Back to Home
imnotowann icon

Windsurf-Tool

by imnotowann

Overview

Manages Windsurf accounts, including batch registration, automated switching, and account pool management.

Installation

Run Command
npm start

Security Notes

The `EmailReceiver` module uses `tlsOptions: { rejectUnauthorized: false }` when connecting to IMAP servers, which disables SSL/TLS certificate validation. This is a critical security vulnerability that makes IMAP connections susceptible to Man-in-the-Middle (MITM) attacks, allowing an attacker to intercept and read sensitive email credentials and verification codes. Additionally, the application utilizes `child_process.exec` (including PowerShell commands on Windows and AppleScript on macOS) and `robotjs` for system-level automation (e.g., closing applications, deleting configuration files, simulating keyboard input). While intended for the application's stated purpose, this level of control inherently carries a high risk if the application itself were compromised or if malicious input were somehow introduced, potentially leading to unauthorized system manipulation or data loss. There are no obvious hardcoded secrets or direct obfuscation found.

Similar Servers

Stats

Interest Score30
Security Score4
Cost ClassLow
Stars1
Forks0
Last Update2025-12-15

Tags

account managementautomationbatch processingelectronpuppeteer