thzxx

thzxx opened issue MetonaTeam/metona-ai-desktop#31

2026-07-21 21:55:57 +08:00

[P1/高] estimateTokens 忽略 tool.parameters，token 估算严重偏低

thzxx opened issue MetonaTeam/metona-ai-desktop#30

2026-07-21 21:55:56 +08:00

[P1/高] compressMessages 用 user 角色注入摘要，导致语义混淆

thzxx opened issue MetonaTeam/metona-ai-desktop#29

2026-07-21 21:55:56 +08:00

[P1/高] Agent Engine waitForAbort 总是返回 true，无法检测实际 abort 完成状态

thzxx opened issue MetonaTeam/metona-ai-desktop#28

2026-07-21 21:55:55 +08:00

[P1/高] Agnes Adapter 多模态索引映射在 system 消息存在时错位

thzxx opened issue MetonaTeam/metona-ai-desktop#27

2026-07-21 21:55:54 +08:00

[P1/高] DeepSeek Adapter 静默丢弃 images 字段，多模态输入完全不可用

thzxx opened issue MetonaTeam/metona-ai-desktop#26

2026-07-21 21:55:53 +08:00

[P1/高] openai-format tool 消息 content 可能被赋为 undefined，导致 API 400

thzxx opened issue MetonaTeam/metona-ai-desktop#25

2026-07-21 21:55:53 +08:00

[P1/高] sse-stream flushToolCallBuffer 静默丢弃 JSON 解析失败的工具调用

thzxx opened issue MetonaTeam/metona-ai-desktop#24

2026-07-21 21:55:52 +08:00

[P1/高] BaseAdapter getFetchSignal 每次新建 timer 未清理，导致 timer 泄漏

thzxx opened issue MetonaTeam/metona-ai-desktop#23

2026-07-21 21:55:51 +08:00

[P1/高] BaseAdapter mapError 字符串匹配 401/429，会误匹配 URL 中的数字

thzxx opened issue MetonaTeam/metona-ai-desktop#22

2026-07-21 21:55:50 +08:00

[P1/高] CodeSearchTool ripgrep pattern 未转义，可注入命令行选项

thzxx opened issue MetonaTeam/metona-ai-desktop#21

2026-07-21 21:55:49 +08:00

[P1/高] SearchFilesTool walkDir 递归无深度限制，可触发栈溢出或长时间阻塞

thzxx opened issue MetonaTeam/metona-ai-desktop#20

2026-07-21 21:55:49 +08:00

[P1/高] DeleteFileTool TOCTOU 竞态，存在检查与删除之间可被替换

thzxx opened issue MetonaTeam/metona-ai-desktop#19

2026-07-21 21:55:48 +08:00

[P1/高] GitDiffTool pathspec 未校验工作空间内，可读取任意仓库差异

thzxx opened issue MetonaTeam/metona-ai-desktop#18

2026-07-21 21:55:47 +08:00

[P1/高] ConfirmationHook waitForConfirmation 超时竞态条件

thzxx opened issue MetonaTeam/metona-ai-desktop#17

2026-07-21 21:55:46 +08:00

[P1/高] AuditLogHook 未 try-catch，异常会中断工具执行链

thzxx opened issue MetonaTeam/metona-ai-desktop#15

2026-07-21 21:55:45 +08:00

[P1/高] PromptInjectionDefender 单词边界缺失，关键词易被绕过

thzxx opened issue MetonaTeam/metona-ai-desktop#16

2026-07-21 21:55:45 +08:00

[P1/高] PromptInjectionDefender 未检测 Unicode 同形字符与零宽字符

thzxx opened issue MetonaTeam/metona-ai-desktop#14

2026-07-21 21:55:44 +08:00

[P1/高] PolicyEngine JSON.stringify 后正则匹配易被绕过

thzxx opened issue MetonaTeam/metona-ai-desktop#13

2026-07-21 21:55:43 +08:00

[P1/高] Sandbox scanCode 漏掉 require('fs') 和动态 import，可绕过沙箱

thzxx opened issue MetonaTeam/metona-ai-desktop#12

2026-07-21 21:55:42 +08:00

[P1/高] ToolRegistry timeoutMs 为 undefined 时导致 0ms 立即触发超时