koishi-plugin-gl-bot@0.0.20
GleamSlime Koishi Rebot Plugins
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe active entrypoint exposes an unrestricted environment disclosure handler, which warrants a warning for a critical vulnerability. The inspected behavior does not establish malware intent or a block-eligible attack chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A participant sends the handler's matching environment-variable request while GLBot is running.
Impact
Chat participants may obtain service tokens, passwords, and other secrets stored in the bot environment.
Mechanism
The message callback enumerates process.env and sends all names and values through session.send without checking authorization.
AI rationale
The active entrypoint exposes an unrestricted environment disclosure handler, which warrants a warning for a critical vulnerability. The inspected behavior does not establish malware intent or a block-eligible attack chain.
Evidence
lib/gl/index.jslib/index.js
Decision evidence
public snapshotAI called this Suspicious at 98.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- The active chat handler has no permission check before responding to the environment-variable request.
- The response includes every process environment variable name and value, potentially exposing credentials to chat participants.
- The exported GLBot registers this handler during initialization.
- The manifest has no automatic install lifecycle hooks.
Evidence against
- The MCSManager API authenticates using supplied credentials against its configured service endpoint; that file alone does not establish malicious behavior.
- No covert recipient or deliberate malware intent was established.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcelib/utils/cat_enc.jsView file
7917patternName = generic_password
severity = medium
line = 7917
Medium
lib/mcsManager/api.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = koishi-plugin-gl-bot@0.0.23
matchedIdentity = npm:a29pc2hpLXBsdWdpbi1nbC1ib3Q:0.0.23
similarity = 0.706
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
lib/mcsManager/api.jsView on unpkglib/gl/index.jsView file
Findings
1 High6 Medium5 Low
HighPrevious Version Dangerous Deltalib/mcsManager/api.js
MediumSecret Patternlib/utils/cat_enc.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencelib/gl/index.js
MediumAi Review Evidencelib/gl/index.js
MediumAi Review Evidencelib/gl/index.js
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to koishi-plugin-gl-bot@0.0.20.
See all versions of koishi-plugin-gl-bot for other recorded verdicts.
- Review the evidence and your use of koishi-plugin-gl-bot@0.0.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.