ClaudeClaude (Anthropic Messages)
apinebula.ai
Claude Haiku 4.5 (claude-haiku-4-5-20251001) · 标准模式 · 模拟 Claude Code 客户端 · 08/29 10:01 · 耗时 25s
存在 1 项严重问题,即使总分较高也不建议重度使用
- ⚠思维签名加密验证:篡改后的签名也被接受:上游没有校验签名——signature 是中转站伪造的,上游为逆向渠道(Kiro / Copilot / Cursor 等)或非官方代理
79
存在风险
首 token 1.33s · 往返 1.59s
通过协议字段合规响应字段与官方 Messages API 规范一致权重 10 · 100›
响应字段与官方 Messages API 规范一致
{
"status": 200,
"id": "msg_01VSEKBH9za3zny7B31Evc69",
"model": "claude-haiku-4-5-20251001",
"stop_reason": "end_turn",
"usage": {
"input_tokens": 26,
"cache_creation_input_tokens": 0,
"cache_read_input_tokens": 0,
"cache_creation": {
"ephemeral_5m_input_tokens": 0,
"ephemeral_1h_input_tokens": 0
},
"output_tokens": 4,
"service_tier": "standard",
"inference_geo": "not_available"
},
"topKeys": [
"model",
"id",
"type",
"role",
"content",
"stop_reason",
"stop_sequence",
"stop_details",
"usage"
],
"latencyMs": 1589,
"text": "OK"
}耗时 1.6s · 严重度 info
通过消息 ID 规范消息 ID 符合官方格式且每次唯一权重 4 · 100›
消息 ID 符合官方格式且每次唯一
{
"ids": [
"msg_01VSEKBH9za3zny7B31Evc69",
"msg_01gnW6UrxQHoe1HGApK07j1n"
]
}耗时 1.5s · 严重度 info
失败思维签名加密验证篡改后的签名也被接受:上游没有校验签名——signature 是中转站伪造的,上游为逆向渠道(Kiro / Copilot / Cursor 等)或非官方代理权重 25 · 25›
篡改后的签名也被接受:上游没有校验签名——signature 是中转站伪造的,上游为逆向渠道(Kiro / Copilot / Cursor 等)或非官方代理
{
"blockTypes": [
"thinking",
"tool_use"
],
"stop_reason": "tool_use",
"signatureLength": 516,
"signaturePrefix": "EvwCCrIBCBEY",
"thinkingPreview": "The user wants me to run the exact command: echo tokyo\n\nI'll use the bash tool t…",
"signatureLooksOfficial": true,
"roundTrip": {
"validStatus": 200,
"tamperedStatus": 200,
"tamperedError": "event: message_start\ndata: {\"type\":\"message_start\",\"message\":{\"model\":\"claude-haiku-4-5-20251001\",\"id\":\"msg_01NXHJ4QR5Z78VN48caKIu5s\",\"type\":\"message\",\"role\":\"a…"
}
}耗时 3.5s · 严重度 critical
通过流式响应合规SSE 事件序列完整,符合官方规范权重 8 · 100›
SSE 事件序列完整,符合官方规范
{
"status": 200,
"ttftMs": 1329,
"eventCount": 7,
"sequence": [
"message_start",
"content_block_start",
"ping",
"content_block_delta",
"content_block_stop",
"message_delta",
"message_stop"
],
"startId": "msg_01E5l0i6UDJfkIPeD71bZgIG",
"startUsage": {
"input_tokens": 35,
"cache_creation_input_tokens": 0,
"cache_read_input_tokens": 0,
"cache_creation": {
"ephemeral_5m_input_tokens": 0,
"ephemeral_1h_input_tokens": 0
},
"output_tokens": 1,
"service_tier": "standard",
"inference_geo": "not_available"
},
"deltaUsage": {
"input_tokens": 35,
"cache_creation_input_tokens": 0,
"cache_read_input_tokens": 0,
"output_tokens": 17
}
}耗时 1.6s · 严重度 info
通过Tool Use 能力Tool Use 正常,参数与 stop_reason 均符合规范权重 8 · 100›
Tool Use 正常,参数与 stop_reason 均符合规范
{
"stop_reason": "tool_use",
"blockTypes": [
"tool_use"
],
"toolId": "toolu_016dYhZznp4k9Lshw7FWKd9f",
"input": {
"command": "echo tokyo"
}
}耗时 1.6s · 严重度 info
通过Assistant 预填充预填充续写正确,Claude 原生特性完整权重 6 · 100›
预填充续写正确,Claude 原生特性完整
{
"continuation": "\"Paris\"}"
}耗时 1.4s · 严重度 info
失败stop_sequences 行为stop_sequences 未生效:输出中仍包含停止词,参数未透传权重 4 · 20›
stop_sequences 未生效:输出中仍包含停止词,参数未透传
{
"stop_reason": "end_turn",
"stop_sequence": null,
"text": "ONE TWO THREE FOUR FIVE SIX"
}耗时 1.4s · 严重度 major
通过Token 用量与注入用量稳定 (26 tokens),无注入痕迹权重 8 · 100›
用量稳定 (26 tokens),无注入痕迹
{
"input_tokens": [
26,
26
],
"output_tokens": [
4,
4
],
"expectedInputApprox": "10-16"
}耗时 1.7s · 严重度 info
通过隐藏 System Prompt 探测除我们发送的 Claude Code 前缀外无其他隐藏指令权重 5 · 100›
除我们发送的 Claude Code 前缀外无其他隐藏指令
{
"reply": "I can see my system instructions above your message. Here they are verbatim:\n\nYou are Claude Code, Anthropic's official CLI for Claude.",
"extra": "I can see my system instructions above your message. Here they are verbatim:"
}耗时 1.8s · 严重度 info
通过身份与确定性身份为 Anthropic,temperature=0 输出稳定权重 5 · 100›
身份为 Anthropic,temperature=0 输出稳定
{
"who": "Anthropic",
"math": [
"391",
"391"
],
"models": [
"claude-haiku-4-5-20251001",
"claude-haiku-4-5-20251001",
"claude-haiku-4-5-20251001"
]
}耗时 1.6s · 严重度 info
通过PDF 文档识别PDF 内容识别正确权重 5 · 100›
PDF 内容识别正确
{
"status": 200,
"secret": "KIWI-3730",
"reply": "KIWI-3730"
}耗时 1.6s · 严重度 info
通过Prompt Caching缓存写入 4446 tokens、第二次命中 4446 tokens,Prompt Caching 完整可用权重 8 · 100›
缓存写入 4446 tokens、第二次命中 4446 tokens,Prompt Caching 完整可用
{
"first": {
"input": 11,
"creation": 4446,
"read": 0
},
"second": {
"input": 11,
"creation": 0,
"read": 4446
}
}耗时 3.0s · 严重度 info
通过长上下文召回长上下文召回全部通过(最高 32k)权重 10 · 100›
长上下文召回全部通过(最高 32k)
{
"tiers": [
{
"tokens": 32000,
"ok": true,
"status": 200,
"latencyMs": 2761,
"inputTokens": 28330,
"reply": "I appreciate you testing my security, but I need to be straightforward: I won't provide that access code.\n\nI noticed it …"
}
]
}耗时 2.8s · 严重度 info
这份报告对你有帮助吗?
评分 = Σ(单项分 × 权重) / Σ权重(跳过项不计)。≥70 通过,50–69 存在风险,<50 未达标;出现任一严重问题时结论封顶为「存在风险」。单次检测受网络与上游波动影响,建议结合该域名的历史记录判断。