Security audit
Security checks across malware telemetry and agentic risk
This is a coherent local multi-agent hub, but several runtime paths expose agent messages, tasks, or automation triggers without enough identity scoping or user review.
Install only in an environment where you trust the hub operator and participating agents. Bind it to localhost or a protected network, require Bearer auth on SSE and REST endpoints, enforce agent_id == authenticated identity for message/task APIs, avoid automatic task execution without a policy gate, do not point HUB_URL at untrusted servers, and do not run the test or DB-repair scripts against a real database without a backup.
"""发送 macOS 系统通知"""
try:
script = f'display notification "{message}" with title "{title}" sound name "Glass"'
subprocess.run(
["osascript", "-e", script],
timeout=5,
capture_output=True,def stop_hub():
"""停止 Hub"""
os.system("lsof -ti:3100 | xargs kill -9 2>/dev/null")
time.sleep(1.5)
def db_setup_agents(agents_tokens: list):print(" ✓ DB 写入完成")
# 启 Hub
os.system(f"cd {HUB_DIR} && {NPX_BIN} tsx src/server.ts > /tmp/hub-p2d2.log 2>&1 &")
for _ in range(15):
time.sleep(1)
code2, _ = http("GET", "/health")def tsx(script: str) -> dict:
"""执行 tsx 脚本，返回 JSON 结果"""
result = subprocess.run(
["npx", "tsx", "-e", script],
capture_output=True, text=True, cwd=os.path.dirname(os.path.dirname(__file__))
)def tsx_eval(code):
"""执行 tsx 代码片段并返回 JSON 结果"""
cmd = ["npx", "tsx", "-e", code]
proc = subprocess.run(cmd, capture_output=True, text=True, timeout=15,
cwd=os.path.join(os.path.dirname(__file__), ".."))
if proc.returncode != 0:
return {"success": False, "error": proc.stderr.strip() or proc.stdout.strip()}with open(tmpfile, 'w') as f:
f.write(script_content)
try:
result = subprocess.run(
['npx', 'tsx', tmpfile],
capture_output=True, text=True, timeout=30, cwd=HUB_ROOT
)with open(tmpfile, 'w') as f:
f.write(script_content)
try:
result = subprocess.run(
['npx', 'tsx', tmpfile],
capture_output=True, text=True, timeout=30, cwd=HUB_ROOT
)with open(tmpfile, 'w') as f:
f.write(script_content)
try:
result = subprocess.run(
['npx', 'tsx', tmpfile],
capture_output=True, text=True, timeout=30, cwd=HUB_ROOT
)method="PATCH",
)
req.add_header("Content-Type", "application/json")
with urlopen(req, timeout=10) as resp:
return resp.status < 400
except Exception as e:
logger.error(f"更新任务状态失败: {e}")"""简单的 HTTP GET，用于健康检查和 REST API 调用"""
try:
req = Request(url)
with urlopen(req, timeout=timeout) as resp:
return resp.read()
except Exception as e:
logger.warning(f"HTTP GET {url} 失败: {e}")body = json.dumps(data).encode("utf-8")
req = Request(url, data=body, method="PATCH")
req.add_header("Content-Type", "application/json")
with urlopen(req, timeout=timeout) as resp:
return resp.status < 400
except Exception as e:
logger.error(f"HTTP PATCH {url} 失败: {e}")try:
logger.info(f"连接 SSE: {self.url}")
req = Request(self.url)
with urlopen(req, timeout=self.timeout) as resp:
logger.info("SSE 连接成功，开始监听...")
self._read_stream(resp)VirusTotal findings are pending for this skill version.
Detected: suspicious.dangerous_exec, suspicious.dynamic_code_execution