跳到主要内容
知仓学习社ZHICANG

baoyu-danger-gemini-web

Generates images and text via reverse-engineered Gemini Web API. Supports text generation, image generation from prompts, reference images for visio…

读凭据执行命令写文件读文件联网严重 0 · 高危 21guanyang/open-agent-hub

它会碰到什么

扫了多少27 个文本文件,95 KB
它会碰到什么读凭据执行命令写文件读文件联网
命中总数57 处
命中统计严重 0 · 高 21 · 中 20 · 低 16
逐条看命中(21 条严重或高危)
  • scripts/gemini-webapi/utils/get-access-token.ts:91cred-envread
    const forceLogin = !!(process.env.GEMINI_WEB_LOGIN?.trim() || process.env.GEMINI_WEB_FORCE_LOGIN?.trim());
  • scripts/gemini-webapi/utils/get-access-token.ts:91cred-envread
    const forceLogin = !!(process.env.GEMINI_WEB_LOGIN?.trim() || process.env.GEMINI_WEB_FORCE_LOGIN?.trim());
  • scripts/gemini-webapi/utils/load-browser-cookies.ts:253cred-envread
    const force = process.env.GEMINI_WEB_LOGIN?.trim() || process.env.GEMINI_WEB_FORCE_LOGIN?.trim();
  • scripts/gemini-webapi/utils/load-browser-cookies.ts:253cred-envread
    const force = process.env.GEMINI_WEB_LOGIN?.trim() || process.env.GEMINI_WEB_FORCE_LOGIN?.trim();
  • scripts/gemini-webapi/utils/load-browser-cookies.ts:259cred-envread
    const hasExplicitProfile = !!(process.env.GEMINI_WEB_CHROME_PROFILE_DIR?.trim() || process.env.BAOYU_CHROME_PROFILE_DIR?.trim());
  • scripts/gemini-webapi/utils/load-browser-cookies.ts:259cred-envread
    const hasExplicitProfile = !!(process.env.GEMINI_WEB_CHROME_PROFILE_DIR?.trim() || process.env.BAOYU_CHROME_PROFILE_DIR?.trim());
  • scripts/gemini-webapi/utils/load-browser-cookies.ts:272cred-envread
    const profileDir = process.env.GEMINI_WEB_CHROME_PROFILE_DIR?.trim() || resolveGeminiWebChromeProfileDir();
  • scripts/gemini-webapi/utils/paths.ts:1exec-spawn
    import { execSync } from 'node:child_process';
  • scripts/gemini-webapi/utils/paths.ts:1exec-spawn
    import { execSync } from 'node:child_process';
  • scripts/gemini-webapi/utils/paths.ts:13cred-envread
    return process.env.APPDATA ?? path.join(os.homedir(), 'AppData', 'Roaming');
  • scripts/gemini-webapi/utils/paths.ts:18cred-envread
    return process.env.XDG_DATA_HOME ?? path.join(os.homedir(), '.local', 'share');
  • scripts/gemini-webapi/utils/paths.ts:22cred-envread
    const override = process.env.GEMINI_WEB_DATA_DIR?.trim();
  • scripts/gemini-webapi/utils/paths.ts:28cred-envread
    const override = process.env.GEMINI_WEB_COOKIE_PATH?.trim();
  • scripts/gemini-webapi/utils/paths.ts:36cred-envread
    if (!process.env.WSL_DISTRO_NAME) { _wslHome = null; return null; }
  • scripts/gemini-webapi/utils/paths.ts:38exec-spawn
    const raw = execSync('cmd.exe /C "echo %USERPROFILE%"', { encoding: 'utf-8', timeout: 5000 }).trim().replace(/\r/g, '');
  • scripts/gemini-webapi/utils/paths.ts:39exec-spawn
    _wslHome = execSync(`wslpath -u "${raw}"`, { encoding: 'utf-8', timeout: 5000 }).trim() || null;
  • scripts/gemini-webapi/utils/paths.ts:45cred-envread
    const override = process.env.BAOYU_CHROME_PROFILE_DIR?.trim() || process.env.GEMINI_WEB_CHROME_PROFILE_DIR?.trim();
  • scripts/gemini-webapi/utils/paths.ts:45cred-envread
    const override = process.env.BAOYU_CHROME_PROFILE_DIR?.trim() || process.env.GEMINI_WEB_CHROME_PROFILE_DIR?.trim();
  • scripts/main.ts:400cred-envread
    if (args.cookiePath) process.env.GEMINI_WEB_COOKIE_PATH = args.cookiePath;
  • scripts/main.ts:401cred-envread
    if (args.profileDir) process.env.GEMINI_WEB_CHROME_PROFILE_DIR = args.profileDir;
  • scripts/main.ts:423cred-envread
    process.env.GEMINI_WEB_LOGIN = '1';

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Gemini Web Client

Text/image generation via Gemini Web API. Supports reference images and multi-turn conversations.

User Input Tools

When this skill prompts the user, follow this tool-selection rule (priority order):

  1. Prefer built-in user-input tools exposed by the current agent runtime — e.g., AskUserQuestion, request_user_input, clarify, ask_user, or any equivalent.
  2. Fallback: if no such tool exists, emit a numbered plain-text message and ask the user to reply with the chosen number/answer for each question.
  3. Batching: if the tool supports multiple questions per call, combine all applicable questions into a single call; if only single-question, ask them one at a time in priority order.

Concrete AskUserQuestion references below are examples — substitute the local equivalent in other runtimes.

