{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"superdesigndev-treg","slug":"superdesigndev-treg","rank":23,"url":"https://github.com/superdesigndev/treg","name":"superdesigndev/treg","category":"tools","description":{"zh":"给 Agent 的工具目录：按「要做的事」检索约 2,600 个外部接口（SEO 与 SERP、外链、社交、人物与公司信息补全、广告库、抓取），查看参数与单次调用价格后直接调用，凭据由服务端注入。附带技能，MCP 行在未设置 TREG_TOKEN 前保持禁用。","en":"Tool catalog for agents: search ~2,600 external endpoints (SEO and SERP, backlinks, social, people and company enrichment, ad libraries, scraping) by the task you want done, read each one's parameters and per-call price, then call it with the credential injected server-side. Ships the skill plus an MCP row that stays disabled until TREG_TOKEN is set."},"stars":557,"starsCheckedAt":"2026-08-21","repository":{"owner":"superdesigndev","repo":"treg","requestedRef":null,"subpath":""},"npm":null,"downloads":null,"installMode":"github-source","upstreamInstall":"dsh plugin --profile web add github:superdesigndev/treg","tarball":null,"added":"2026-08-15","page":"https://awesome-dsh-plugin.com/p/superdesigndev/treg/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"superdesigndev-treg","slug":"superdesigndev-treg","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:19:49.870Z","scanStatus":"static-complete","verdict":"caution","score":89,"commit":"603540f653994080d4f507a9a3564e1017c28eef","commitDate":"2026-08-22T10:01:05+10:00","artifactDigest":"sha256:aab37faf68eff26be74e52689f93528110527b5da3f8baf5b3c6ff460e30d0ba","downloadUrl":"https://github.com/superdesigndev/treg/archive/603540f653994080d4f507a9a3564e1017c28eef.tar.gz","installMode":"github-source","installCommand":"dsh plugin --profile web add github:superdesigndev/treg","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"treg-dsh","packageVersion":"0.12.0","bundle":{"patch":"./dsh/cordis.patch.yml"},"client":null,"lifecycleScripts":{},"peerDependencies":[]},"identity":{"status":"not-published","installMode":"github-source","upstreamNpm":null,"manifestName":"treg-dsh","nameMatch":null,"npm":null,"repositoryMatch":"not-checked","provenance":"not-checked","tarballHost":null},"permissions":{"bundlePatch":"dsh/cordis.patch.yml","inserts":[{"id":"treg-skill","name":"treg-dsh","path":"dsh/cordis.patch.yml","disabled":false},{"id":"treg-mcp","name":"@deepseek-ai/dsh-mcp-client","path":"dsh/cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":2,"clientPlatform":null,"parseErrors":[]},"capabilities":["browser-ui","credentials","environment","filesystem","host-bundle","mcp","network","subprocess","telemetry"],"outboundHosts":[{"host":"developers.google.com","count":353},{"host":"docs.x.com","count":351},{"host":"docs.scrapecreators.com","count":340},{"host":"api.dataforseo.com","count":281},{"host":"docs.justoneapi.com","count":281},{"host":"www.justoneapi.com","count":267},{"host":"docs.dataforseo.com","count":168},{"host":"serpapi.com","count":124},{"host":"developers.facebook.com","count":121},{"host":"leadmagic.io","count":65},{"host":"docs.brightdata.com","count":59},{"host":"brightdata.com","count":56},{"host":"www.linkedin.com","count":51},{"host":"docs.companyenrich.com","count":45},{"host":"dataforseo.com","count":44},{"host":"docs.diffbot.com","count":44},{"host":"app.ocean.io","count":44},{"host":"hunter.io","count":42},{"host":"docs.lusha.com","count":41},{"host":"api.leadsforge.ai","count":38},{"host":"api-doc.icypeas.com","count":38},{"host":"www.facebook.com","count":34},{"host":"docs.influencers.club","count":32},{"host":"predictleads.com","count":31},{"host":"moz.com","count":30},{"host":"www.googleapis.com","count":30},{"host":"docs.predictleads.com","count":30},{"host":"treg.to","count":29},{"host":"api.dataforse","count":29},{"host":"api.fiber.ai","count":28},{"host":"docs.peopledatalabs.com","count":28},{"host":"docs.akta.pro","count":27},{"host":"seranking.com","count":27},{"host":"app.findymail.com","count":26},{"host":"docs.tomba.io","count":25},{"host":"api.tikhub.io","count":24},{"host":"www.diffbot.com","count":24},{"host":"docs.coingecko.com","count":24},{"host":"tomba.io","count":24},{"host":"www.reddit.com","count":23}],"findings":[{"id":"HT-CONFIG-001","title":"Cordis 配置包含可执行 !!js 表达式","severity":"low","confidence":"high","layer":"dsh-semantics","path":"dsh/cordis.patch.yml","pathClass":"cordis","line":16,"evidence":"!!js ...