github Java analyzed 5b71daf deep scan · partial (357/3,550 files)
unconfirmed MCP
jeecgboot/JeecgBoot
【低代码v2.0,一句话即可生成整个系统】企业级AI低代码平台,一键生成前后端代码甚至整个系统。 AI Skills 一句话画流程、设计表单、生成报表、大屏。内置 AI应用平台涵盖:AI聊天、知识库、流程编排、MCP插件等,兼容主流大模型。引领AI低代码「Skills 生成 → 在线配置 → 代码生成 → 手工合并->AI修改」开发模式,解决 Java 项目 90% 重复工作,提高效率又不失灵活。
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret ×2 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret, dynamic code execution ×9 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret, dynamic code execution ×9 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret, dynamic code execution ×8 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret, dynamic code execution ×8 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret, dynamic code execution ×8 in jeecgboot/JeecgBoot
- HIGH code analysis flagged committed secret, dynamic code execution ×8 in jeecgboot/JeecgBoot
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 5b71daf · analyzer v33 · 1h ago
skills & prompt files 3
- agent-rules jeecgboot-JeecgBoot-5b71daf/jeecg-boot/CLAUDE.md
- agent-rules jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/AGENTS.md
- agent-rules jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/CLAUDE.md
danger signals14
- dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-boot-module/jeecg-module-demo/src/main/resources/static/bigscreen/template1/js/jquery.easyui.min.js :122
_17=(new Function("return "+s))(); - dynamic code execution eval() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-boot-module/jeecg-module-demo/src/main/resources/static/bigscreen/template1/js/jquery.easyui.min.js :1152
a[0].onclick=eval(btn.handler||function(){ - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/resources/static/generic/build/pdf.js :6598
this.compiledGlyphs[character] = new Function('c', 'size', js); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/resources/static/generic/build/pdf.worker.js :5804
return new Function('src', 'srcOffset', 'dest', 'destOffset', compiled); - dynamic code execution eval() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-server-cloud/jeecg-visual/jeecg-cloud-xxljob/src/main/resources/static/plugins/zTree/js/jquery.ztree.core.js :1105
newNodes = eval("(" + msg + ")"); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/hooks/jeecg/useAdaptiveWidth.ts :44
let flag = new Function(`return ${innerWidth} ${key}`)(); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/router/helper/routeHelper.ts :47
item.meta.title = new Function('t', `return ${item.meta.title}`)(t); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/utils/common/compUtils.ts :609
item.slotTitle = new Function('t', `return ${item.slotTitle}`)(t); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/utils/index.ts :438
return new Function(`return ${str}`)(); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/views/super/online/cgform/hooks/auto/useCustomHook.ts :73
const fun = new Function(executeCode)(); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/views/super/online/cgform/hooks/auto/useListButton.ts :670
return new Function(`return ${r}`)(); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/views/super/online/graphreport/auto/hooks/useChartRender.ts :251
new Function('onClick', 'headId', `${jsCode}`)(onClick, headId); - committed secret OpenAI key jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-module-system/jeecg-system-start/src/main/resources/flyway/sql/mysql/V3.8.0_2__airag_init_db.sql :185
sk-cgQ…(29 chars, redacted) - committed secret OpenAI key jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-module-system/jeecg-system-start/src/main/resources/flyway/sql/mysql/backup/V20250403.zip!/V3.7.0__all_upgrade.sql :154
sk-JsZ…(51 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 1824
filesystem 5
- fs jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/build/utils.ts :1
import fs from 'fs'; - fs jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/build/vite/plugin/theme-plugin/preprocessor/less/index.ts :2
import fs from 'fs'; - fs jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/electron/script/buildBefore.ts :2
import fs from 'fs'; - fs jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/electron/utils/index.ts :1
import fs from 'fs'; - fs (weak) jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/tests/server/service/FileService.ts :13
fileReader = fs.createReadStream(file.path);
shell / exec 1
- shell jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/layouts/default/sider/useLayoutSider.ts :64
exec();
network 8
- net jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/resources/static/generic/build/pdf.worker.js :3397
var stream = this.xref.fetch(streamRef, !encryptMetadata); - net jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/components/Table/src/hooks/useDataSource.ts :70
fetch(params); - net jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/components/Table/src/hooks/useTableForm.ts :41
fetch({ searchInfo: info, page: 1 }); - net jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/components/onlinePreview/open-jssdk.es.js :1
)).setAttribute("style","display:none"),fetch(e).then((function(e){return e.blob()})).then((function(e){var n=URL.createObjectURL(e);t.src=n,document.body.appendChild(t),t.onload=function(){t.contentW - net jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/utils/http/axios/Axios.ts :1
import type { AxiosRequestConfig, AxiosInstance, AxiosResponse, AxiosError } from 'axios'; - net jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/utils/http/axios/axiosCancel.ts :1
import type { AxiosRequestConfig, Canceler } from 'axios'; - net jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/utils/http/axios/axiosTransform.ts :4
import type { AxiosRequestConfig, AxiosResponse } from 'axios'; - net jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/utils/http/axios/index.ts :4
import type { AxiosResponse } from 'axios';
declared dependencies 200
- @jeecg/aiflow@3.9.5-beta
- @iconify/iconify@^3.1.1
- @ant-design/colors@^7.2.1
- @ant-design/icons-vue@^7.0.1
- @vue/shared@^3.5.39
- @vueuse/core@^10.11.1
- @tinymce/tinymce-vue@4.0.7
- @logicflow/core@^2.2.4
- @logicflow/extension@^2.3.0
- @logicflow/vue-node-registry@^1.2.4
- @zxcvbn-ts/core@^3.0.4
- ant-design-vue@^4.2.6
show 28 more
- axios@^1.18.1
- @vant/area-data@^1.5.2
- clipboard@^2.0.11
- codemirror@^5.65.21
- cron-parser@^4.9.0
- cropperjs@^1.6.2
- crypto-js@^4.2.0
- dayjs@^1.11.21
- dom-align@^1.12.4
- echarts@^5.6.0
- emoji-mart-vue-fast@^15.0.5
- enquire.js@^2.1.6
- intro.js@^7.2.0
- lodash-es@^4.18.1
- lodash.get@^4.4.2
- markdown-it@^14.3.0
- markdown-it-link-attributes@^4.0.1
- event-source-polyfill@^1.0.31
- highlight.js@^11.11.1
- @traptitech/markdown-it-katex@^3.6.0
- md5@^2.3.0
- mockjs@^1.1.0
- nprogress@^0.2.0
- path-to-regexp@^6.3.0
- pinia@^3.0.4
- print-js@^1.6.0
- pinyin-pro@^3.28.1
- qs@^6.15.3
160 more not shown — this panel samples each group; the count above is the real total.
obfuscation 2
- dynamic require()/import() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/locales/setupI18n.ts :16
const defaultLocal = await import(`./lang/${locale}.ts`); - dynamic require()/import() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/locales/useLocale.ts :51
const langModule = ((await import(`./lang/${locale}.ts`)) as any).default as LangModule;
perm:untrusted 1
- untrusted jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/components/onlinePreview/open-jssdk.es.js :1
)).setAttribute("style","display:none"),fetch(e).then((function(e){return e.blob()})).then((function(e){var n=URL.createObjectURL(e);t.src=n,document.body.appendChild(t),t.onload=function(){t.contentW