opencode-api-security-testing 5.4.4 → 5.4.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-api-security-testing",
-  "version": "5.4.4",
+  "version": "5.4.6",
   "description": "API Security Testing Plugin for OpenCode - Automated vulnerability scanning and penetration testing",
   "type": "module",
   "main": "src/index.ts",

package/src/index.ts

@@ -583,31 +583,28 @@ function checkDeps(ctx: { directory: string }): string {
   return "";
 }
 
-function getAgentsDir(): string {
-  const home = process.env.HOME || process.env.USERPROFILE || "/root";
-  return join(home, AGENTS_DIR);
+// 获取插件内部的 agents 目录（而不是 ~/.config/opencode/agents/）
+function getPluginAgentsDir(): string {
+  // 使用插件的安装目录下的 agents 文件夹
+  const pluginDir = dirname(dirname(__filename));
+  return join(pluginDir, "agents");
 }
 
 function getInjectedAgentsPrompt(): string {
-  const agentsDir = getAgentsDir();
+  const agentsDir = getPluginAgentsDir();
   const agentsPath = join(agentsDir, "api-cyber-supervisor.md");
   
   if (!existsSync(agentsPath)) {
+    console.log(`[api-security-testing] Agent file not found: ${agentsPath}`);
     return "";
   }
 
   try {
     const content = readFileSync(agentsPath, "utf-8");
-    return `
-
-[API Security Testing Agents Available]
-When performing security testing tasks, you can use the following specialized agents:
-
-${content}
-
-To activate these agents, simply mention their name in your response (e.g., "@api-cyber-supervisor" to coordinate security testing).
-`;
-  } catch {
+    // 不添加 UI 显示的前缀，直接返回内容（将通过 synthetic part 注入）
+    return content;
+  } catch (e) {
+    console.log(`[api-security-testing] Failed to read agent file: ${e}`);
     return "";
   }
 }