registry / koishi-plugin-aka-ai-image-generator / 0.8.10

koishi-plugin-aka-ai-image-generator@0.8.10

AI image generator for Koishi (V2: semantic supplier UI, image protocols, credit billing).

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Runtime image-generation requests send prompts and optional reference images to configured OpenAI/Gemini-compatible providers. No confirmed malicious attack surface or install-time execution exists.

Static reason

One or more suspicious static signals were detected.

Trigger

Koishi plugin activation followed by an image-generation command or enabled optional bridge.

Impact

User-supplied prompts, image URLs, and configured provider credentials are used only for the advertised image-generation workflow.

Mechanism

configured AI image-provider API requests and local billing persistence

Rationale

Source implements a Koishi AI image-generation plugin with explicit provider calls and scoped local accounting storage. Scanner hits are package-aligned: dynamic import is a compatibility fallback for fixed optional integrations and secret patterns are redaction/config fields.

Evidence

package.jsondist/index.mjsREADME.mddata/aka-ai-image-generator/users.v2.jsondata/aka-ai-image-generator/users.v2.json.backupdata/aka-ai-image-generator/credit-ledger.v2.jsonldata/aka-ai-image-generator/recharge-records.v2.jsonl

Network endpoints3

api.openai.com/v1generativelanguage.googleapis.comyunwu.ai/v1

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no install lifecycle hooks or bin entry.
dist/index.mjs only dynamically loads two fixed optional ChatLuna/LangChain module specifiers.
Network calls implement configured image-generation providers and use supplied API credentials.
Filesystem writes are confined to Koishi data/aka-ai-image-generator billing and user-state files.
Credential-like patterns redact keys and authorization values in diagnostics.
No child-process, shell, environment harvesting, foreign config writes, or remote payload execution found.

Behavioral surface

Source

DynamicRequireEvalFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 439 KB of source, external domains: api.openai.com, generativelanguage.googleapis.com, yunwu.ai

Source & flagged code

4 flagged

dist/index.jsView file

Lines 18-58javascript

18 return to;

19};

20var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

21 // If the importer is in node compatibility mode or this is not an ESM

22 // file that has been converted to a CommonJS file using a Babel-

23 // compatible transform (i.e. "__esModule" has not been set), then set

24 // "default" to the CommonJS "module.exports" for node compatibility.

25 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

26 mod

27));

28var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);

30// src/index.ts

31var index_exports = {};

32__export(index_exports, {

33 Config: () => Config2,

34 apply: () => apply,

35 inject: () => inject,

36 name: () => name

37});

38module.exports = __toCommonJS(index_exports);

39var import_node_path = __toESM(require("path"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L38

41// src/shared/chatluna-tool-definitions.ts

42var AI_GENERATOR_TOOL_DEFINITIONS = [

43 {

44 name: "aigc_generate_image",

45 description: "Generate one or more images from a natural-language prompt.",

46 usage: "Use this for pure text-to-image requests. Prefer this when the user asks to generate a fresh image without referencing an existing one.",

47 riskLevel: "low",

48 inputSchema: {

49 type: "object",

50 properties: {

51 prompt: { type: "string", description: "Image generation prompt." },

52 numImages: {

53 type: "number",

54 minimum: 1,

55 maximum: 4,

56 description: "Number of images to generate."

57 },

58 aspectRatio: {

Lines 421-461javascript

421var import_node_module = require("module");

422var runtimeRequire = (0, import_node_module.createRequire)(`${process.cwd()}/package.json`);

423async function loadChatLunaRuntime() {

424 const [chatlunaModule, langchainToolsModule] = await Promise

Lines 2395-2435javascript

2395 }

2396 if (Array.isArray(error)) {

2397 return error.map((item) => sanitizeError(item));

2398 }

2399 if (typeof error === "object") {

2400 const sanitized = {};

dist/index.mjsView file

Lines 2358-2398javascript

2358 }

2359 if (Array.isArray(error)) {

2360 return error.map((item) => sanitizeError(item));

2361 }

2362 if (typeof error === "object") {

2363 const

Source & flagged code

4 flagged · loading source

dist/index.jsView file

2415patternName = generic_password severity = medium line = 2415 matchedText = return s..."');

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L2415

38module.exports = __toCommonJS(index_exports); L39: var import_node_path = __toESM(require("path")); L40:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L38

441} catch (requireError) { L442: const dynamicImport = new Function("s", "return import(s)"); L443: return dynamicImport(specifier).catch((importError) => {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L441

dist/index.mjsView file

2378patternName = generic_password severity = medium line = 2378 matchedText = return s..."');

Medium

Secret Pattern

Hardcoded password in dist/index.mjs

dist/index.mjsView on unpkg · L2378

Findings

3 Medium5 Low

MediumSecret Patterndist/index.js

MediumDynamic Requiredist/index.js

MediumSecret Patterndist/index.mjs

LowScripts Present

LowEvaldist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/index.jsView file

Lines 18-58javascript

18 return to;

19};

20var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

21 // If the importer is in node compatibility mode or this is not an ESM

22 // file that has been converted to a CommonJS file using a Babel-

23 // compatible transform (i.e. "__esModule" has not been set), then set

24 // "default" to the CommonJS "module.exports" for node compatibility.

25 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

26 mod

27));

28var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);

30// src/index.ts

31var index_exports = {};

32__export(index_exports, {

33 Config: () => Config2,

34 apply: () => apply,

35 inject: () => inject,

36 name: () => name

37});

38module.exports = __toCommonJS(index_exports);

39var import_node_path = __toESM(require("path"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L38

41// src/shared/chatluna-tool-definitions.ts

42var AI_GENERATOR_TOOL_DEFINITIONS = [

43 {

44 name: "aigc_generate_image",

45 description: "Generate one or more images from a natural-language prompt.",

46 usage: "Use this for pure text-to-image requests. Prefer this when the user asks to generate a fresh image without referencing an existing one.",

47 riskLevel: "low",

48 inputSchema: {

49 type: "object",

50 properties: {

51 prompt: { type: "string", description: "Image generation prompt." },

52 numImages: {

53 type: "number",

54 minimum: 1,

55 maximum: 4,

56 description: "Number of images to generate."

57 },

58 aspectRatio: {

Lines 421-461javascript

421var import_node_module = require("module");

422var runtimeRequire = (0, import_node_module.createRequire)(`${process.cwd()}/package.json`);

423async function loadChatLunaRuntime() {

424 const [chatlunaModule, langchainToolsModule] = await Promise

Lines 2395-2435javascript

2395 }

2396 if (Array.isArray(error)) {

2397 return error.map((item) => sanitizeError(item));

2398 }

2399 if (typeof error === "object") {

2400 const sanitized = {};

dist/index.mjsView file

Lines 2358-2398javascript

2358 }

2359 if (Array.isArray(error)) {

2360 return error.map((item) => sanitizeError(item));

2361 }

2362 if (typeof error === "object") {

2363 const