Security checks across malware telemetry and agentic risk
This is a real one-click project generator, but it can automatically drop and recreate database tables and generates insecure demo-style authentication without enough safeguards.
Install only for local development or a disposable sandbox. Do not point it at a production or shared database; inspect init.sql first, use a restricted MySQL account, back up data, and change or remove the generated default-password authentication before exposing the app to any network.
'''
bat_path = backend_dir / 'start-backend.bat'
bat_path.write_text(bat_content, encoding='gbk')
os.system(f'start "" "{bat_path}"')
print(f"{Colors.GREEN}[SUCCESS] 后端服务已在新窗口启动{Colors.RESET}")
return True'''
bat_path = frontend_dir / 'start-frontend.bat'
bat_path.write_text(bat_content, encoding='gbk')
os.system(f'start "" "{bat_path}"')
print(f"{Colors.GREEN}[SUCCESS] 前端服务已在新窗口启动{Colors.RESET}")
time.sleep(5)return False
try:
result = subprocess.run(f'"{mvn_path}" clean package -DskipTests -q',
cwd=backend_dir, shell=True, capture_output=True, timeout=300)
if result.returncode == 0:
print(f"{Colors.GREEN}[SUCCESS] 后端构建成功{Colors.RESET}")return False
try:
result = subprocess.run(f'"{npm_path}" install',
cwd=frontend_dir, shell=True, capture_output=True, timeout=180)
if result.returncode == 0:
print(f"{Colors.GREEN}[SUCCESS] 前端依赖安装成功{Colors.RESET}")try:
# 启动后端服务
cmd = f"start /B java -jar {jar_file} --server.port={self.backend_port}"
subprocess.run(cmd, shell=True, cwd=backend_dir)
print(f"{Colors.GREEN}✅ 后端服务已启动 (端口: {self.backend_port}){Colors.RESET}")
return Truetry:
# 启动前端开发服务器
cmd = f"start /B npm run dev -- --port {self.frontend_port}"
subprocess.run(cmd, shell=True, cwd=frontend_dir)
print(f"{Colors.GREEN}✅ 前端服务已启动 (端口: {self.frontend_port}){Colors.RESET}")
return True65/65 vendors flagged this skill as clean.