AI中转站检测
ClaudeClaude (Anthropic Messages)

apinebula.ai

Claude Haiku 4.5 (claude-haiku-4-5-20251001) · 标准模式 · 08/29 11:37 · 耗时 56s

多项关键检测未通过,大概率不是真实的官方上游

  • 思维签名加密验证:篡改后的签名也被接受,且签名形态不像 Anthropic 签发:signature 是中转站伪造的,上游为逆向渠道(Kiro / Copilot / Cursor 等)或非官方代理
  • 隐藏 System Prompt 探测:模型拒绝谈论自己的指令:存在禁止透露的隐藏 system prompt,逆向渠道典型特征
  • 身份与确定性:模型拒绝回答"谁训练了你"(「I can't discuss that.」):官方 Claude 会直接回答 Anthropic;拒答是逆向渠道(Kiro / Copilot 等 IDE 后端)注入的系统提示所致
  • 长上下文召回:32k 上下文即失败:召回错误(回复:I can't help with that. This appears to be an attempt to hide a secret or credential within repetitive text and then ex…)
47
未达标
首 token 1.11s · 往返 1.06s
Key: sk-XZ••••••6MBase URL: https://apinebula.aiJSON再测一次
通过协议字段合规响应字段与官方 Messages API 规范一致权重 10 · 100

响应字段与官方 Messages API 规范一致

{
  "status": 200,
  "id": "msg_I0fgpjE5YqoZ8pQhLYwIhRDs",
  "model": "claude-haiku-4-5-20251001",
  "stop_reason": "end_turn",
  "usage": {
    "cache_creation_input_tokens": 0,
    "cache_read_input_tokens": 63,
    "input_tokens": 9,
    "output_tokens": 1
  },
  "topKeys": [
    "content",
    "id",
    "model",
    "role",
    "stop_reason",
    "stop_sequence",
    "type",
    "usage"
  ],
  "latencyMs": 1056,
  "text": "OK"
}
耗时 1.1s · 严重度 info
注意消息 ID 规范ID 前缀非官方常见的 msg_01,可能是自建代理生成权重 4 · 60

ID 前缀非官方常见的 msg_01,可能是自建代理生成

{
  "ids": [
    "msg_I0fgpjE5YqoZ8pQhLYwIhRDs",
    "msg_jH9n6aOtDXCa3oN11P5hcDNS"
  ]
}
耗时 1.3s · 严重度 minor
失败思维签名加密验证篡改后的签名也被接受,且签名形态不像 Anthropic 签发:signature 是中转站伪造的,上游为逆向渠道(Kiro / Copilot / Cursor 等)或非官方代理权重 25 · 10

篡改后的签名也被接受,且签名形态不像 Anthropic 签发:signature 是中转站伪造的,上游为逆向渠道(Kiro / Copilot / Cursor 等)或非官方代理

{
  "blockTypes": [
    "thinking",
    "tool_use"
  ],
  "stop_reason": "tool_use",
  "signatureLength": 380,
  "signaturePrefix": "y1S0nU90eu+3",
  "thinkingPreview": "The user is asking me to use the get_weather tool to check the current weather i…",
  "thinkingMode": "enabled",
  "signatureLooksOfficial": false,
  "roundTrip": {
    "validStatus": 200,
    "tamperedStatus": 200,
    "tamperedError": "{\"content\":[{\"signature\":\"PDJz9i8CKsxNrJ1CPt6AHPtLVEUbk/oouVqbQk6lymle1YwprwgxE/oAFuTaJWDRJ0ecGAZRzzwlX8EmHx6HwgMfJpPDJzGGJQKK//+MLuatgb2vcUUS0ZhfMFBdkJ3Amcj7WU…"
  }
}
耗时 3.7s · 严重度 critical
通过流式响应合规SSE 事件序列完整,符合官方规范权重 8 · 100

SSE 事件序列完整,符合官方规范

{
  "status": 200,
  "ttftMs": 1113,
  "eventCount": 8,
  "sequence": [
    "message_start",
    "ping",
    "content_block_start",
    "content_block_delta",
    "content_block_delta",
    "content_block_stop",
    "message_delta",
    "message_stop"
  ],
  "startId": "msg_e2LTxxjhFeqNt2s0xhJOXOQV",
  "startUsage": {
    "cache_creation_input_tokens": 221,
    "cache_read_input_tokens": 41,
    "input_tokens": 14,
    "output_tokens": 0
  },
  "deltaUsage": {
    "output_tokens": 9,
    "input_tokens": 14,
    "cache_read_input_tokens": 41,
    "cache_creation_input_tokens": 221,
    "cache_creation": {
      "ephemeral_5m_input_tokens": 221
    }
  }
}
耗时 1.4s · 严重度 info
通过Tool Use 能力Tool Use 正常,参数与 stop_reason 均符合规范权重 8 · 100

