · L5

8const path = require('path')

9const { Plugin } = require('../../src/plugin/base')

10const { logger } = require('../../src/common/logger')

11const log = logger.child('InstallPlugin')

12const { z } = require('zod')

14class InstallPlugin extends Plugin {

15 constructor(config = {}) {

16 super()

17 this.name = 'install'

18 this.version = '1.0.0'

19 this.description = '自动安装 npm 包到指定目录'

21 this._agentDir = config.agentDir || '.foliko' // 默认安装到 .foliko 目录

22 this._nodeModulesDir = null

23 this.system = true

24 }

Lines 81-121javascript

82 /**

83 * 安装单个包到指定目录

84 * @param {string} packageName - 包名

85 * @param {string|null} targetPath - 目标目录，默认为 .foliko

86 */

87 _installPackage(packageName, targetPath = null) {

88 try {

plugins/core/workflow/index.jsView file

Lines 193-233javascript

193 );

194 } else {

195 result = await this.framework.executeTool(step.tool, resolvedArgs);

196 }

197 // 保存结果到变量

198 // 支持 output 作为 outputVariable 的别名

199 const outputVar = step.outputVariable ||

plugins/tools/index.jsView file

Lines 1-25javascript

1/**

2 * ToolsPlugin - 内置工具插件

3 * 提供热重载、插件管理、工具列表等内置工具

4 */

6const path = require('path');

7const { Plugin } = require('../../src/plugin/base');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/utils/sandbox.jsView file

Lines 5-45javascript

5 */

7const vm = require('vm');

9/**

10 * 创建安全的沙箱上下文

11 * @param {Object} customContext - 自定义上下文变量

12 * @param {Object} options

install.shView file

•path = install.sh kind = build_helper sizeBytes = 3792 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

package.jsonView file

Lines 1-30json

2 "name": "foliko",

3 "version": "2.0.9",

4 "description": "简约的插件化 Agent 框架",

5 "main": "src/index.js",

6 "type": "commonjs",

7 "bin": {

plugins/core/scheduler/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = foliko@2.0.7 matchedIdentity = npm:Zm9saWtv:2.0.7 similarity = 0.975 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

plugins/core/scheduler/index.jsView on unpkg

Source & flagged code

8 flagged · loading source

plugins/install/index.jsView file

5L6: const { execSync } = require('child_process') L7: const fs = require('fs')

High

Child Process

Package source references child process execution.

plugins/install/index.jsView on unpkg · L5

101// 使用 npm install 安装到指定目录 L102: execSync(`npm install ${packageName} --prefix "${installPath}"`, { L103: stdio: 'inherit',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

plugins/install/index.jsView on unpkg · L101

plugins/core/workflow/index.jsView file

213this._log.debug(` Executing script step: ${step.name || step.id}`); L214: // 安全警告：使用 new Function() 执行用户脚本存在风险 L215: if (typeof step.script === 'string') {

Low

Eval

Package source references a known benign dynamic code generation pattern.

plugins/core/workflow/index.jsView on unpkg · L213

plugins/tools/index.jsView file

5L6: const path = require('path'); L7: const { Plugin } = require('../../src/plugin/base');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

plugins/tools/index.jsView on unpkg · L5

src/utils/sandbox.jsView file

25Math, L26: JSON: { parse: JSON.parse, stringify: JSON.stringify }, L27: Array: { isArray: Array.isArray, from: Array.from, of: Array.of }, ... L122: console: { log() {}, error() {}, warn() {}, info() {} }, L123: __dirname: '/', L124: __filename: '/workflow.js',

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/utils/sandbox.jsView on unpkg · L25

install.shView file

•path = install.sh kind = build_helper sizeBytes = 3792 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

package.jsonView file

•Runtime dependency names matching Node built-ins: crypto

High

Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

plugins/core/scheduler/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

plugins/core/scheduler/index.jsView on unpkg

Findings

1 Critical3 High6 Medium6 Low

CriticalPrevious Version Dangerous Deltaplugins/core/scheduler/index.js

HighChild Processplugins/install/index.js

HighRuntime Package Installplugins/install/index.js

HighNode Builtin Dependency Squatpackage.json

MediumDynamic Requireplugins/tools/index.js

MediumUnsafe Vm Contextsrc/utils/sandbox.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperinstall.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvalplugins/core/workflow/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

plugins/install/index.jsView file

Lines 1-25javascript

1/**

2 * InstallPlugin - npm 包安装工具

3 * 自动安装缺少的 node 模块到 .foliko 目录或指定目录

4 */

6const { execSync } = require('child_process')

7const fs = require('fs')

High

Child Process

Package source references child process execution.

plugins/install/index.jsView on unpkg · L5

8const path = require('path')

9const { Plugin } = require('../../src/plugin/base')

10const { logger } = require('../../src/common/logger')

11const log = logger.child('InstallPlugin')

12const { z } = require('zod')

14class InstallPlugin extends Plugin {

15 constructor(config = {}) {

16 super()

17 this.name = 'install'

18 this.version = '1.0.0'

19 this.description = '自动安装 npm 包到指定目录'

21 this._agentDir = config.agentDir || '.foliko' // 默认安装到 .foliko 目录

22 this._nodeModulesDir = null

23 this.system = true

24 }

Lines 81-121javascript

82 /**

83 * 安装单个包到指定目录

84 * @param {string} packageName - 包名

85 * @param {string|null} targetPath - 目标目录，默认为 .foliko

86 */

87 _installPackage(packageName, targetPath = null) {

88 try {

plugins/core/workflow/index.jsView file

Lines 193-233javascript

193 );

194 } else {

195 result = await this.framework.executeTool(step.tool, resolvedArgs);

196 }

197 // 保存结果到变量

198 // 支持 output 作为 outputVariable 的别名

199 const outputVar = step.outputVariable ||

plugins/tools/index.jsView file

Lines 1-25javascript

1/**

2 * ToolsPlugin - 内置工具插件

3 * 提供热重载、插件管理、工具列表等内置工具

4 */

6const path = require('path');

7const { Plugin } = require('../../src/plugin/base');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/utils/sandbox.jsView file

Lines 5-45javascript

5 */

7const vm = require('vm');

9/**

10 * 创建安全的沙箱上下文

11 * @param {Object} customContext - 自定义上下文变量

12 * @param {Object} options

install.shView file

•path = install.sh kind = build_helper sizeBytes = 3792 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

package.jsonView file

Lines 1-30json

2 "name": "foliko",

3 "version": "2.0.9",

4 "description": "简约的插件化 Agent 框架",

5 "main": "src/index.js",

6 "type": "commonjs",

7 "bin": {

plugins/core/scheduler/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

plugins/core/scheduler/index.jsView on unpkg