← 返回扫描报告总表 · ← dshlib 图书馆

扫描报告 · KongFangXun/sofagent

自研扫描：⚠️ 待审 · GuardDog 复核：未扫描 · OSV 依赖：未扫描

1. 自研扫描（dshlib-scan）

verified

True

findings

{'excessive_permissions': [{'file': 'sofagent-main/FORGE/lessons/driver.md', 'line': 517, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/__tests__/stall-watchdog.test.mjs', 'line': 94, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/__tests__/stall-watchdog.test.mjs', 'line': 124, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/__tests__/stall-watchdog.test.mjs', 'line': 127, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/__tests__/stall-watchdog.test.mjs', 'line': 154, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/__tests__/stall-watchdog.test.mjs', 'line': 156, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/audit-middleware.mjs', 'line': 81, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/disk-backend.mjs', 'line': 320, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/disk-backend.mjs', 'line': 518, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 484, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 655, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 660, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 666, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 671, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 695, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 862, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 868, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 874, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 883, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 887, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 933, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 936, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 939, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 954, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.mjs', 'line': 960, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/driver-base.test.mjs', 'line': 391, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/fresh-eyes-cost.test.mjs', 'line': 42, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/fresh-eyes-driver.mjs', 'line': 516, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/fresh-eyes-driver.mjs', 'line': 1624, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/fresh-eyes-driver.test.mjs', 'line': 32, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/fresh-eyes-driver.test.mjs', 'line': 1013, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/release-gate-driver.mjs', 'line': 545, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/release-gate-driver.mjs', 'line': 2325, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/release-gate-driver.mjs', 'line': 3568, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/release-gate-driver.mjs', 'line': 3824, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/release-gate-driver.test.mjs', 'line': 32, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/release-gate-driver.test.mjs', 'line': 799, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/reporters/codebuddy-reporter.mjs', 'line': 76, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/reporters/codebuddy-reporter.mjs', 'line': 95, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/FORGE/src/reporters/codebuddy-reporter.mjs', 'line': 121, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/docs/archive/changelog-experimental/v0.92.md', 'line': 34, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/docs/archive/changelog-experimental/v0.92.md', 'line': 37, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/docs/changelog/v1.2/v1.2.5.md', 'line': 198, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/hooks/commit-msg', 'line': 81, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/package.json', 'line': 20, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/agent-shield.ts', 'line': 198, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/cli/demo.ts', 'line': 404, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/commands/init.ts', 'line': 183, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/commands/init.ts', 'line': 190, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/governance.ts', 'line': 231, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/governance.ts', 'line': 460, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/governance.ts', 'line': 461, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/governance.ts', 'line': 462, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/governance.ts', 'line': 463, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/hook-install.ts', 'line': 33, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/pr-store.ts', 'line': 220, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/report-generator.ts', 