Skip to content

docs: add security clarification for enterprise users (#41)#48

Merged
SonicBotMan merged 1 commit into
mainfrom
fix/issue-41-security-clarification
Mar 15, 2026
Merged

docs: add security clarification for enterprise users (#41)#48
SonicBotMan merged 1 commit into
mainfrom
fix/issue-41-security-clarification

Conversation

@SonicBotMan

Copy link
Copy Markdown
Owner

📝 Documentation Update

Fixes #41

Problem

企业用户担心 start.bat 中的 Base64 编码 PowerShell 会被 EDR/杀毒软件拦截。

Solution

经检查,当前版本已不使用 Base64 编码的 PowerShell 命令。所有下载逻辑使用:

  • Windows 10+ 内置 curl.exe
  • 明文 PowerShell Expand-Archive

Changes

在 README_CN.md 的「安全提示」部分添加:

  • ✅ 明确说明不使用 Base64 编码命令
  • ✅ 解释为什么安全软件可能仍然报警
  • ✅ 提供企业用户的解决方案(白名单)
  • ✅ 强调所有脚本都是明文可审计

Security Audit

  • 检查所有 .bat 文件 - 无 EncodedCommand
  • 检查所有 .bat 文件 - 无 Base64 编码
  • 验证下载逻辑使用 curl + 明文 PowerShell

Impact

  • ✅ 消除企业用户的安全顾虑
  • ✅ 提供清晰的解决方案
  • ✅ 提高透明度和可信度

Priority

🟠 P1 High - Security concerns block enterprise adoption


This PR was created automatically by AI assistant

- Clarify that no Base64-encoded PowerShell is used
- Explain why security software may still alert
- Provide solutions for enterprise users
- Emphasize all scripts are plaintext and auditable

Related #41
@SonicBotMan SonicBotMan merged commit 2967262 into main Mar 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[安全风险] start.bat 中内嵌 Base64 PowerShell 代码将被企业 EDR/杀毒软件拦截

1 participant