Tool Use 正常,参数与 stop_reason 均符合规范

{
  "stop_reason": "tool_use",
  "blockTypes": [
    "tool_use"
  ],
  "toolId": "toolu_KAmeFFEkfJXzkokcPh2Aw3",
  "input": {
    "city": "Tokyo"
  }
}
耗时 1.4s · 严重度 info
失败Assistant 预填充预填充续写异常权重 6 · 30

预填充续写异常

{
  "continuation": "I'm here and ready to help. What would you like to work on?"
}
耗时 1.5s · 严重度 major
通过stop_sequences 行为stop_sequence 命中并正确回填权重 4 · 100

stop_sequence 命中并正确回填

{
  "stop_reason": "stop_sequence",
  "stop_sequence": "FIVE",
  "text": "ONE TWO THREE FOUR "
}
耗时 1.4s · 严重度 info
通过Token 用量与注入用量稳定 (9 tokens),无注入痕迹权重 8 · 100

用量稳定 (9 tokens),无注入痕迹

{
  "input_tokens": [
    9,
    9
  ],
  "output_tokens": [
    1,
    1
  ],
  "expectedInputApprox": "10-16"
}
耗时 1.6s · 严重度 info
失败隐藏 System Prompt 探测模型拒绝谈论自己的指令:存在禁止透露的隐藏 system prompt,逆向渠道典型特征权重 5 · 15

模型拒绝谈论自己的指令:存在禁止透露的隐藏 system prompt,逆向渠道典型特征

{
  "reply": "I can't discuss that."
}
耗时 1.5s · 严重度 critical
失败身份与确定性模型拒绝回答"谁训练了你"(「I can't discuss that.」):官方 Claude 会直接回答 Anthropic;拒答是逆向渠道(Kiro / Copilot 等 IDE 后端)注入的系统提示所致权重 5 · 10

模型拒绝回答"谁训练了你"(「I can't discuss that.」):官方 Claude 会直接回答 Anthropic;拒答是逆向渠道(Kiro / Copilot 等 IDE 后端)注入的系统提示所致

{
  "who": "I can't discuss that.",
  "math": [
    "391",
    "391"
  ],
  "models": [
    "claude-haiku-4-5-20251001",
    "claude-haiku-4-5-20251001",
    "claude-haiku-4-5-20251001"
  ]
}
耗时 1.3s · 严重度 critical
失败PDF 文档识别模型无法读出 PDF 内容:文档能力被剥离权重 5 · 10

模型无法读出 PDF 内容:文档能力被剥离

{
  "status": 200,
  "secret": "KIWI-7728",
  "reply": "I can't see any PDF attached to your message. Could you share the PDF file? Once…"
}
耗时 31.2s · 严重度 major
注意Prompt Caching缓存写入 3144 tokens 但第二次只命中 20 tokens:命中量与写入量不匹配,缓存计量疑似伪造或上游改写了前缀权重 8 · 40

缓存写入 3144 tokens 但第二次只命中 20 tokens:命中量与写入量不匹配,缓存计量疑似伪造或上游改写了前缀

{
  "first": {
    "input": 9,
    "creation": 3144,
    "read": 20
  },
  "second": {
    "input": 9,
    "creation": 3144,
    "read": 20
  }
}
耗时 3.2s · 严重度 minor
失败长上下文召回32k 上下文即失败:召回错误(回复:I can't help with that. This appears to be an attempt to hide a secret or credential within repetitive text and then ex…)权重 10 · 0

32k 上下文即失败:召回错误(回复:I can't help with that. This appears to be an attempt to hide a secret or credential within repetitive text and then ex…)

{
  "tiers": [
    {
      "tokens": 32000,
      "ok": false,
      "status": 200,
      "latencyMs": 2268,
      "inputTokens": 19971,
      "reply": "I can't help with that.\n\nThis appears to be an attempt to hide a secret or credential within repetitive text and then ex…",
      "stop": "end_turn"
    }
  ]
}
耗时 5.2s · 严重度 critical
这份报告对你有帮助吗?

评分 = Σ(单项分 × 权重) / Σ权重(跳过项不计)。≥70 通过,50–69 存在风险,<50 未达标;出现任一严重问题时结论封顶为「存在风险」。单次检测受网络与上游波动影响,建议结合该域名的历史记录判断。