'line': 258, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a15-action-constraint.ts', 'line': 66, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a2-secret-leak.ts', 'line': 167, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a2-secret-leak.ts', 'line': 196, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a20-network-exfiltration.ts', 'line': 58, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a3-careful-modify.ts', 'line': 68, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a3-careful-modify.ts', 'line': 73, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a3-careful-modify.ts', 'line': 88, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/ruleset-loader.ts', 'line': 646, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/rulesets/security.json', 'line': 78, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/rulesets/sofagent.json', 'line': 117, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/webhook.ts', 'line': 166, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/webhook.ts', 'line': 171, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/audit/src/webhook.ts', 'line': 192, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 24, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 25, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 26, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 49, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 52, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 73, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 75, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 94, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 97, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 113, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 115, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 138, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 139, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 140, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 142, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser-oversized.test.ts', 'line': 144, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser.test.ts', 'line': 53, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser.test.ts', 'line': 55, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser.test.ts', 'line': 64, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/__tests__/diff-parser.test.ts', 'line': 76, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/audit-history.ts', 'line': 93, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/export/detector-glossary.ts', 'line': 134, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/export/detector-regex.ts', 'line': 67, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/export/detector-regex.ts', 'line': 113, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/federation.ts', 'line': 292, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/log-reader.ts', 'line': 69, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/repo-hash.ts', 'line': 59, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/repo-hash.ts', 'line': 60, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/verify-evidence.ts', 'line': 109, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/core/src/verify-evidence.ts', 'line': 124, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/daemon/src/cloud-exec.ts', 'line': 79, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/daemon/src/cloud-exec.ts', 'line': 130, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/daemon/src/cloud-exec.ts', 'line': 139, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/daemon/src/commands/knowledge-status.ts', 'line': 70, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/daemon/src/inspectors/knowledge-health.ts', 'line': 128, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/daemon/src/inspectors/knowledge-health.ts', 'line': 140, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/daemon/src/ota/upgrade-policy.ts', 'line': 137, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/daemon/src/ota/upgrade-policy.ts', 'line': 253, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/daemon/src/usb-detect.ts', 'line': 336, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/dsh-plugins/plugin-kit/src/index.test.ts', 'line': 273, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/mcp/src/__tests__/trace-reconcile-tool.test.ts', 'line': 30, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/mcp/src/__tests__/trace-reconcile-tool.test.ts', 'line': 32, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/mcp/src/tools/notify-session.ts', 'line': 68, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/mcp/src/tools/notify-session.ts', 'line': 76, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/engineer-path-guard.test.ts', 