← 返回扫描报告总表 · ← dshlib 图书馆

扫描报告 · BlockRunAI/dsh-clawrouter

认证等级L2
验证状态self-declared（单方声明，待独立验证）
验证方法未登记 structured verifiedBy
运行级实测未做运行级实测
内容锚git commit 5192ec9d12e1 · BlockRunAI/dsh-clawrouter · git ls-remote / clone 复现可对账
DIDdid:cha2a:package:BlockRunAI/dsh-clawrouter
身份锚点npm 未声明 GitHub 仓库——装前请自行核验来源
来源git
插件版本—
安装dsh plugin add github:BlockRunAI/dsh-clawrouter
扫描日期2026-08-31（32 天前）
扫描层级静态扫描（自研规则 + GuardDog 复核 + OSV 依赖）
扫描器版本dshlib-scan v0.1 · GuardDog 3.2.0 · OSV.dev

自研扫描：⚠️ 待审 · GuardDog 复核：未扫描 · OSV 依赖：未扫描

⚠️ 结论待复核：上次扫描距今 32 天（2026-08-31），插件或运行时更新后结论可能过期，建议重新扫描后再安装。
语义：扫描是提示信号，非安全审查。✅ 通过=无命中；⚠️ 待审=有命中需人工判断；❌ 失败=无法扫描。人工确认恶意→下架。本页全部内容由 dshlib 数据库派生（验证报告 可核对证据）。认证等级与依赖漏洞正交：L4 认证覆盖插件包内容/来源/生态，不覆盖依赖安全（见收录与验证标准）。结论有有效期：插件或运行时更新后，本页结论可能过期（>30 天将标注待复核）。本库能力与边界：披露页。

