jeecgboot/JeecgBoot
【低代码v2.0，一句话即可生成整个系统】企业级AI低代码平台，一键生成前后端代码甚至整个系统。 AI Skills 一句话画流程、设计表单、生成报表、大屏。内置 AI应用平台涵盖：AI聊天、知识库、流程编排、MCP插件等，兼容主流大模型。引领AI低代码「Skills 生成 → 在线配置 → 代码生成 → 手工合并->AI修改」开发模式，解决 Java 项目 90% 重复工作，提高效率又不失灵活。
- capability exposure inferred + 26
- recent drift inferred + 20
- tool safety inferred + 12
- trust mitigators mixed − 8
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 3d ago · see ecosystem CVEs →
- C · 53 → C · 50
- C · 41 → C · 53
- C · 49 → C · 41
- C · 41 → C · 49
- C · 49 → C · 41
- C · 46 → C · 49
- C · 50 → C · 46
- C · 42 → C · 50
- C · 38 → C · 42
- A · 0 → C · 38
No known CVEs for this server.
- high dangerous code
committed secret: OpenAI key · dynamic exec: new Function(), eval() · obfuscated payload: dynamic require()/import()
analyzed commit 5b71daf · analyzer v33 · 1h ago
skills & prompt files 3
- agent-rules jeecgboot-JeecgBoot-5b71daf/jeecg-boot/CLAUDE.md
- agent-rules jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/AGENTS.md
- agent-rules jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/CLAUDE.md
danger signals14
- dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-boot-module/jeecg-module-demo/src/main/resources/static/bigscreen/template1/js/jquery.easyui.min.js :122
_17=(new Function("return "+s))(); - dynamic code execution eval() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-boot-module/jeecg-module-demo/src/main/resources/static/bigscreen/template1/js/jquery.easyui.min.js :1152
a[0].onclick=eval(btn.handler||function(){ - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/resources/static/generic/build/pdf.js :6598
this.compiledGlyphs[character] = new Function('c', 'size', js); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/resources/static/generic/build/pdf.worker.js :5804
return new Function('src', 'srcOffset', 'dest', 'destOffset', compiled); - dynamic code execution eval() jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-server-cloud/jeecg-visual/jeecg-cloud-xxljob/src/main/resources/static/plugins/zTree/js/jquery.ztree.core.js :1105
newNodes = eval("(" + msg + ")"); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/hooks/jeecg/useAdaptiveWidth.ts :44
let flag = new Function(`return ${innerWidth} ${key}`)(); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/router/helper/routeHelper.ts :47
item.meta.title = new Function('t', `return ${item.meta.title}`)(t); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/utils/common/compUtils.ts :609
item.slotTitle = new Function('t', `return ${item.slotTitle}`)(t); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/utils/index.ts :438
return new Function(`return ${str}`)(); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/views/super/online/cgform/hooks/auto/useCustomHook.ts :73
const fun = new Function(executeCode)(); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/views/super/online/cgform/hooks/auto/useListButton.ts :670
return new Function(`return ${r}`)(); - dynamic code execution new Function() jeecgboot-JeecgBoot-5b71daf/jeecgboot-vue3/src/views/super/online/graphreport/auto/hooks/useChartRender.ts :251
new Function('onClick', 'headId', `${jsCode}`)(onClick, headId); - committed secret OpenAI key jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-module-system/jeecg-system-start/src/main/resources/flyway/sql/mysql/V3.8.0_2__airag_init_db.sql :185
sk-cgQ…(29 chars, redacted) - committed secret OpenAI key jeecgboot-JeecgBoot-5b71daf/jeecg-boot/jeecg-module-system/jeecg-system-start/src/main/resources/flyway/sql/mysql/backup/V20250403.zip!/V3.7.0__all_upgrade.sql :154
sk-JsZ…(51 chars, redacted)
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:jeecgboot/JeecgBoot/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of jeecgboot.