'line': 7, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/fix-applier-path-guard.test.ts', 'line': 7, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/benchmark/mlflow-exporter.ts', 'line': 145, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/benchmark/mlflow-exporter.ts', 'line': 146, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/durable/wal-writer.ts', 'line': 88, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/loop-agent/fix-applier.ts', 'line': 403, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/loop-agent/fix-applier.ts', 'line': 448, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/loop/checker-nodes.ts', 'line': 143, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/loop/checker-nodes.ts', 'line': 447, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/loop/deps-defaults.ts', 'line': 69, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/loop/engineer-execute.ts', 'line': 75, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/refine-agent/snapshot-manager.ts', 'line': 142, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/refine-agent/snapshot-manager.ts', 'line': 170, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/refine-agent/snapshot-manager.ts', 'line': 175, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/tools.ts', 'line': 317, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/tools.ts', 'line': 467, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/orchestrator/src/tools.ts', 'line': 509, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/rules/src/ast/__tests__/ast-engine.test.ts', 'line': 62, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/rules/src/ast/__tests__/ast-engine.test.ts', 'line': 63, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/rules/src/ast/__tests__/ast-engine.test.ts', 'line': 64, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/rules/src/ast/rules/asi04-sbom.ts', 'line': 124, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/rules/src/ast/rules/asi04-sbom.ts', 'line': 125, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/rules/src/ast/rules/semver.ts', 'line': 9, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/rules/src/ast/rules/semver.ts', 'line': 36, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/data-ingest.ts', 'line': 342, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/data-ingest.ts', 'line': 344, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/data-ingest.ts', 'line': 351, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/data-ingest.ts', 'line': 374, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/data-ingest.ts', 'line': 380, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/gpu-queue.ts', 'line': 237, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/retention-policy.ts', 'line': 309, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 111, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 149, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 151, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 181, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 191, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 221, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 267, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 273, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 285, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/engine/train/src/train-env.ts', 'line': 290, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/install.sh', 'line': 723, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/playbook/acceptance-node-probes.js', 'line': 251, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/playbook/acceptance-test.sh', 'line': 1488, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/playbook/acceptance-test.sh', 'line': 1488, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/playbook/acceptance-test.sh', 'line': 1516, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/playbook/regression-checklist.md', 'line': 1635, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/audit-baseline-sync.sh', 'line': 107, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-anchors.mjs', 'line': 388, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-anchors.mjs', 'line': 397, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-anchors.mjs', 'line': 489, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-anchors.mjs', 'line': 526, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-anchors.mjs', 'line': 910, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-docs.sh', 'line': 1286, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 313, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 656, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 742, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 772, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 781, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 787, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 788, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 816, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 970, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-forms.mjs', 'line': 978, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-fresh-eyes-artifacts.mjs', 'line': 70, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-paired-records.mjs', 'line': 305, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-shell-injection.sh', 'line': 8, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-shell-injection.sh', 'line': 70, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-shell-injection.sh', 'line': 70, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-shell-injection.sh', 'line': 89, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/check-shell-injection.sh', 'line': 89, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/doc-score.mjs', 'line': 407, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/doc-score.mjs', 'line': 438, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/lib/listed-badges.mjs', 'line': 39, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/lib/unwired-reachability.mjs', 'line': 308, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/check/public-api.mjs', 'line': 242, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/gen/gen-api-tools.mjs', 'line': 121, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/gen/gen-draft-lib.mjs', 'line': 122, 'match': 'exec(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/release/gitdata-push.mjs', 'line': 43, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/release/gitdata-push.mjs', 'line': 158, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'sofagent-main/tools/verify/verify-chain.mjs', 'line': 171, 'match': 'execSync(', 'label': '命令执行'}], 'data_exfiltration': [{'file': 'sofagent-main/FORGE/src/release-gate-driver.mjs', 'line': 41, 'match': 'token 前思考常超 300s。Node fetch', 'label': '凭据字段进入网络请求'}, {'file': 'sofagent-main/docs/archive/changelog-experimental/v0.90.md', 'line': 91, 'match': 'process.env` 读取、`fetch()` 外部 URL（只覆盖了 `curl/wget', 'label': '读取敏感数据后发起网络请求'}, {'file': 'sofagent-main/docs/archive/validation-digest/README.md', 'line': 183, 'match': 'tokenizer/vision 配置 + `dist/package` 运行时 wheel + `example_request', 'label': '凭据字段进入网络请求'}, {'file': 'sofagent-main/playbook/acceptance-test.sh', 'line': 4557, 'match': 'token 明文（视图/快照/redact 三面零 secret）/ 注入器写值正确 / 轮换后旧值失效 / 吊销立即拒绝注入 / 范围声明三字段（reques', 'label': '凭据字段进入网络请求'}, {'file': 'sofagent-main/tools/dashboard/serve-dashboard.mjs', 'line': 982, 'match': "process.env.DASHBOARD_ALLOW_CORS === '1' ? '* 已开启' : '已关闭（跨源 fetch", 'label': '读取敏感数据后发起网络请求'}], 'dangerous_commands': [{'file': 'sofagent-main/SKILL/agents/reviewer/SKILL.md', 'line': 150, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'sofagent-main/SKILL/harness/entry-gate.md', 'line': 20, 'match': 'rm -rf /`/删非项目文件/改系统配置/`curl\\|bash` | ✅ | ⚠️ | ❌ | ✅/❌/N/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/SKILL/harness/installer.md', 'line': 58, 'match': 'rm -rf ~/.sofagent/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/SKILL/harness/task-aware.md', 'line': 28, 'match': 'rm -rf/git reset/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/archive/changelog-experimental/v0.73.md', 'line': 82, 'match': 'rm -rf / / 删除非项目文件 / 修改系统配置」；文件写入能力 → 「绝对不能覆盖 .git/ / 修改 ~/.ssh/」 | `sofagent/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/archive/changelog-experimental/v0.81.md', 'line': 133, 'match': 'rm -rf** | `rm -rf dist/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/archive/changelog-experimental/v0.90.md', 'line': 67, 'match': 'rm -rf /`、`curl|bash`、`mkfs.`、`dd if=of=/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/archive/changelog-experimental/v0.90.md', 'line': 67, 'match': 'dd if=of=/dev', 'label': 'dd 覆盖设备'}, {'file': 'sofagent-main/docs/archive/changelog-experimental/v0.99.2.md', 'line': 30, 'match': 'rm -rf dist/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/archive/evidence/2026-06-23-workbuddy-ab.md', 'line': 61, 'match': 'rm -rf /tmp）和任务 4（「优化一下那个东西」），B 组 Agent 在移除了 sofagent skill 后**同样拒绝了、同样追问了*', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/changelog/releasing/07-tool-health.md', 'line': 105, 'match': 'rm -rf /tmp/hook-test /tmp/fe-verify-bin /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/changelog/releasing/09-publish.md', 'line': 293, 'match': 'rm -rf engine/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/changelog/v1.1/v1.1.4.md', 'line': 121, 'match': 'rm -rf /、fork 炸弹、curl\\|sh、mkfs、dd of=/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/changelog/v1.1/v1.1.5.md', 'line': 