1. 自研扫描（dshlib-scan）

verified

True

findings

{'dangerous_commands': [{'file': 'dsh-clawrouter-main/CHANGELOG.md', 'line': 163, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/CHANGELOG.md', 'line': 158, 'match': 'TRUNCATE', 'label': '数据库破坏'}, {'file': 'dsh-clawrouter-main/CHANGELOG.md', 'line': 421, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'dsh-clawrouter-main/README.md', 'line': 36, 'match': 'rm -rf ~`, a reviewer model reads it and answers allow / deny / ask — enforced b', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/README.md', 'line': 63, 'match': 'rm -rf ~`** | Only if you notice | No               | Only if you wrote the rule', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/README.md', 'line': 94, 'match': 'rm -rf" docs/` is not flagged — and neither is **writing*', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/README.md', 'line': 112, 'match': 'rm -rf" docs/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/README.md', 'line': 112, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'dsh-clawrouter-main/docs/README.zh.md', 'line': 36, 'match': 'rm -rf ~`，审查模型会读一遍并给出放行 / 拒绝 / 交给你——由真实的工具执行器强制执行，而不是靠提示词劝阻。它同时注册一条 BlockRun pro', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/docs/README.zh.md', 'line': 61, 'match': 'rm -rf ~`** | 你得正好看见  | 否          | 只有你写过这条规则 | **能*', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/docs/README.zh.md', 'line': 92, 'match': 'rm -rf" docs/` 不会被拦；**写下一条命令同样不等于执行它*', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/docs/README.zh.md', 'line': 110, 'match': 'rm -rf" docs/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/docs/README.zh.md', 'line': 197, 'match': 'rm -rf / --no-preserve-root` 送进风险匹配器和真实的审查模型——**永远不会送给任何工具*', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/docs/README.zh.md', 'line': 110, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'dsh-clawrouter-main/src/reviewer.ts', 'line': 58, 'match': 'rm -rf" docs/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/src/reviewer.ts', 'line': 253, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/src/reviewer.ts', 'line': 131, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'dsh-clawrouter-main/src/reviewer.ts', 'line': 136, 'match': 'TRUNCATE', 'label': '数据库破坏'}, {'file': 'dsh-clawrouter-main/test/docker/Dockerfile', 'line': 12, 'match': 'rm -rf /var/lib/apt/lists/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/reviewer.spec.ts', 'line': 32, 'match': 'rm -rf" docs/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/reviewer.spec.ts', 'line': 45, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/reviewer.spec.ts', 'line': 138, 'match': 'rm -rf /var/lib/apt/lists/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/reviewer.spec.ts', 'line': 141, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/reviewer.spec.ts', 'line': 213, 'match': "rm -rf ~', 'git push --force origin main', 'sudo rm -rf /usr/", 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/reviewer.spec.ts', 'line': 9, 'match': 'dd if=/dev/zero of=/dev', 'label': 'dd 覆盖设备'}, {'file': 'dsh-clawrouter-main/tests/risk-corpus.spec.ts', 'line': 50, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/risk-corpus.spec.ts', 'line': 51, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/risk-corpus.spec.ts', 'line': 52, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/risk-corpus.spec.ts', 'line': 55, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/risk-corpus.spec.ts', 'line': 77, 'match': 'rm -rf" docs/', 'label': 'rm -rf 危险删除'}, {'file': 'dsh-clawrouter-main/tests/risk-corpus.spec.ts', 'line': 32, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'dsh-clawrouter-main/tests/risk-corpus.spec.ts', 'line': 33, 'match': 'TRUNCATE', 'label': '数据库破坏'}, {'file': 'dsh-clawrouter-main/tests/risk-corpus.spec.ts', 'line': 77, 'match': 'DROP TABLE', 'label': '数据库破坏'}], 'data_exfiltration': [{'file': 'dsh-clawrouter-main/CHANGELOG.md', 'line': 127, 'match': 'tokens` a request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/CHANGELOG.md', 'line': 253, 'match': 'token. The "Honest notes" section still carried the original 0.1.0 claim — "prov', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/CHANGELOG.md', 'line': 323, 'match': 'token counts as counts — exact for ordinary calls, a floor for very large inputs', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/CHANGELOG.md', 'line': 331, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/CHANGELOG.md', 'line': 334, 'match': 'tokens` — the cap, not the tokens produced. A request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/README.md', 'line': 36, 'match': 'token usage — or, if you would rather not sign up for anything, a Solana or Base', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/README.md', 'line': 146, 'match': 'tokens` request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/README.md', 'line': 184, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/README.md', 'line': 252, 'match': 'token usage against the published price sheet — **no per-call fee, no minimum** ', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/cordis.patch.yml', 'line': 7, 'match': 'secret, resolved per request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/cordis.patch.yml', 'line': 18, 'match': 'secret key, paying each request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/scripts/probe-vision.mjs', 'line': 234, 'match': 'tokens request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/src/index.ts', 'line': 80, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/src/review.ts', 'line': 59, 'match': 'tokens` a request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/tests/gate-composition.spec.ts', 'line': 354, 'match': 'tokens request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/tests/live.e2e.ts', 'line': 454, 'match': 'tokens, not at the per-request', 'label': '凭据字段进入网络请求'}, {'file': 'dsh-clawrouter-main/tests/spend.spec.ts', 'line': 266, 'match': 'tokens, not from a per-request', 'label': '凭据字段进入网络请求'}], 'excessive_permissions': [{'file': 'dsh-clawrouter-main/src/reviewer.ts', 'line': 219, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-clawrouter-main/src/translate.ts', 'line': 221, 'match': 'exec(', 'label': '命令执行'}, {'file': 'dsh-clawrouter-main/tests/reviewer.spec.ts', 'line': 34, 'match': '"sudo"', 'label': '完全访问'}], 'manifest_contract': [{'file': 'package.json', 'line': 0, 'match': 'main: lib/index.js', 'label': 'main 入口「lib/index.js」在包内不存在——加载会报 Cannot find module'}]}

mode

git-refresh

branch

main

2. 第三方复核（GuardDog 3.2.0）

未复核。

3. 依赖漏洞（OSV.dev）

未查询。