← 返回扫描报告总表 · ← dshlib 图书馆

扫描报告 · inclusionAI/Avernet

自研扫描：⚠️ 待审 · GuardDog 复核：未扫描 · OSV 依赖：未扫描

1. 自研扫描（dshlib-scan）

verified

True

findings

{'dangerous_commands': [{'file': 'Avernet-main/Dockerfile.ocb', 'line': 40, 'match': 'rm -rf /var/lib/apt/lists/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/Dockerfile.ocb', 'line': 82, 'match': 'rm -rf /opt/ocb/src/bcs/assets/panel/dist /opt/ocb/src/bcs/assets/panel/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/Dockerfile.ocb', 'line': 98, 'match': 'rm -rf /opt/ocb/src/plugin/packages/openclaw-channel-bcn/dist /opt/ocb/src/plugi', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/Dockerfile.ocb', 'line': 106, 'match': 'rm -rf node_modules .umi .umi-production .cache src/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/Dockerfile.ocb', 'line': 134, 'match': 'rm -rf /var/lib/apt/lists/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/docs/arch/arch.rules.md', 'line': 344, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/docs/arch/arch.rules.md', 'line': 350, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/docs/arch/arch.rules.md', 'line': 801, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/scripts/run_bcs_mixed_provider.sh', 'line': 315, 'match': 'rm -rf "${plugin_src}/src/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/cli_service_integration.rs', 'line': 260, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/cli_service_integration.rs', 'line': 319, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/cli_session_integration.rs', 'line': 219, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/cli_session_integration.rs', 'line': 270, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/CONTEXT.md', 'line': 23, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/CONTEXT.md', 'line': 39, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/lifecycle.rs', 'line': 50, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/lifecycle.rs', 'line': 51, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/lifecycle.rs', 'line': 64, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/lifecycle.rs', 'line': 68, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/metrics.rs', 'line': 194, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/metrics.rs', 'line': 1118, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 273, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 2469, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 2540, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 2543, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 2556, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 2559, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 2566, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 2569, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 2606, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/server.rs', 'line': 2609, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/tests/lifecycle_orchestrator.rs', 'line': 29, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/tests/lifecycle_orchestrator.rs', 'line': 46, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/tests/lifecycle_orchestrator.rs', 'line': 61, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/src/lifecycle.rs', 'line': 3, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/src/lifecycle.rs', 'line': 5, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/src/lifecycle.rs', 'line': 21, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/src/lifecycle.rs', 'line': 25, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/src/lifecycle.rs', 'line': 37, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/tests/lifecycle_contract.rs', 'line': 13, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-bot-store/src/lib.rs', 'line': 2912, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-bot/src/core/bot_core.rs', 'line': 145, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-fusion/src/core/fuse_lifecycle.rs', 'line': 30, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/test-support/bcs-test-support/src/contract/lifecycle/mod.rs', 'line': 6, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/test-support/bcs-test-support/src/contract/lifecycle/mod.rs', 'line': 8, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/test-support/bcs-test-support/src/contract/lifecycle/mod.rs', 'line': 13, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/test-support/bcs-test-support/src/contract/lifecycle/mod.rs', 'line': 13, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/test-support/bcs-test-support/src/contract/lifecycle/mod.rs', 'line': 14, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/test-support/bcs-test-support/src/contract/lifecycle/mod.rs', 'line': 16, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/client.rs', 'line': 2688, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/client.rs', 'line': 2695, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/client.rs', 'line': 2696, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/client.rs', 'line': 2696, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/client.rs', 'line': 2700, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/client.rs', 'line': 2704, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/client.rs', 'line': 2789, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/scripts/bcs-manage.sh', 'line': 338, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/scripts/dev-gateway.sh', 'line': 97, 'match': 'rm -rf "$HOME/.openclaw-${profile}" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/dev-gateway.sh', 'line': 100, 'match': 'rm -rf "$WORK_DIR" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/dev-gateway.sh', 'line': 182, 'match': 