101, 'match': 'rm -rf /、fork 炸弹、curl|sh、mkfs、dd of=/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/changelog/v1.1/v1.1.5.md', 'line': 420, 'match': 'rm -rf /、fork 炸弹、curl|sh、mkfs、dd of=/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/changelog/v1.2/v1.2.5.md', 'line': 347, 'match': 'reboot', 'label': '系统关机'}, {'file': 'sofagent-main/docs/changelog/v1.3/v1.3.7.md', 'line': 424, 'match': 'rm -rf /tmp` 误报）与 `agent-shield.ts:79`（豁免 /tmp 与 /home/user/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/changelog/v1.3/v1.3.7.md', 'line': 425, 'match': 'rm -rf /` 与 `/etc` 仍拦截、`/tmp` 与 `/home/bob/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/changelog/v1.5/v1.5.1.md', 'line': 262, 'match': 'rm -rf` 的 path、写文件的落点、外发请求的目标 host），diff 只能看到事后的残留产物，看不到「调用意图」。本版借事件总线把审计输入扩为**双', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/evidence/cases/dsh-plugin-probe-2026-09-15/README.md', 'line': 56, 'match': 'rm -rf /tmp/sofagent-probe-plugin ~/.dsh/profiles/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/evidence/cases/node-inference-stack-2026-09-23/probe.mjs', 'line': 49, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'sofagent-main/docs/guides/multi-device-sync.md', 'line': 39, 'match': 'rm -rf ~/.sofagent/data/knowledge ~/.sofagent/data/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/guides/node-level-audit.md', 'line': 74, 'match': 'rm -rf /`、fork 炸弹、`curl|sh`、`mkfs`、裸设备写入）与 `check_acceptance`（验收门禁），见 `engine/ds', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/docs/guides/review-system.md', 'line': 101, 'match': 'rm -rf engine/audit/node_modules/.vitest`（2026-08-29 三轮审查实证 1 次、复验未复现，疑似 vitest ', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/audit/src/__tests__/intent-channel.test.ts', 'line': 119, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/audit/src/__tests__/intent-channel.test.ts', 'line': 164, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/audit/src/__tests__/intent-channel.test.ts', 'line': 565, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/audit/src/__tests__/intent-channel.test.ts', 'line': 701, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a21-persistence.ts', 'line': 25, 'match': 'reboot', 'label': '系统关机'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a21.test.ts', 'line': 72, 'match': 'reboot', 'label': '系统关机'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a21.test.ts', 'line': 75, 'match': 'reboot', 'label': '系统关机'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a21.test.ts', 'line': 93, 'match': 'reboot', 'label': '系统关机'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a21.test.ts', 'line': 96, 'match': 'reboot', 'label': '系统关机'}, {'file': 'sofagent-main/engine/audit/src/rules/skill-safety-rules.ts', 'line': 55, 'match': 'rm -rf /tmp 与 rm -rf /home/user/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/core/src/__tests__/escalation.test.ts', 'line': 24, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/core/src/__tests__/escalation.test.ts', 'line': 73, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/core/src/__tests__/escalation.test.ts', 'line': 79, 'match': 'reboot', 'label': '系统关机'}, {'file': 'sofagent-main/engine/core/src/__tests__/escalation.test.ts', 'line': 80, 'match': 'reboot', 'label': '系统关机'}, {'file': 'sofagent-main/engine/core/src/__tests__/memory-contract-sensitivity.test.ts', 'line': 35, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'sofagent-main/engine/core/src/__tests__/memory-contract-trust.test.ts', 'line': 34, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'sofagent-main/engine/dsh-plugins/SEAMS.md', 'line': 181, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'sofagent-main/engine/evolve/src/proposer.ts', 'line': 122, 'match': 'rm -rf|curl[^|]*\\|\\s*(ba)?sh|sudo|chmod\\s+777|--force-push/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/mcp/src/mcp-server.ts', 'line': 120, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'sofagent-main/engine/openclaw-plugins/sofagent-audit/src/index.test.ts', 'line': 99, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/meta-harness.test.ts', 'line': 57, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/qa-verify-tools.test.ts', 'line': 215, 'match': 'rm -rf dist/ ', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/qa-verify-tools.test.ts', 'line': 216, 'match': 'rm -rf dist/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/qa-verify-tools.test.ts', 'line': 206, 'match': 'dd if=/dev/zero of=/dev', 'label': 'dd 覆盖设备'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/qa-verify-tools.test.ts', 'line': 207, 'match': 'dd if=/dev/zero of=/dev', 'label': 'dd 覆盖设备'}, {'file': 'sofagent-main/engine/orchestrator/src/index.ts', 'line': 243, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'sofagent-main/engine/orchestrator/src/launcher.ts', 