koishi-plugin-smmcat-yeyechat@0.1.37
名为【夜夜酱】的聊天系统
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe manifest and inspected runtime source show chatbot features and configured API requests, with image recognition inactive unless its token and model are supplied. The cited runtime operations do not establish malicious behavior, so the network references alone do not warrant a warning.
Decision evidence
public snapshot- The manifest names lib/index.js as the entry point and contains no install lifecycle scripts.
- The inspected runtime operations format stored relationship data, register chat commands, and log configuration; they do not establish an unrequested account action.
- Image recognition sends image data to the configured vision API only when a base URL, token, and model are configured; the token defaults to empty.
- The chat client sends prompt messages and its configured authorization token to its configured API base as part of chat requests.
Source & flagged code
7 flaggedThe manifest names lib/index.js as the entry point and contains no install lifecycle scripts.
package.jsonView on unpkg · L1The inspected runtime operations format stored relationship data, register chat commands, and log configuration; they do not establish an unrequested account action.
lib/index.jsView on unpkg · L576Findings
Affected versions and remediation
This report applies to koishi-plugin-smmcat-yeyechat@0.1.37.
See all versions of koishi-plugin-smmcat-yeyechat for other recorded verdicts.
- Review the evidence and your use of koishi-plugin-smmcat-yeyechat@0.1.37 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.