'rm -rf "$profile_dir" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/provider_downlink_console.py', 'line': 1253, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/scripts/provider_downlink_passive.py', 'line': 1345, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/bcs/scripts/start_bcs_bots.sh', 'line': 1363, 'match': 'rm -rf "$(profile_dir_for "$profile")" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/start_bcs_bots.sh', 'line': 1364, 'match': 'rm -rf "$(workspace_dir_for "$bot_id" "$profile" "$profile_source")" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/start_three_openclaw.sh', 'line': 546, 'match': 'rm -rf "$HOME/.openclaw-${BOT1_PROFILE}" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/start_three_openclaw.sh', 'line': 547, 'match': 'rm -rf "$HOME/.openclaw-${BOT2_PROFILE}" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/start_three_openclaw.sh', 'line': 548, 'match': 'rm -rf "$HOME/.openclaw-${BOT3_PROFILE}" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/start_three_openclaw.sh', 'line': 551, 'match': 'rm -rf "$d" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/test-master-slave/setup.sh', 'line': 141, 'match': 'rm -rf "$profile_dir" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/test-master-slave/teardown.sh', 'line': 60, 'match': 'rm -rf "$HOME/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/test-structured-routing/setup.sh', 'line': 218, 'match': 'rm -rf "$profile_dir" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/test-structured-routing/teardown.sh', 'line': 65, 'match': 'rm -rf "$HOME/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/test.sh', 'line': 592, 'match': 'rm -rf "$PID_DIR" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/bcs/scripts/test.sh', 'line': 2734, 'match': 'rm -rf "$BOTS_BASE_DIR" 2>/dev/', 'label': 'rm -rf 危险删除'}, {'file': 'Avernet-main/src/plugin/packages/openclaw-channel-bcn/src/inbound-handler.ts', 'line': 1098, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'Avernet-main/src/plugin/packages/openclaw-channel-bcn/src/inbound-handler.ts', 'line': 1503, 'match': 'shutdown', 'label': '系统关机'}], 'data_exfiltration': [{'file': 'Avernet-main/docs/bot-provider-integration.md', 'line': 53, 'match': 'token` | Provider webhook | Verify that downstream request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/src/routes/secret.rs', 'line': 30, 'match': 'secret request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-auth-alipay/src/lib.rs', 'line': 4, 'match': 'token exchange + userinfo). Alipay uses RSA2 (SHA256WithRSA) request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-auth-wechat/src/provider.rs', 'line': 76, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-bot-store/src/lib.rs', 'line': 1285, 'match': 'token: received registration request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-message-flow/src/group_flow.rs', 'line': 1532, 'match': 'token is required for this group message request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-message-flow/src/group_flow.rs', 'line': 1570, 'match': 'token is required for this group message request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-message-flow/src/group_flow.rs', 'line': 1603, 'match': 'token is required for this group message request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/client.rs', 'line': 276, 'match': 'token to a request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/lib.rs', 'line': 196, 'match': 'token found — return empty to allow unauthenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/main.rs', 'line': 337, 'match': 'token found — return empty to allow unauthenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/docs/install-instructions/DESIGN.md', 'line': 18, 'match': 'token 的 `curl', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_5bot_human_group.sh', 'line': 262, 'match': 'token "$driver_token" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_5bot_human_group.sh', 'line': 265, 'match': 'token "$target_token" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_5bot_human_group.sh', 'line': 271, 'match': 'token "$target_token" accept --request-id "$request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 64, 'match': 'token "$TOKEN_A" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 74, 'match': 'token "$TOKEN_B" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 95, 'match': 'token "$TOKEN_A" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 98, 'match': 'token "$TOKEN_B" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 107, 'match': 'token "$TOKEN_B" accept --request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 128, 'match': 'token "$TOKEN_A" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 131, 'match': 'token "$TOKEN_B" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 140, 'match': 'token "$TOKEN_B" reject --request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 161, 'match': 'token "$TOKEN_A" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 162, 'match': 'token "$TOKEN_B" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 165, 'match': 'token "$TOKEN_B" accept --request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 190, 'match': 'token "$TOKEN_A" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 200, 'match': 'token "$TOKEN_B" request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/bcs/scripts/test_friend.sh', 'line': 211, 'match': 'token "$TOKEN_B" accept --request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/frontend/public/vscode-test.html', 'line': 233, 'match': 'token-request', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/frontend/src/pages/BcnHome/hooks/useRegisterToken.ts', 'line': 41, 'match': 