koishi-plugin-smmcat-yeyechat@0.1.21
名为【夜夜酱】的聊天系统
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe vision token is sent to a package-selected default endpoint rather than a recipient validated against the intended service. The source confirms conditional exposure but does not establish malicious use, so this warrants a warning rather than a block.
Static reason
No blocking static signals were detected.
Trigger
An image arrives in an enabled group after the vision token, base URL, and model are configured.
Impact
The configured token is disclosed to the API recipient. Its ownership and handling are unresolved.
Mechanism
The plugin sends the image and a bearer authorization token to the resolved vision API endpoint; the default base URL is wxls.cc.cd.
AI rationale
The vision token is sent to a package-selected default endpoint rather than a recipient validated against the intended service. The source confirms conditional exposure but does not establish malicious use, so this warrants a warning rather than a block.
Evidence
lib/index.js
Network endpoints1
wxls.cc.cd
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The vision API defaults to wxls.cc.cd; its token setting is empty by default and described as a Gemini interface token.
- The vision request sends the configured token as a bearer header with image data to the configured base URL.
- Image recognition returns without sending when its base URL, token, or model is missing.
- Recording an incoming image invokes image recognition.
- The middleware records messages only in enabled groups, and image recognition can be activated by an image message there.
Evidence against
- The token must be supplied in configuration before the vision request runs; the source does not establish who operates wxls.cc.cd or how it uses the token.
Behavioral surface
CryptoFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedlib/index.jsView file
1999https://wxls.cc.cd").description("Gemini 视觉接口基地址（OpenAI 协议，留空则关闭图片识别）"),
visionToken: import_koishi4.Schema.string().default("").description("Gemini 视觉接口令牌"),
visionModel: import_koishi4.Schema.string().default("gemini-2.0-flash").description("Gemini 视觉模型名称"),
ttsEnabled: import_koishi4.Schema.boolean().default(false).description("是否开启语
Medium
Ai Review Evidence
The vision API defaults to wxls.cc.cd; its token setting is empty by default and described as a Gemini interface token.
lib/index.jsView on unpkg · L1999973ync function callGemini(ctx, config, imageUrl) {
const authHeader3 = config.visionToken.startsWith("Bearer ") ? config.visionToken : `Bearer ${config.visionToken}`;
const endpoint = `${resolveApiBase(config.visionBaseUrl)}/chat/completions`;
try {
const result = await ctx.http.post(endpoint, {
model: config.visionModel,
messages: [{
role: "user",
content: [
{ type: "text", text: VISION_PROMPT },
{ type: "image_url", image_url: { url: imageUrl } }
]
}],
max_tokens: 500,
stream: false
}, {
headers: { Au
Medium
Ai Review Evidence
The vision request sends the configured token as a bearer header with image data to the configured base URL.
lib/index.jsView on unpkg · L973Findings
6 Medium3 Low
MediumNetwork
MediumAi Review Evidencelib/index.js
MediumAi Review Evidencelib/index.js
MediumAi Review Evidencelib/index.js
MediumAi Review Evidencelib/index.js
MediumAi Review Evidencelib/index.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to koishi-plugin-smmcat-yeyechat@0.1.21.
See all versions of koishi-plugin-smmcat-yeyechat for other recorded verdicts.
- Review the evidence and your use of koishi-plugin-smmcat-yeyechat@0.1.21 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.