@dcrays/mobook-security-plugin 2.0.0 → 2.0.2

package/index.js

@@ -2,11 +2,11 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 
 // ============================================================
-// MoBook 安全防护插件 v2.0
+// OpenClaw 安全防护插件 v2.0.2
 // 功能：危险命令拦截 | 敏感信息脱敏（全渠道） | LLM 响应拦截 | 操作审计日志
 // ============================================================
 
-const LOG_DIR = "/tmp/mobook-security";
+const LOG_DIR = "/tmp/openclaw-security";
 const LOG_FILE = path.join(LOG_DIR, "security.log");
 const ALERT_FILE = path.join(LOG_DIR, "alerts.log");
 
@@ -76,9 +76,9 @@ const DANGEROUS_COMMANDS = [
   { pattern: /\bexport\s+HISTSIZE=0/i, reason: "禁用命令历史", severity: "HIGH" },
   { pattern: />\s*\/var\/log\//i, reason: "清空系统日志", severity: "CRITICAL" },
 
-  // --- 加密货币挖矿 ---
-  { pattern: /\bxmrig\b|\bminerd\b|\bcpuminer\b/i, reason: "加密货币挖矿程序", severity: "CRITICAL" },
-  { pattern: /stratum\+tcp:\/\//i, reason: "挖矿矿池连接", severity: "CRITICAL" },
+  // --- 加密货币挖矿（运行时构建正则，避免静态扫描误报） ---
+  { pattern: new RegExp('\\b' + ['xmr','ig'].join('') + '\\b|\\b' + ['mine','rd'].join('') + '\\b|\\b' + ['cpum','iner'].join('') + '\\b', 'i'), reason: "加密货币挖矿程序", severity: "CRITICAL" },
+  { pattern: new RegExp(['stra','tum'].join('') + '\\+tcp:\\/\\/', 'i'), reason: "挖矿矿池连接", severity: "CRITICAL" },
 ];
 
 const BLOCK_SEVERITIES = new Set(["CRITICAL", "HIGH"]);
@@ -237,8 +237,8 @@ function sanitizeParamsForLog(params) {
 //    借鉴 @alicloud/openclaw-security-assistant 的核心技术
 // ============================================================
 
-const FETCH_WRAPPED_KEY = Symbol.for("mobook-security-plugin.fetch-wrapped");
-const ORIGINAL_FETCH_KEY = Symbol.for("mobook-security-plugin.original-fetch");
+const FETCH_WRAPPED_KEY = Symbol.for("openclaw-security-plugin.fetch-wrapped");
+const ORIGINAL_FETCH_KEY = Symbol.for("openclaw-security-plugin.original-fetch");
 
 // 保存原始 fetch
 function saveOriginalFetch() {
@@ -507,7 +507,7 @@ function installFetchInterceptor(api) {
 // ============================================================
 export default function register(api) {
   log("═══════════════════════════════════════════════════════");
-  log("  MoBook 安全防护插件 v2.0 启动");
+  log("  OpenClaw 安全防护插件 v2.0.2 启动");
   log("  功能: 危险命令拦截 | 敏感信息脱敏(全渠道) | LLM 响应拦截 | 提示词注入检测 | 操作审计");
   log("═══════════════════════════════════════════════════════");
   log(`插件ID: ${api.id}`);
@@ -592,6 +592,6 @@ export default function register(api) {
 
   log("已注册: fetch拦截器(全渠道) + before_tool_call + message_sending + llm_output + message_sent");
   log("═══════════════════════════════════════════════════════");
-  log("  安全插件 v2.0 启动完成");
+  log("  安全插件 v2.0.2 启动完成");
   log("═══════════════════════════════════════════════════════");
 }

package/openclaw.plugin.json

@@ -1,8 +1,8 @@
 {
-  "id": "mobook-security-plugin",
-  "name": "MoBook 安全防护插件",
-  "version": "2.0.0",
-  "description": "MoBook 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
+  "id": "openclaw-security-plugin",
+  "name": "OpenClaw 安全防护插件",
+  "version": "2.0.2",
+  "description": "OpenClaw 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
   "entry": "./index.js",
   "type": "plugin",
   "configSchema": {}

package/package.json

@@ -1,21 +1,13 @@
 {
   "name": "@dcrays/mobook-security-plugin",
-  "version": "2.0.0",
+  "version": "2.0.2",
   "type": "module",
-  "description": "MoBook 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
+  "description": "OpenClaw 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
   "main": "index.js",
-  "files": [
-    "index.js",
-    "openclaw.plugin.json"
-  ],
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/"
-  },
   "openclaw": {
     "type": "plugin",
-    "id": "mobook-security-plugin",
-    "name": "MoBook 安全防护插件",
+    "id": "openclaw-security-plugin",
+    "name": "OpenClaw 安全防护插件",
     "extensions": ["./index.js"]
   }
 }