modelscope-cli

The script is primarily a legitimate interactive proxy configuration utility and contains no clear malware or deliberate data exfiltration. However, it has a shell command-injection vulnerability because an untrusted proxy value is written unescaped into ~/.bashrc and subsequently sourced. It also exposes proxy credentials in prompts and completion output. Proxy values should be strictly validated or shell-escaped before persistence, and sensitive values should remain masked in all output.

该脚本是用于批量下载 ModelScope 模型的自动化 shell 脚本。未发现硬编码凭据、环境变量窃取、可疑域名外传、挖矿、反向 shell 或系统破坏行为。安全风险主要来自不必要的 eval、未加引号的变量以及对外部 run_preflight_check.sh 的直接执行。建议使用数组直接调用 modelscope，移除 eval，并对所有路径变量加引号；同时单独审计前置脚本及下载模型的完整性。