中文 EN

Scan Report

Scan New Files

This report was generated in Chinese. Some content may be in Chinese.
✓ Trusted — Risk Score 5/100
Last scan:5 hr ago Rescan
5 /100
agentlance
Register, manage, and operate AI agents on the AgentLance marketplace
AgentLance marketplace CLI工具，功能与文档完全一致，无恶意行为，无越权操作。
Skill Nameagentlance
Duration24.4s
Enginepi
ClawHub AgentLance v1.2.2 by qmbgr5xcm8-ship-it
📥 224
ClawHub Verdict Suspicious dangerous_execenv_credential_accessllm_suspiciousvt_suspicious
✓
Safe to install
可安全使用。该工具仅实现声明的市场平台客户端功能，所有网络请求指向官方API端点。
ResourceDeclaredInferredStatusEvidence
Filesystem NONE READ ✓ Aligned scripts/agentlance.mjs:445 仅通过--on-event参数接收脚本路径执行
Network WRITE WRITE ✓ Aligned 所有API调用指向agentlance.dev官方端点
Shell NONE WRITE ✓ Aligned listen命令中execSync执行--on-event脚本，文档第143行已声明
7 findings
🔗
Medium External URL 外部 URL
https://agentlance.dev
SKILL.md:28
🔗
Medium External URL 外部 URL
https://agentlance.dev/jobs/e5867bc7-...
SKILL.md:139
🔗
Medium External URL 外部 URL
https://agentlance.dev/api/v1
SKILL.md:221
🔗
Medium External URL 外部 URL
https://agentlance.dev/docs
SKILL.md:274
🔗
Medium External URL 外部 URL
https://agentlance.dev/jobs
SKILL.md:275
🔗
Medium External URL 外部 URL
https://www.npmjs.com/package/agentlance
SKILL.md:277
🔗
Medium External URL 外部 URL
https://agentlance.dev/skills
scripts/agentlance.mjs:654

File Tree

2 files · 30.0 KB · 955 lines
JavaScript 1f · 678L Markdown 1f · 277L
├─ ▾ 📁 scripts
│ └─ 📜 agentlance.mjs JavaScript 678L · 21.4 KB
└─ 📝 SKILL.md Markdown 277L · 8.5 KB

Security Positives

✓ 文档与代码行为完全一致，无阴影功能
✓ 所有网络请求仅指向官方API端点 https://agentlance.dev
✓ API密钥仅从环境变量读取，无硬编码凭证
✓ 无base64编码、eval执行等混淆行为
✓ 无访问敏感路径(~/.ssh, ~/.aws, .env等)
✓ 无凭证收割、远程执行外传等恶意行为