registry / koishi-plugin-smmcat-yeyechat / 0.1.44
koishi-plugin-smmcat-yeyechat@0.1.44
名为【夜夜酱】的聊天系统
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe network and credential flows inspected serve the plugin’s chat, image recognition, and search features and use configured API tokens and base URLs. Image recognition requires a nonempty token; no install-time behavior or unrelated credential exfiltration was identified.
Static reason
No blocking static signals were detected.
Trigger
A configured Koishi instance processes chat or image input, or invokes the web_search tool.
Impact
Chat text and configured image or search inputs are sent to the selected API providers as required for those features. No automatic credential theft or unrelated collection was identified.
Mechanism
Requests use configured API base URLs and tokens. The vision API defaults to https://wxls.cc.cd and receives an image only when its token and model are configured.
AI rationale
The network and credential flows inspected serve the plugin’s chat, image recognition, and search features and use configured API tokens and base URLs. Image recognition requires a nonempty token; no install-time behavior or unrelated credential exfiltration was identified.
Evidence
/data/smmAiImg (configured image-save directory)
Network endpoints5
wxls.cc.cdapi.deepseek.comconfigured config.baseUrlconfigured config.ttsBaseUrlconfigured config.animaleseBaseUrl
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies a Koishi chat plugin and points to lib/index.js as its entry point.
- Image recognition sends the supplied image and prompt to the configured vision API using the configured vision token.
- Image recognition is skipped unless a vision base URL, token, and model are configured.
- The chat reply engine sends chat messages to the configured API base URL with the configured authorization token.
- Web search sends its query and configured DeepSeek token to the configured official API base URL.
Evidence against
- The vision token defaults to empty, and image recognition is skipped without it.
- The vision API base URL can be changed or cleared in configuration; source does not show unrelated credential collection or transmission.
- The package manifest has no lifecycle scripts. No install-time network behavior was identified.
Behavioral surface
CryptoFilesystemNetwork
HighEntropyStrings
Source & flagged code
6 flaggedpackage.jsonView file
2"name": "koishi-plugin-smmcat-yeyechat",
"description": "名为【夜夜酱】的聊天系统",
"version": "0.1.44",
"main": "lib/index.j
Low
Ai Review Evidence
The manifest identifies a Koishi chat plugin and points to lib/index.js as its entry point.
package.jsonView on unpkg · L2lib/index.jsView file
2809const post = /* @__PURE__ */ __name((messages, extra = {}) => ctx.http.post(`${resolveApiBase(config.baseUrl)}/chat/completions`, {
model: config.model,
messages,
max_tokens: 2048,
stream: false,
...extra
}, { headers:
Medium
Stripped Provenance Metadata
The chat reply engine sends chat messages to the configured API base URL with the configured authorization token.
lib/index.jsView on unpkg · L280985async function callGemini(ctx, config, imageUrl) {
const authHeader3 = config.visionToken.startsWith("Bearer ") ? config.visionToken : `Bearer ${config.visionToken}`;
const endpoint = `${resolveApiBase(config.visionBaseUrl)}/chat/completions`;
try {
const result = await ctx.http.post(endpoint, {
model: config.visionModel,
messages: [{
role: "user",
content: [
Findings
2 Medium8 Low
MediumNetwork
MediumStripped Provenance Metadatalib/index.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencelib/index.js
LowAi Review Evidencelib/index.js
LowAi Review Evidencelib/index.js
LowAi Review Evidencelib/index.js
Affected versions and remediation
This report applies to koishi-plugin-smmcat-yeyechat@0.1.44.
See all versions of koishi-plugin-smmcat-yeyechat for other recorded verdicts.
- Review the evidence and your use of koishi-plugin-smmcat-yeyechat@0.1.44 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.