` form for its platform-specific rows.","remediation":"!!js 是 DSH 的官方配置机制；只在表达式引入模块、访问进程或网络时需要额外解释。","hash":"1a1216bc2b958710ee4af206"},{"id":"HT-CONFIG-001","title":"Cordis 配置包含可执行 !!js 表达式","severity":"medium","confidence":"high","layer":"dsh-semantics","path":"dsh/cordis.patch.yml","pathClass":"cordis","line":28,"evidence":"!!js (process.env.TREG_TOKEN ?? '') === ''","remediation":"!!js 是 DSH 的官方配置机制；只在表达式引入模块、访问进程或网络时需要额外解释。","note":"表达式访问模块、进程或网络，超出读取注入服务的常规用法","hash":"d2000cefea99a9694e078258"},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"low","layer":"static","path":"examples/proxy-demo/server.js","pathClass":"test-example-docs","line":213,"evidence":".innerHTML =","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","note":"位于测试、示例或文档目录","hash":"3b4d73d165d58865b9a95945"},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"low","layer":"static","path":"examples/proxy-demo/server.js","pathClass":"test-example-docs","line":214,"evidence":".innerHTML =","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","note":"位于测试、示例或文档目录","hash":"3b4d73d165d58865b9a95945"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"packages/npm/bin/treg.js","pathClass":"source","line":7,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"d0951bb04a95a201e24da115"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"packages/npm/bin/treg.js","pathClass":"source","line":7,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"dc9d732c8a08928c99d9c630"},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"packages/npm/bin/treg.js","pathClass":"source","line":42,"evidence":"curl -fsSL ${BASE}/install.sh | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"命中位置附近存在子进程调用","hash":"588d356aaf42f86d1325a523","review":{"verdict":"placeholder","reason":"第47行只是console.error打印手动安装提示文案，未被程序执行。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"packages/npm/bin/treg.js","pathClass":"source","line":47,"evidence":"curl -fsSL ${BASE}/install.sh | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"命中位置附近存在子进程调用","hash":"588d356aaf42f86d1325a523","review":{"verdict":"placeholder","reason":"第47行只是console.error打印手动安装提示文案，未被程序执行。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"scripts/build_plugin.py","pathClass":"source","line":84,"evidence":"curl -fsSL {BASE}/install.sh | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","hash":"cb5f5e1ec001669c2edc19d7","review":{"verdict":"placeholder","reason":"该curl|sh位于CLI_BOOTSTRAP文档字符串内，同样是写入SKILL.md供人类阅读的安装指引文本，不会被执行。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"scripts/build_plugin.py","pathClass":"source","line":129,"evidence":"curl -fsSL {BASE}/install.sh | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"命令位于字符串字面量中，执行路径需人工确认","hash":"cb5f5e1ec001669c2edc19d7","review":{"verdict":"placeholder","reason":"该curl|sh位于CLI_BOOTSTRAP文档字符串内，同样是写入SKILL.md供人类阅读的安装指引文本，不会被执行。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"scripts/catalog_ingest.py","pathClass":"source","line":68,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"197ccaea8ec68d3cf7578dc3"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"scripts/catalog_ingest.py","pathClass":"source","line":729,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"197ccaea8ec68d3cf7578dc3"},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"src/treg/agent_pages.py","pathClass":"source","line":571,"evidence":"curl -fsSL https://treg.to/install.sh | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"命令位于字符串字面量中，执行路径需人工确认","hash":"cf737406c88a391149ff3112","review":{"verdict":"placeholder","reason":"该命令位于HTML文案字符串中（<code>标签内），是agent_pages.py生成的说明页面展示给用户的安装提示文本，代码本身并不执行curl|sh。","model":"sonnet","reviewedAt":"2026-08-22T08:19:49.870Z"}},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"src/treg/api.py","pathClass":"source","line":73,"evidence":"curl … | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"命令位于字符串字面量中，执行路径需人工确认","hash":"c924859c2c46139b1d147559","review":{"verdict":"placeholder","reason":"api.py第72行的'curl … | sh'出现在函数docstring注释中，仅描述本地一键登录场景，不是实际执行的代码。