mirror of
https://gitcode.com/JianFeeeee/HomeAgent.git
synced 2026-09-23 02:18:06 +00:00
17 个生产插件全量审查:编译/vet 全过、无硬编码密钥、内核 executeToolCall 有 panic recover + 超时兜底。发现并修复: P1 qq: downloadURL 裸 http.Get 无超时 → 120s client(挂起泄漏) P2 a2a: inbound http.Server 无超时 → Read 30s/Write 120s/Idle 60s (慢速连接占用 goroutine) P5 memo/calendar/rss: 数据持久化直写 → atomicWriteJSON temp+rename (崩溃截断 JSON 丢全部数据) P6 qq: 3 处后台 goroutine(已读标记/rcon转发/下载任务)加 recover (工具调用外 panic 会带崩 homed 进程) P7 browser: dump-dom failback Kill 后补 wait 回收僵尸进程 已知可接受项:bili output_dir 用户可控(本机单用户)、recoverydiag db_path 可读任意 sqlite(诊断工具固有权限,argv 传参无注入)。 全部经 plugindev 重打包 v+0.1 安装验证 config_kept=true。
19 lines
495 B
JSON
19 lines
495 B
JSON
{
|
|
"name": "a2a",
|
|
"name_zh": "A2A 代理通信",
|
|
"name_en": "A2A Agent Communication",
|
|
"version": "1.1.0",
|
|
"description": "Agent-to-Agent 协议通信插件,支持双向 A2A 通信:可查询其他 Agent 并回复其请求。提供 HTTP 服务端暴露本 Agent 能力。",
|
|
"author": "HomeAgent",
|
|
"entry": "plugin.so",
|
|
"tags": [
|
|
"a2a",
|
|
"agent",
|
|
"interop"
|
|
],
|
|
"targets": "linux/amd64",
|
|
"outdir": "dist",
|
|
"bundle": true,
|
|
"replaces": {},
|
|
"source_dirs": []
|
|
} |