opencode-api-security-testing 5.4.0 → 5.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-api-security-testing",
-  "version": "5.4.0",
+  "version": "5.4.2",
   "description": "API Security Testing Plugin for OpenCode - Automated vulnerability scanning and penetration testing",
   "type": "module",
   "main": "src/index.ts",

package/src/index.ts

@@ -334,6 +334,9 @@ const CYBER_SUPERVISOR = DEFAULT_CONFIG.cyber_supervisor;
 const modelFailureCounts = new Map<string, Map<string, number>>();
 const sessionFailures = new Map<string, number>();
 
+// 追踪已注入 agents prompt 的 session (只注入一次)
+const injectedSessions = new Set<string>();
+
 function getConfigPath(ctx: { directory: string }): string {
   return join(ctx.directory, SKILL_DIR, "assets", CONFIG_FILE);
 }
@@ -467,7 +470,7 @@ To activate these agents, simply mention their name in your response (e.g., "@ap
   }
 }
 
-async function execShell(ctx: unknown, cmd: string): Promise<string> {
+async function execShell(_ctx: unknown, cmd: string): Promise<string> {
   try {
     const { stdout, stderr } = await execAsync(cmd, {
       maxBuffer: 1024 * 1024 * 10, // 10MB buffer
@@ -513,7 +516,7 @@ const ApiSecurityTestingPlugin: Plugin = async (ctx) => {
   taskManager.init(ctx.directory, ctx.client);
   taskManager.cleanupOldTasks(); // 清理过期任务
   
-  console.log(`[api-security-testing] Plugin loaded v5.4.0 - collection_mode: ${config.collection_mode}`);
+  console.log(`[api-security-testing] Plugin loaded v5.4.1 - collection_mode: ${config.collection_mode}`);
   console.log(`[api-security-testing] Task persistence enabled at ${join(ctx.directory, TASKS_DIR)}`);
 
   return {
@@ -1266,20 +1269,12 @@ print(json.dumps(result, ensure_ascii=False))
     },
 
     // 赛博监工 Hook - chat.message
+    // 注意：已禁用自动注入 agents prompt，避免重复注入问题
+    // 如需使用 agents，请在需要时手动调用相关工具
     "chat.message": async (input, output) => {
       const sessionID = input.sessionID;
       
-      // 注入 agents prompt（首次）
-      const agentsPrompt = getInjectedAgentsPrompt();
-      if (agentsPrompt) {
-        const parts = output.parts as Array<{ type: string; text?: string }>;
-        const textPart = parts.find(p => p.type === "text");
-        if (textPart && textPart.text) {
-          textPart.text += agentsPrompt;
-        }
-      }
-      
-      // 赛博监工压力注入
+      // 赛博监工压力注入（仅在失败时）
       if (config.cyber_supervisor.enabled && config.cyber_supervisor.auto_trigger) {
         const failures = getFailureCount(sessionID);
         if (failures > 0 && failures <= config.cyber_supervisor.max_retries) {