Script Directory

Important: All scripts are located in the scripts/ subdirectory of this skill.

Agent Execution Instructions:

  1. Determine this SKILL.md file's directory path as {baseDir}
  2. Script path = {baseDir}/scripts/<script-name>.ts
  3. Resolve ${BUN_X} runtime: if bun installed → bun; if npx available → npx -y bun; else suggest installing bun
  4. Replace all {baseDir} and ${BUN_X} in this document with actual values

Script Reference:

| Script | Purpose |

|--------|---------|

| scripts/main.ts | CLI entry point for text/image generation |

| scripts/gemini-webapi/* | TypeScript port of gemini_webapi (GeminiClient, types, utils) |

Consent Check (REQUIRED)

Before first use, verify user consent for reverse-engineered API usage.

Consent file locations:

  • macOS: ~/Library/Application Support/baoyu-skills/gemini-web/consent.json
  • Linux: ~/.local/share/baoyu-skills/gemini-web/consent.json
  • Windows: %APPDATA%\baoyu-skills\gemini-web\consent.json

Flow:

  1. Check if consent file exists with accepted: true and disclaimerVersion: "1.0"
  2. If valid consent exists → print warning with acceptedAt date, proceed
  3. If no consent → show disclaimer, ask user via AskUserQuestion:
  • "Yes, I accept" → create consent file with ISO timestamp, proceed
  • "No, I decline" → output decline message, stop
  1. Consent file format: {"version":1,"accepted":true,"acceptedAt":"<ISO>","disclaimerVersion":"1.0"}

Preferences (EXTEND.md)

Check EXTEND.md in priority order — the first one found wins:

| Priority | Path | Scope |

|----------|------|-------|

| 1 | .baoyu-skills/baoyu-danger-gemini-web/EXTEND.md | Project |

| 2 | ${XDG_CONFIG_HOME:-$HOME/.config}/baoyu-skills/baoyu-danger-gemini-web/EXTEND.md | XDG |

| 3 | $HOME/.baoyu-skills/baoyu-danger-gemini-web/EXTEND.md | User home |

If none found, use defaults.

EXTEND.md supports: Default model, proxy settings, custom data directory.

Usage

# Text generation
${BUN_X} {baseDir}/scripts/main.ts "Your prompt"
${BUN_X} {baseDir}/scripts/main.ts --prompt "Your prompt" --model gemini-3-flash

# Image generation
${BUN_X} {baseDir}/scripts/main.ts --prompt "A cute cat" --image cat.png
${BUN_X} {baseDir}/scripts/main.ts --promptfiles system.md content.md --image out.png

# Vision input (reference images)
${BUN_X} {baseDir}/scripts/main.ts --prompt "Describe this" --reference image.png
${BUN_X} {baseDir}/scripts/main.ts --prompt "Create variation" --reference a.png --image out.png

# Multi-turn conversation
${BUN_X} {baseDir}/scripts/main.ts "Remember: 42" --sessionId session-abc
${BUN_X} {baseDir}/scripts/main.ts "What number?" --sessionId session-abc

# JSON output
${BUN_X} {baseDir}/scripts/main.ts "Hello" --json

Options

| Option | Description |

|--------|-------------|

| --prompt, -p | Prompt text |

| --promptfiles | Read prompt from files (concatenated) |

| --model, -m | Model: gemini-3-pro (default), gemini-3-flash, gemini-3-flash-thinking, gemini-3.1-pro-preview |

| --image [path] | Generate image (default: generated.png) |

| --reference, --ref | Reference images for vision input |

| --sessionId | Session ID for multi-turn conversation |

| --list-sessions | List saved sessions |

| --json | Output as JSON |

| --login | Refresh cookies, then exit |

| --cookie-path | Custom cookie file path |

| --profile-dir | Chrome profile directory |

Models

| Model | Description |

|-------|-------------|

| gemini-3-pro | Default, latest 3.0 Pro |

| gemini-3-flash | Fast, lightweight 3.0 Flash |

| gemini-3-flash-thinking | 3.0 Flash with thinking |

| gemini-3.1-pro-preview | 3.1 Pro preview (empty header, auto-routed) |

Authentication

First run opens browser for Google auth. Cookies cached automatically.

When no explicit profile dir is set, cookie refresh may reuse an already-running local Chrome/Chromium debugging session tied to a standard user-data dir.

Set --profile-dir or GEMINI_WEB_CHROME_PROFILE_DIR to force a dedicated profile and skip existing-session reuse.

This is a best-effort CDP session reuse path, not the Chrome DevTools MCP prompt-based --autoConnect flow described in Chrome's official docs.

Supported browsers (auto-detected): Chrome, Chrome Canary/Beta, Chromium, Edge.

Force refresh: --login flag. Override browser: GEMINI_WEB_CHROME_PATH env var.

Environment Variables

| Variable | Description |

|----------|-------------|

| GEMINI_WEB_DATA_DIR | Data directory |

| GEMINI_WEB_COOKIE_PATH | Cookie file path |

| GEMINI_WEB_CHROME_PROFILE_DIR | Chrome profile directory |

| GEMINI_WEB_CHROME_PATH | Chrome executable path |

| HTTP_PROXY, HTTPS_PROXY | Proxy for Google access (set inline with command) |

Sessions

Session files stored in data directory under sessions/<id>.json.

Contains: id, metadata (Gemini chat state), messages array, timestamps.

Extension Support

Custom configurations via EXTEND.md. See Preferences section for paths and supported options.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。