'line': 26, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'sofagent-main/engine/orchestrator/src/launcher.ts', 'line': 43, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'sofagent-main/engine/orchestrator/src/launcher.ts', 'line': 271, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'sofagent-main/engine/orchestrator/src/launcher.ts', 'line': 277, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'sofagent-main/engine/orchestrator/src/launcher.ts', 'line': 278, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'sofagent-main/engine/orchestrator/src/tools.ts', 'line': 273, 'match': 'dd if=... of=/dev', 'label': 'dd 覆盖设备'}, {'file': 'sofagent-main/engine/orchestrator/src/tools.ts', 'line': 406, 'match': 'dd if=... of=/dev', 'label': 'dd 覆盖设备'}, {'file': 'sofagent-main/engine/scripts/uninstall.sh', 'line': 400, 'match': 'rm -rf "$SOFAGENT_HOME/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/train/src/__tests__/security-baseline.test.ts', 'line': 121, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/engine/train/src/db-source.ts', 'line': 58, 'match': 'TRUNCATE', 'label': '数据库破坏'}, {'file': 'sofagent-main/engine/train/src/security-baseline.ts', 'line': 376, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/install.sh', 'line': 194, 'match': 'rm -rf "$rescue_tmp" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/install.sh', 'line': 209, 'match': 'rm -rf "$rescue_tmp" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/playbook/acceptance-node-probes.js', 'line': 1231, 'match': 'reboot', 'label': '系统关机'}, {'file': 'sofagent-main/playbook/acceptance-test.sh', 'line': 1313, 'match': 'rm -rf "$PROJECT_ROOT/data/" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/playbook/acceptance-test.sh', 'line': 2901, 'match': 'rm -rf "$S328_TMP" "$S328_TARGET_HOME" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/playbook/acceptance-test.sh', 'line': 3455, 'match': 'rm -rf "$S357_TMP" "$S357_EMPTY" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/playbook/regression-checklist.md', 'line': 223, 'match': 'rm -rf dist 清产物，acceptance-test 读 dist/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/playbook/regression-checklist.md', 'line': 1445, 'match': 'rm -rf /tmp/rg-nonexist /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/playbook/regression-checklist.md', 'line': 1816, 'match': 'rm -rf engine/\\*/dist" docs/changelog/releasing/', 'label': 'rm -rf 危险删除'}, {'file': 'sofagent-main/tools/check/public-api-baseline.json', 'line': 1618, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'sofagent-main/tools/check/test-count.sh', 'line': 31, 'match': 'rm -rf engine/audit/node_modules/.vitest && bash tools/check/', 'label': 'rm -rf 危险删除'}], 'hardcoded_secrets': [{'file': 'sofagent-main/engine/audit/src/__tests__/export.test.ts', 'line': 327, 'match': "'sk-abcdefghijklmnopqrstuvwxyz'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/__tests__/export.test.ts', 'line': 339, 'match': 'sk-abcdefghijklmnopqrstuvwxyz012345', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/__tests__/export.test.ts', 'line': 374, 'match': "'sk-abcdefghijklmnop'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/__tests__/intent-channel.test.ts', 'line': 204, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'sofagent-main/engine/audit/src/__tests__/rule-a2-adversarial.test.ts', 'line': 46, 'match': 'api_key = "рсk-proj-abcdefghij0123456789ABCDEFGHIJ"', 'label': '明文凭据'}, {'file': 'sofagent-main/engine/audit/src/__tests__/rule-a2-adversarial.test.ts', 'line': 60, 'match': 'secret = "рсk-proj-QUtJQVc5WEFNUExFS0VZMTIzNDU2"', 'label': '明文凭据'}, {'file': 'sofagent-main/engine/audit/src/__tests__/rule-a2-adversarial.test.ts', 'line': 94, 'match': 'api_key = "QUtJQVc5WEFNUExFS0VZMTIzNDU2"', 'label': '明文凭据'}, {'file': 'sofagent-main/engine/audit/src/__tests__/ruleset-redos.test.ts', 'line': 144, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'sofagent-main/engine/audit/src/decision-log.test.ts', 'line': 93, 'match': 'sk-fakekeyabcdefghijklmnopqrstuvwx', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/decision-log.test.ts', 'line': 100, 'match': "'sk-fakekeyabcdefghijklmnopqrstuvwx'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/decision-log.test.ts', 'line': 107, 'match': 'sk-fakekeyabcdefghijklmnopqrstuvwx', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/decision-log.test.ts', 'line': 109, 'match': "'sk-fakekeyabcdefghijklmnopqrstuvwx'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a2.test.ts', 'line': 13, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a2.test.ts', 'line': 94, 'match': 'ghp_abcdefghijklmnopqrstuvwxyz0123456789AB', 'label': 'GitHub token'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a2.test.ts', 'line': 94, 'match': 'token = "ghp_abcdefghijklmnopqrstuvwxyz0123456789AB"', 