registry / koishi-plugin-smmcat-yeyechat / 0.1.20
koishi-plugin-smmcat-yeyechat@0.1.20
名为【夜夜酱】的聊天系统
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe manifest has no install hook, and the inspected runtime requests are tied to configured chat and image recognition features. No concrete attack behavior was found.
Static reason
No blocking static signals were detected.
Trigger
Chat processing follows activity in an enabled group after a mention or configured keyword; image recognition requires vision settings and a token.
Impact
These requests disclose chat content or images to the configured service as part of the plugin's features; the inspected source shows no separate attack behavior.
Mechanism
The plugin sends chat requests to the configured API and can send incoming images to its vision endpoint for description.
AI rationale
The manifest has no install hook, and the inspected runtime requests are tied to configured chat and image recognition features. No concrete attack behavior was found.
Evidence
package.jsonlib/index.js
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to lib/index.js and has no lifecycle scripts; Koishi is its only declared dependency.
- Chat requests use the configured API base and token, both blank by default.
- Chat processing is disabled by default for new groups and replies require a mention or trigger keyword in an enabled group.
- Image recognition sends incoming images to the vision API only when its endpoint, token, and model are configured; the token is blank by default.
Evidence against
Behavioral surface
CryptoFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedpackage.jsonView file
1{
"name": "koishi-plugin-smmcat-yeyechat",
"description": "名为【夜夜酱】的聊天系统",
"version": "0.1.20",
"main": "lib/index.js",
"typings": "lib/index.d.ts",
"files": [
"lib",
"dist"
],
"license": "MIT",
"keywords": [
"chatbot",
"koishi",
"plugin"
],
"peerDependencies": {
"koishi": "^4.18.7"
}
}
Low
Suspicious Lifecycle Evidence
The manifest points to lib/index.js and has no lifecycle scripts; Koishi is its only declared dependency.
package.jsonView on unpkg · L1lib/index.jsView file
1928var Config = import_koishi4.Schema.object({
baseUrl: import_koishi4.Schema.string().default("").description("接口基础地址"),
token: import_koishi4.Schema.string().default("").descr
Low
Ai Review Evidence
Chat requests use the configured API base and token, both blank by default.
lib/index.jsView on unpkg · L19281977const post = /* @__PURE__ */ __name((messages, extra = {}) => ctx.http.post(`${resolveApiBase(config.baseUrl)}/chat/completions`, {
model: config.model,
messages,
max_tokens: 2048,
stream: false,
...extra
}, { headers:
Findings
1 Medium11 Low
MediumNetwork
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencelib/index.js
LowAi Review Evidencelib/index.js
LowAi Review Evidencelib/index.js
LowAi Review Evidencelib/index.js
LowAi Review Evidencelib/index.js
LowAi Review Evidencelib/index.js
LowAi Review Evidencelib/index.js
Affected versions and remediation
This report applies to koishi-plugin-smmcat-yeyechat@0.1.20.
See all versions of koishi-plugin-smmcat-yeyechat for other recorded verdicts.
- Review the evidence and your use of koishi-plugin-smmcat-yeyechat@0.1.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.