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"src/treg/api.py","pathClass":"source","line":185,"evidence":"curl | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"命令位于字符串字面量中，执行路径需人工确认","hash":"2a28c80f2a53788fab05e7a3","review":{"verdict":"placeholder","reason":"第184行'curl | sh'出现在解释host路由策略的代码注释中，与实际执行无关。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"src/treg/cli.py","pathClass":"source","line":2511,"evidence":"subprocess.Popen","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"bb3797bd1ff3563f9220cfbb"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"src/treg/cli.py","pathClass":"source","line":2700,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"2e6e2d844d4fa409cf397cb3"},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"src/treg/config.py","pathClass":"source","line":344,"evidence":"curl … | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"命令位于字符串字面量中，执行路径需人工确认","hash":"dab3baf0522cfa3f41526799","review":{"verdict":"placeholder","reason":"config.py第344行'curl … | sh'是描述single_user配置项用途的注释文字，非可执行语句。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"src/treg/mcp_install.py","pathClass":"source","line":117,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"77c4191abe2561caf7685279"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"src/treg/mcp_install.py","pathClass":"source","line":119,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"77c4191abe2561caf7685279"},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"src/treg/sandbox.py","pathClass":"source","line":294,"evidence":"curl … | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"更像是展示给用户的安装提示字符串，而非程序自行执行","hash":"ec68304690b1a1bb7bd96ff4"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"src/treg/shell.py","pathClass":"source","line":212,"evidence":"subprocess.Popen","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"fe330a2fe0bc55d47f9d91cd"},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"medium","layer":"static","path":"src/treg/web/index.html","pathClass":"html","line":35,"evidence":".innerHTML =","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","hash":"cf81dab833dfa35344c6a87a"},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"src/treg/web/install.sh","pathClass":"script","line":2,"evidence":"curl -fsSL {BASE}/install.sh | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","hash":"f44a8ccb2737dd0dd99abb4b","review":{"verdict":"placeholder","reason":"第9行同样是注释，说明带token调用install.sh的用法示例，不是可执行代码。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"src/treg/web/install.sh","pathClass":"script","line":9,"evidence":"curl -fsSL {BASE}/install.sh | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","hash":"f44a8ccb2737dd0dd99abb4b","review":{"verdict":"placeholder","reason":"第9行同样是注释，说明带token调用install.sh的用法示例，不是可执行代码。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"medium","layer":"static","path":"src/treg/web/landing.html","pathClass":"html","line":933,"evidence":".innerHTML=","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","hash":"ec9ad4b19d766796ab05d1bf"},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"medium","layer":"static","path":"src/treg/web/landing.html","pathClass":"html","line":934,"evidence":".innerHTML=","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","hash":"ec9ad4b19d766796ab05d1bf"},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"src/treg/web/selfhost.sh","pathClass":"script","line":3,"evidence":"curl -fsSL {BASE}/selfhost.sh | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","hash":"0d7f968cb616b18895fb2d11","review":{"verdict":"placeholder","reason":"selfhost.sh第3行是脚本头部注释，展示自身的curl调用方式，非实际执行语句。","model":"sonnet","reviewedAt":"2026-08-21T10:46:04.905Z"}},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"medium","layer":"static","path":"src/treg/web/tour/index.html","pathClass":"html","line":82,"evidence":".innerHTML=","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","hash":"fc96cfa06436db1d318fbb73"},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"medium","layer":"static","path":"src/treg/web/tour/index.html","pathClass":"html","line":95,"evidence":".innerHTML=","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","hash":"fc96cfa06436db1d318fbb73"},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"medium","layer":"static","path":"src/treg/web/tutorial.html","pathClass":"html","line":159,"evidence":".innerHTML =","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","hash":"7ff76c11d2c22e9ace7e4b39"},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"medium","layer":"static","path":"src/treg/web/tutorial.html","pathClass":"html","line":167,"evidence":".innerHTML=","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","hash":"d2b3959aa6c1933bee49f19e"},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"medium","layer":"static","path":"src/treg/web/vendor/vue-3.5.41.global.prod.js","pathClass":"source","line":7,"evidence":".innerHTML=","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","hash":"d97efc97f21d24e72a850341"},{"id":"HT-CLIENT-001","title":"浏览器端使用危险 HTML 注入点","severity":"medium","confidence":"medium","layer":"static","path":"src/treg/web/vendor/vue-3.5.41.global.prod.js","pathClass":"source","line":9,"evidence":".innerHTML=","remediation":"使用安全 DOM API，并在不可避免时对不可信内容进行严格清洗。","hash":"d97efc97f21d24e72a850341"},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"tests/test_legacy_host_redirect.py","pathClass":"test-example-docs","line":6,"evidence":"curl {BASE}/install.sh | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"命令位于字符串字面量中，执行路径需人工确认；位于测试、示例或文档目录","hash":"e093700229c1361eb0591769"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/test_plugin.py","pathClass":"test-example-docs","line":101,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"dcfe2369f6a63e8d1bbcac08"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/test_shell.py","pathClass":"test-example-docs","line":92,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"2b40f857671ae88df10ec4d1"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/test_shell.py","pathClass":"test-example-docs","line":113,"evidence":"subprocess.run","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"2b40f857671ae88df10ec4d1"},{"id":"HT-EXEC-002","title":"远程脚本直连 Shell 执行","severity":"critical","confidence":"low","layer":"static","path":"tests/test_single_user.py","pathClass":"test-example-docs","line":1,"evidence":"curl … | sh","remediation":"禁止远程内容直接进入 Shell；下载、校验固定哈希后再由用户显式执行。","note":"命令位于字符串字面量中，执行路径需人工确认；位于测试、示例或文档目录","hash":"f58ebb675777c0d6fdebd265"}],"counts":{"critical":0,"high":0,"medium":10,"low":10},"rawCounts":{"critical":14,"high":0,"medium":12,"low":13},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"complete","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":2126,"bytesScanned":13568468,"truncated":false,"lockfiles":[],"pathClasses":{"markdown":98,"source":69,"script":7,"data":8,"test-example-docs":1845,"cordis":1,"manifest":2,"yaml":81,"html":15}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"],"review":{"model":"sonnet","reviewedAt":"2026-08-22T08:19:49.870Z","summary":"treg-dsh是一个工具目录/API代理插件，MCP连接需显式设置TREG_TOKEN才启用，符合其“未配置token前保持禁用”的自述。本条命中的curl|sh命令实为agent_pages.py中用于生成安装说明网页的HTML文案字符串，仅展示给终端用户参考，插件代码本身不会执行该命令，属于文档性占位内容，不构成远程脚本执行风险。","intentMatch":"consistent","findingsReviewed":11,"findingsCandidates":11,"fromCache":10,"usage":{"inputTokens":2,"outputTokens":458,"costUsd":0.021696,"durationMs":8395}}},"timeline":[{"scannedAt":"2026-08-22T08:19:49.870Z","commit":"603540f653994080d4f507a9a3564e1017c28eef","policyVersion":"HT-DSH-0.2.2","verdict":"caution","status":"static-complete"},{"scannedAt":"2026-08-21T11:18:00.515Z","commit":"d1951d5e0b05e6bb8a9694200c83a94a1b334032","policyVersion":"HT-DSH-0.2.1","verdict":"caution","status":"static-complete"},{"scannedAt":"2026-08-21T10:46:04.905Z","commit":"d1951d5e0b05e6bb8a9694200c83a94a1b334032","policyVersion":"HT-DSH-0.2.0","verdict":"caution","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"603540f653994080d4f507a9a3564e1017c28eef","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:19:49.870Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"d1951d5e0b05e6bb8a9694200c83a94a1b334032","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:18:00.515Z"},{"kind":"first-scan","from":null,"to":"caution","commit":"d1951d5e0b05e6bb8a9694200c83a94a1b334032","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:46:04.905Z"}]}