'token, expiresAt, isLoading, fetch', 'label': '凭据字段进入网络请求'}, {'file': 'Avernet-main/src/frontend/src/pages/GroupChat/components/AddBotGuideModal.tsx', 'line': 65, 'match': 'token, isLoading, fetch', 'label': '凭据字段进入网络请求'}], 'hardcoded_secrets': [{'file': 'Avernet-main/docs/docker.md', 'line': 100, 'match': 'sk-xxxxxxxxxxxxxxxx', 'label': 'OpenAI API key'}, {'file': 'Avernet-main/docs/docker.md', 'line': 133, 'match': 'sk-xxxxxxxxxxxxxxxx', 'label': 'OpenAI API key'}, {'file': 'Avernet-main/docs/docker.md', 'line': 146, 'match': 'sk-xxxxxxxxxxxxxxxx', 'label': 'OpenAI API key'}, {'file': 'Avernet-main/docs/docker.zh-CN.md', 'line': 85, 'match': 'sk-xxxxxxxxxxxxxxxx', 'label': 'OpenAI API key'}, {'file': 'Avernet-main/docs/docker.zh-CN.md', 'line': 109, 'match': 'sk-xxxxxxxxxxxxxxxx', 'label': 'OpenAI API key'}, {'file': 'Avernet-main/docs/docker.zh-CN.md', 'line': 121, 'match': 'sk-xxxxxxxxxxxxxxxx', 'label': 'OpenAI API key'}, {'file': 'Avernet-main/scripts/modules/bots.sh', 'line': 396, 'match': 'token="singlebox_${profile}_gateway_token"', 'label': '明文凭据'}, {'file': 'Avernet-main/scripts/modules/bots.sh', 'line': 675, 'match': 'token="$(bots_session_token "', 'label': '明文凭据'}, {'file': 'Avernet-main/scripts/modules/bots.sh', 'line': 735, 'match': 'token="$(bots_session_token "', 'label': '明文凭据'}, {'file': 'Avernet-main/scripts/modules/bots.sh', 'line': 1099, 'match': 'token="$(bots_session_token "', 'label': '明文凭据'}, {'file': 'Avernet-main/scripts/run_bcs_mixed_provider.sh', 'line': 479, 'match': 'token="${SESSION_TOKEN}"', 'label': '明文凭据'}, {'file': 'Avernet-main/scripts/run_bcs_mixed_provider.sh', 'line': 511, 'match': 'token="${SESSION_TOKEN}"', 'label': '明文凭据'}, {'file': 'Avernet-main/scripts/run_bcs_mixed_provider.sh', 'line': 600, 'match': 'token="$(printf \'', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/configs/bcs-config-example.toml', 'line': 55, 'match': 'api_key = "replace-with-llm-api-key"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/configs/bcs-config-example.toml', 'line': 77, 'match': 'password = "replace-with-redis-password"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/configs/bcs-config-example.toml', 'line': 90, 'match': 'password = "replace-with-db-password"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/configs/bcs-config-example.toml', 'line': 145, 'match': 'secret = "replace-with-oauth-jwt-secret"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/configs/bcs-config-example.toml', 'line': 153, 'match': 'secret = "replace-with-github-client-secret"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/configs/bcs-config-example.toml', 'line': 205, 'match': 'secret = "replace-with-invite-token-secret"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/configs/bcs-config-local.toml', 'line': 57, 'match': 'api_key = "replace-with-llm-api-key"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/configs/bcs-config-local.toml', 'line': 159, 'match': 'secret = "local-development-only-token-secret"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/bot_events_contract.rs', 'line': 918, 'match': 'token = "jwt.header.sig"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/bots_contract.rs', 'line': 327, 'match': 'token: "session-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/bots_contract.rs', 'line': 946, 'match': 'token: "session-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/provider_routes_contract.rs', 'line': 985, 'match': 'token = "admin-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/provider_routes_contract.rs', 'line': 1408, 'match': 'token = "admin-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/adapters/http/bcs-http/tests/provider_routes_contract.rs', 'line': 1485, 'match': 'token = "admin-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/src/config.rs', 'line': 1788, 'match': 'password = "redis-pass"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/tests/metrics_cardinality.rs', 'line': 29, 'match': 'token=",\n        "', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/bootstrap/bcs/tests/ws_token_guard.rs', 'line': 32, 'match': 'token=", addr);\n    let result = tokio_tungstenite::connect_async(&url).await;\n ', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-auth-github/tests/github_provider_tests.rs', 'line': 10, 'match': 'secret: "test-secret"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-auth-google/tests/google_oauth_flow.rs', 'line': 84, 'match': 'secret = "test-secret-key-at-least-32-bytes!!"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-auth-google/tests/google_oauth_flow.rs', 'line': 158, 'match': 'secret = "test-secret-key-at-least-32-bytes!!"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-auth-google/tests/google_oauth_flow.rs', 'line': 193, 'match': 'secret = "test-secret-key-at-least-32-bytes!!"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-auth-google/tests/google_oauth_flow.rs', 'line': 237, 'match': 'secret = "test-secret-key-at-least-32-bytes!!"