'label': '明文凭据'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a2.test.ts', 'line': 486, 'match': 'token = "${slackToken}"', 'label': '明文凭据'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a9.test.ts', 'line': 212, 'match': 'sk-1234567890abcdef', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a9.test.ts', 'line': 218, 'match': "'sk-1234567890abcdef'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a9.test.ts', 'line': 231, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'sofagent-main/engine/audit/src/rules/rule-a9.test.ts', 'line': 233, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'sofagent-main/engine/audit/src/rules/runner.test.ts', 'line': 37, 'match': 'sk-1234567890abcdef', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/rules/runner.test.ts', 'line': 189, 'match': 'sk-1234567890abcdef', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/rules/runner.test.ts', 'line': 231, 'match': 'sk-1234567890abcdef', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/audit/src/ruleset-loader.test.ts', 'line': 278, 'match': 'password = "secret123"', 'label': '明文凭据'}, {'file': 'sofagent-main/engine/core/src/__tests__/isomorphic-git-sanitize.test.ts', 'line': 86, 'match': "'sk-1234567890abcdefghijklmnopqrstuv'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/core/src/__tests__/isomorphic-git-sanitize.test.ts', 'line': 142, 'match': 'sk-test1234567890abcdefghijklmnopqrstuv', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/core/src/__tests__/isomorphic-git-sanitize.test.ts', 'line': 49, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'sofagent-main/engine/core/src/__tests__/isomorphic-git-sanitize.test.ts', 'line': 121, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'sofagent-main/engine/core/src/__tests__/isomorphic-git-sanitize.test.ts', 'line': 159, 'match': 'AKIAIOSFODNN7EXAMPLE', 'label': 'AWS access key'}, {'file': 'sofagent-main/engine/core/src/__tests__/isomorphic-git-sanitize.test.ts', 'line': 71, 'match': 'ghp_1234567890abcdefghijklmnopqrstuvwxyz1234', 'label': 'GitHub token'}, {'file': 'sofagent-main/engine/core/src/__tests__/run-envs.test.ts', 'line': 50, 'match': "'sk-12345678901234567890test'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/core/src/security/__tests__/prompt-sanitizer.test.ts', 'line': 76, 'match': 'sk-abcdef1234567890', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/core/src/security/__tests__/prompt-sanitizer.test.ts', 'line': 78, 'match': "'sk-abcdef1234567890'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/core/src/security/__tests__/prompt-sanitizer.test.ts', 'line': 65, 'match': "secret = 'sk-topsecret123456 手机 13812345678'", 'label': '明文凭据'}, {'file': 'sofagent-main/engine/core/src/security/__tests__/prompt-sanitizer.test.ts', 'line': 107, 'match': "token: ' + _ghp, '", 'label': '明文凭据'}, {'file': 'sofagent-main/engine/core/src/security/__tests__/trust-grading.test.ts', 'line': 78, 'match': 'sk-abcdef1234567890', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/daemon/src/federation/__tests__/federation.test.ts', 'line': 130, 'match': 'sk-abcdef1234567890', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/evolve/src/__tests__/evolve.test.ts', 'line': 47, 'match': 'sk-1234567890abcdef123456', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/mcp/src/__tests__/device-data-tools.test.ts', 'line': 65, 'match': 'sk-abcdefghij0123456789', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/mcp/src/__tests__/device-data-tools.test.ts', 'line': 131, 'match': 'sk-abcdefghij0123456789', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/fde-workbench.test.ts', 'line': 164, 'match': 'sk-abc123def456ghij', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/fde-workbench.test.ts', 'line': 167, 'match': "'sk-abc123def456ghij'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/gateway/proxy-gateway.test.ts', 'line': 141, 'match': 'sk-abcdefghijklmnop1234', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/orchestrator/src/__tests__/gateway/proxy-gateway.test.ts', 'line': 151, 'match': "'sk-abcdefghijklmnop1234'", 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/rules/src/ast/__tests__/ast-engine.test.ts', 'line': 42, 'match': '"sk-abcdefghij1234567890"', 'label': 'OpenAI API key'}, {'file': 'sofagent-main/engine/rules/src/ast/__tests__/ast-engine.test.ts', 'line': 46, 'match': 'ghp_abcdefghij1234567890AB', 'label': 'GitHub token'}, {'file': 'sofagent-main/engine/rules/src/ast/__tests__/ast-engine.test.ts', 'line': 44, 'match': 'secret = "xxxxxxxxxxxxxxxx"', 'label': '明文凭据'}, {'file': 'sofagent-main/engine/train/src/__tests__/train-audit.test.ts', 'line': 301, 'match': "'sk-fakekeyabcdefghijklmnopqrstuvwx'", 'label': 'OpenAI API key'}]}

mode

git-refresh

branch

main

2. 第三方复核（GuardDog 3.2.0）

未复核。

3. 依赖漏洞（OSV.dev）

未查询。