← 返回扫描报告总表 · ← dshlib 图书馆

扫描报告 · liguobao/ds-harness-remote

自研扫描：⚠️ 待审 · GuardDog 复核：未扫描 · OSV 依赖：未扫描

1. 自研扫描（dshlib-scan）

verified

True

findings

{'data_exfiltration': [{'file': 'ds-harness-remote-main/PRIVACY.md', 'line': 14, 'match': 'token during sign-in. This token is used once to request', 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/apps/android/tests/api.test.ts', 'line': 20, 'match': "tokens = await new RemoteServerApi('https://remote.example.com', undefined, fetc", 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/apps/android/tests/api.test.ts', 'line': 69, 'match': "token-for-client', fetch", 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/apps/android/tests/api.test.ts', 'line': 83, 'match': "token-for-client', fetch", 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/apps/android/tests/api.test.ts', 'line': 93, 'match': "token-for-client', fetch", 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/apps/android/tests/api.test.ts', 'line': 105, 'match': "token-for-client', fetch", 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/fixtures/protocol/v1/README.md', 'line': 25, 'match': 'token refresh request', 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/src/client.ts', 'line': 298, 'match': "passwordHint: 'Used only for this HTTPS authorization request", 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/src/harness-api-bridge.ts', 'line': 806, 'match': 'credentialsDescribeSchema, request', 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/src/harness-api-bridge.ts', 'line': 811, 'match': 'credentialsSetSchema, request', 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/src/harness-api-bridge.ts', 'line': 816, 'match': 'credentialsUnsetSchema, request', 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/api-proxy-switch.test.ts', 'line': 36, 'match': 'credentials = local.credentials as unknown as { set: (request', 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/cli.test.ts', 'line': 174, 'match': "credentials must not need a request') }) as unknown as typeof fetch", 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/server-api.test.ts', 'line': 182, 'match': 'tokens())) as unknown as typeof fetch', 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/server-api.test.ts', 'line': 210, 'match': 'tokens())) as unknown as typeof fetch', 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/server-api.test.ts', 'line': 285, 'match': "tokens({ accessToken: 'rotated-access-value', refreshToken: 'rotated-refresh-val", 'label': '凭据字段进入网络请求'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/server-api.test.ts', 'line': 343, 'match': "token reuse detected', 401)) as unknown as typeof fetch", 'label': '凭据字段进入网络请求'}], 'excessive_permissions': [{'file': 'ds-harness-remote-main/apps/android/src/lib/server-url.ts', 'line': 9, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/apps/android/src/state/event-reducer.ts', 'line': 518, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/apps/server/src/gateway.ts', 'line': 10, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/apps/server/src/server.ts', 'line': 53, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/apps/server/src/server.ts', 'line': 139, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/packages/client-core/src/codex-client.ts', 'line': 777, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/packages/plugin/src/codex/codex-image-codec.ts', 'line': 106, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/packages/plugin/src/codex/session-id.ts', 'line': 6, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/packages/plugin/src/codex/virtual-harness.ts', 'line': 509, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/packages/plugin/src/harness-remote-bridge.ts', 'line': 493, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/packages/plugin/src/harness-remote-bridge.ts', 'line': 499, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/packages/plugin/src/harness-version.ts', 'line': 32, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/packages/plugin/src/remote-api-proxy.ts', 'line': 302, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/packages/plugin/src/remote-typert-gateway.ts', 'line': 334, 'match': 'exec(', 'label': '命令执行'}, {'file': 'ds-harness-remote-main/scripts/install.sh', 'line': 139, 'match': '"sudo"', 'label': '完全访问'}, {'file': 'ds-harness-remote-main/scripts/uninstall.sh', 'line': 9, 'match': '"sudo"', 'label': '完全访问'}], 'hardcoded_secrets': [{'file': 'ds-harness-remote-main/apps/android/src/locales/en-US.ts', 'line': 68, 'match': "password: 'Password'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/apps/android/tests/api.test.ts', 'line': 42, 'match': "token: 'account-jwt-token-123456'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/apps/android/tests/api.test.ts', 'line': 51, 'match': "token: 'account-jwt-token-123456'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/apps/android/tests/codex.test.ts', 'line': 21, 'match': "secret: 'not projected'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/apps/android/tests/server-session.test.ts', 'line': 74, 'match': "token: 'account-jwt-token-123456'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/apps/server/tests/server.test.ts', 'line': 12, 'match': "password = 'local-test-password'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/apps/vscode/src/extension.ts', 'line': 724, 'match': "password: 'Password'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/apps/vscode/tests/sign-out.test.ts', 'line': 114, 'match': "token: 'account-token'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/client-core/tests/codex-client.test.ts', 'line': 98, 'match': "secret: 'not projected'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/src/client.ts', 'line': 297, 'match': "password: 'Password'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/cli.test.ts', 'line': 52, 'match': "token: 'web-account-token-value'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/client-runtime.test.ts', 'line': 741, 'match': "password: 'correct horse battery staple'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/codex-domain.test.ts', 'line': 702, 'match': "secret: 'private metadata'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/codex-domain.test.ts', 'line': 726, 'match': "secret: 'private metadata'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/control-runtime.test.ts', 'line': 146, 'match': "token: 'web-account-token-value'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/control-runtime.test.ts', 'line': 167, 'match': "password: 'correct horse battery staple'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/control-runtime.test.ts', 'line': 224, 'match': "token: 'web-account-token-value'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/control-runtime.test.ts', 'line': 241, 'match': "password: 'correct horse battery staple'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/harness-api-bridge.test.ts', 'line': 672, 'match': "secret = 'prompt=/home/user/private.ts token=sk-secret'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/rpc-router.test.ts', 'line': 81, 'match': "secret = 'prompt=/home/user/private.ts token=sk-secret'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/server-api.test.ts', 'line': 81, 'match': "token: 'web-account-token-value'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/server-api.test.ts', 'line': 127, 'match': "token: 'web-account-token-value'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/server-api.test.ts', 'line': 154, 'match': "password: 'correct horse battery staple'", 'label': '明文凭据'}, {'file': 'ds-harness-remote-main/packages/plugin/tests/server-api.test.ts', 'line': 356, 'match': "token: 'web-account-token-value'", 'label': '明文凭据'}], 'dangerous_commands': [{'file': 'ds-harness-remote-main/packages/plugin/tests/multi-client-runtime.test.ts', 'line': 131, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'ds-harness-remote-main/vibe-coding.md', 'line': 398, 'match': 'shutdown', 'label': '系统关机'}], 'manifest_contract': [{'file': 'package.json', 'line': 0, 'match': 'main: ./dist/index.js', 'label': 'main 入口「./dist/index.js」在包内不存在——加载会报 Cannot find module'}]}

mode

git-refresh

branch

main

2. 第三方复核（GuardDog 3.2.0）

未复核。

3. 依赖漏洞（OSV.dev）

未查询。