结果绑定到所列 commit，仅涵盖本站实际执行的静态检查。证据分衡量可复核信息的完整度，不是兼容性百分比，也不构成安全保证。

仓库静态检查

2026年9月8日 09:21

高风险

检查 Commit: 2bcabb2405da
证据分: 72/100
静态风险: 高风险
扫描文件: 28
检查发现: 10

证据分项

来源溯源22/25

安装文档15/25

维护状况18/20

兼容性证据14/20

安全信号3/10

兼容性置信度: 有限

安装期脚本 (6)

website/package.json#preparenpm run validate:locales && npm run prepare:docs && npm run generate:changelog && npm run generate:agents && npm run validate:agent-index
src/copilot-shell/package.json#prepare(cd ../.. && husky src/copilot-shell/.husky) && npm run build && npm run bundle
src/anolisa/npm/package.json#postinstallnode scripts/postinstall.js
src/tokenless/npm/package.json#postinstallnode scripts/postinstall.js
src/agentsight/dsh-plugin/package.json#preparetsc
src/copilot-shell/packages/core/package.json#postinstallnode scripts/postinstall.js

检查发现 (10)

高install.script
src/agentsight/dsh-plugin/package.jsoninstall-time
```
"prepare": "tsc"
```
高install.script
src/anolisa/npm/package.jsoninstall-time
```
"postinstall": "node scripts/postinstall.js"
```

高install.script

src/copilot-shell/package.jsoninstall-time

"prepare": "(cd ../.. && husky src/copilot-shell/.husky) && npm run build && npm run bundle"

高install.script
src/copilot-shell/packages/core/package.jsoninstall-time
```
"postinstall": "node scripts/postinstall.js"
```
高install.script
src/tokenless/npm/package.jsoninstall-time
```
"postinstall": "node scripts/postinstall.js"
```

高install.script

website/package.jsoninstall-time

"prepare": "npm run validate:locales && npm run prepare:docs && npm run generate:changelog && npm run generate:agents && npm run validate:agent-index"

中obfuscation.child-process
src/copilot-shell/packages/core/scripts/postinstall.js:9obfuscation
```
import { execSync } from 'node:child_process';
```
中obfuscation.child-process
src/copilot-shell/packages/core/scripts/postinstall.js:70obfuscation
```
execSync(`xattr -d com.apple.quarantine "${rgBinary}"`, {
```
中obfuscation.child-process
src/tokenless/npm/scripts/postinstall.js:38obfuscation
```
import { execSync } from 'node:child_process';
```
中obfuscation.child-process
src/tokenless/npm/scripts/postinstall.js:88obfuscation
```
const out = execSync('ldd --version 2>&1 || true', {
```

未执行的检查

依赖漏洞数据库扫描
实际安装测试
运行时行为验证

扫描器 1.0.0 · 评分器 1.0.0

anolisa

仓库内包含的插件

概览

仓库检查结果

仓库静态检查

证据分项