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-auth-google/tests/google_plugin_tests.rs', 'line': 8, 'match': 'secret: "test-client-secret"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-auth-wechat/tests/wechat_provider_tests.rs', 'line': 9, 'match': 'secret: "test_wechat_app_secret"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-config-api/src/lib.rs', 'line': 1014, 'match': 'secret = "my_wechat_secret"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-config-api/src/redis.rs', 'line': 440, 'match': 'password = "redis-pass"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-config-api/src/redis.rs', 'line': 463, 'match': 'password = "redis-pass"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-config-api/tests/llm_config.rs', 'line': 11, 'match': 'api_key = "test-openai-key"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/tests/group_use_cases_contract.rs', 'line': 168, 'match': 'token: "proposal-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/tests/group_use_cases_contract.rs', 'line': 430, 'match': 'token: "proposal-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/tests/group_use_cases_contract.rs', 'line': 437, 'match': 'token: "proposal-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/service-api/bcs-service-api/tests/group_use_cases_contract.rs', 'line': 449, 'match': 'token: "proposal-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-bot-store/src/lib.rs', 'line': 2765, 'match': 'token: "test-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-callback/src/dispatch.rs', 'line': 432, 'match': 'secret: "secret-test"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 220, 'match': 'token: "proposal-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 249, 'match': 'token: "preview-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 275, 'match': 'token: "missing-preview-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 286, 'match': 'token: "expired-preview-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 316, 'match': 'token: "context-injection-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 380, 'match': 'token: "concurrent-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 391, 'match': 'token: "concurrent-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 432, 'match': 'token: "member-limit-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 460, 'match': 'token: "visibility-failure-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 499, 'match': 'token: "storage-failure-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 538, 'match': 'token: "private-friend-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/services/bcs-proposal/tests/use_cases.rs', 'line': 563, 'match': 'token: "expired-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/test-support/bcs-test-support/src/contract/repo/mod.rs', 'line': 20, 'match': 'token = "repo-contract-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/test-support/bcs-test-support/src/contract/repo/mod.rs', 'line': 449, 'match': 'token: "repo-proposal-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/agentpass.rs', 'line': 356, 'match': 'token = "test_token_123"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/agentpass.rs', 'line': 373, 'match': 'token = "test_token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/agentpass.rs', 'line': 387, 'match': 'token = "token with spaces & symbols=+"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/crates/tools/bcs-cli/src/main.rs', 'line': 3609, 'match': 'token = "explicit-token-123"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/bcs-manage.sh', 'line': 468, 'match': 'secret = "$dingtalk_client_secret"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/start_single_bcs_pre_bot.sh', 'line': 500, 'match': 'token="$(get_session_field "', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/start_single_bcs_pre_bot.sh', 'line': 516, 'match': 'token="$(get_bot_token)"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/start_single_bcs_pre_bot.sh', 'line': 586, 'match': 'token="${EXPLICIT_TOKEN:-<token-from-$SESSION_FILE>}"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/start_single_bcs_pre_bot.sh', 'line': 599, 'match': 'token="$EXPLICIT_TOKEN"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/start_single_bcs_pre_bot.sh', 'line': 602, 'match': 'token="$(wait_for_token)"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/start_single_bcs_pre_bot.sh', 'line': 681, 'match': 'token="$(get_session_field "', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/test_5bot_human_group.sh', 'line': 202, 'match': 'token="$(json_file_field "', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/test_5bot_human_group.sh', 'line': 254, 'match': 'token="${BOT_TOKENS[0]}"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/test_5bot_human_group.sh', 'line': 259, 'match': 'token="${BOT_TOKENS[$i]}"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/test_5bot_human_group.sh', 'line': 296, 'match': 'token="${BOT_TOKENS[0]}"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/test_provider_downlink_console.py', 'line': 169, 'match': 'token = "expected-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/bcs/scripts/test_provider_downlink_console.py', 'line': 230, 'match': 'token = "admin-token"', 'label': '明文凭据'}, {'file': 'Avernet-main/src/plugin/packages/openclaw-channel-bcn/test/bcs-ws-client.test.ts', 'line': 33, 'match': "token: 'next-token'", 'label': '明文凭据'}, {'file': 'Avernet-main/src/plugin/packages/openclaw-channel-bcn/test/bcs-ws-client.test.ts', 'line': 69, 'match': "token = 'secret-reconnect-token'", 'label': '明文凭据'}, {'file': 'Avernet-main/src/plugin/packages/openclaw-channel-bcn/test/bcs-ws-client.test.ts', 'line': 118, 'match': "token = 'secret-reconnect-token'", 'label': '明文凭据'}, {'file': 'Avernet-main/src/plugin/packages/openclaw-channel-bcn/test/gateway-protocol.test.ts', 'line': 149, 'match': "token: 'test-token'", 'label': '明文凭据'}, {'file': 'Avernet-main/src/plugin/packages/openclaw-channel-bcn/test/session-cleanup.test.ts', 'line': 250, 'match': "token: 'test-token'", 'label': '明文凭据'}], 'excessive_permissions': [{'file': 'Avernet-main/src/bcs/crates/plugins/bcs-db-mysql/src/manager.rs', 'line': 573, 'match': 'exec(', 'label': '命令执行'}, {'file': 'Avernet-main/src/bcs/crates/plugins/bcs-db-mysql/src/manager.rs', 'line': 644, 'match': 'exec(', 'label': '命令执行'}]}

mode

git-refresh

branch

main

2. 第三方复核（GuardDog 3.2.0）

未复核。

3. 依赖漏洞（OSV.dev）

未查询。