koishi-plugin-gl-bot@0.0.26
GleamSlime Koishi Rebot Plugins
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe runtime chat handler exposes all process environment values to the chat on a matching message, creating a concrete conditional secret-disclosure risk. The inspected network and credential code otherwise appears aligned with configured services, so the evidence supports a warning rather than a malicious-package block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
A message matching the environment-variable keyword reaches the plugin's global message handler.
Impact
Secrets present in environment variables may be exposed to chat participants.
Mechanism
The handler formats every environment key and value and sends the result to the triggering session.
AI rationale
The runtime chat handler exposes all process environment values to the chat on a matching message, creating a concrete conditional secret-disclosure risk. The inspected network and credential code otherwise appears aligned with configured services, so the evidence supports a warning rather than a malicious-package block.
Evidence
lib/gl/index.js
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- A message matching the environment-variable keyword makes the plugin send every process environment key and value into that chat.
- The package entrypoint loads the plugin containing this message handler.
- The flagged API stores a supplied authentication cookie and sends requests through its configured HTTP client.
Evidence against
- No install lifecycle hook appears in the manifest.
- The inspected MCSManager API behavior is consistent with authenticated requests to its configured service; no unrelated recipient was identified.
- Huawei router requests use a configurable base address that defaults to a private local address.
Behavioral surface
CryptoEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcelib/utils/cat_enc.jsView file
7917patternName = generic_password
severity = medium
line = 7917
Medium
lib/mcsManager/api.jsView file
•matchType = normalized_sha256
matchedPackage = koishi-plugin-gl-bot@0.0.24
matchedPath = lib/mcsManager/api.js
matchedIdentity = npm:a29pc2hpLXBsdWdpbi1nbC1ib3Q:0.0.24
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
lib/mcsManager/api.jsView on unpkglib/gl/index.jsView file
70
Findings
1 High6 Medium5 Low
HighKnown Malware Source Similaritylib/mcsManager/api.js
MediumSecret Patternlib/utils/cat_enc.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencelib/gl/index.js
MediumAi Review Evidencelib/gl/index.js
MediumAi Review Evidencepackage.json
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to koishi-plugin-gl-bot@0.0.26.
See all versions of koishi-plugin-gl-bot for other recorded verdicts.
- Review the evidence and your use of koishi-plugin-gl-bot@0.0.26 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.