diff --git a/cmd/server/app/network/controller/agentcontroller/script.go b/cmd/server/app/network/controller/agentcontroller/script.go
index 13f406492b4834409b160258ef637d756b37c4ed..2e111c8e395ef2e34c2c1a0c2ebfb2b5e21f3222 100644
--- a/cmd/server/app/network/controller/agentcontroller/script.go
+++ b/cmd/server/app/network/controller/agentcontroller/script.go
@@ -1,92 +1,112 @@
-/*
- * Copyright (c) KylinSoft  Co., Ltd. 2024.All rights reserved.
- * PilotGo licensed under the Mulan Permissive Software License, Version 2.
- * See LICENSE file for more details.
- * Author: linjieren <linjieren@kylinos.cn>
- * Date: Thu Jul 25 16:18:53 2024 +0800
- */
-package agentcontroller
-
-import (
-	"regexp"
-
-	"gitee.com/openeuler/PilotGo/cmd/server/app/agentmanager"
-	"gitee.com/openeuler/PilotGo/sdk/logger"
-	"gitee.com/openeuler/PilotGo/sdk/response"
-	"github.com/gin-gonic/gin"
-)
-
-func RunCmd(c *gin.Context) {
-	logger.Debug("process get agent request")
-	// TODO: process agent info
-	uuid := c.Query("uuid")
-	cmd := c.Query("cmd")
-
-	agent := agentmanager.GetAgent(uuid)
-	if agent != nil {
-		data, err := agent.RunCommand(cmd)
-		if err != nil {
-			logger.Error("run command error, agent:%s, cmd:%s", uuid, cmd)
-			response.Fail(c, gin.H{"status": false}, err.Error())
-		}
-		logger.Info("run command on agent result:%v", data)
-		response.Success(c, nil, "run command success")
-		return
-	}
-
-	logger.Info("unknown agent:%s", uuid)
-	response.Fail(c, gin.H{"status": false}, "unknown agent")
-}
-
-func RunScriptWithBooleanCheck(c *gin.Context) {
-	logger.Debug("process get agent script request")
-	uuid := c.Query("uuid")
-	cmd := c.Query("cmd")
-
-	// 调用检测高危命令
-	if containsDangerousCommand(cmd) {
-		logger.Warn("Detected dangerous command")
-		response.Fail(c, gin.H{"status": false}, "Dangerous command detected in script.")
-		return
-	}
-
-	agent := agentmanager.GetAgent(uuid)
-	if agent != nil {
-		data, err := agent.RunCommand(cmd)
-		if err != nil {
-			logger.Error("run script error, agent:%s, cmd:%s", uuid, cmd)
-			response.Fail(c, gin.H{"status": false}, err.Error())
-			return
-		}
-		logger.Info("run script on agent result:%v", data)
-		response.Success(c, nil, "run script success")
-		return
-	}
-
-	logger.Info("unknown agent:%s", uuid)
-	response.Fail(c, gin.H{"status": false}, "unknown agent")
-}
-
-func containsDangerousCommand(content string) bool {
-	for _, pattern := range dangerousCommandsList {
-		matched, err := regexp.MatchString(pattern, content)
-		if err != nil {
-			logger.Error("Error matching pattern %s: %v\n", pattern, err)
-			// TODO
-			continue
-		}
-		if matched {
-			return true
-		}
-	}
-	return false
-}
-
-var dangerousCommandsList = []string{
-	`.*rm\s+-[r,f,rf].*`,
-	`.*lvremove\s+-f.*`,
-	`.*poweroff.*`,
-	`.*shutdown\s+-[f,F,h,k,n,r,t,C].*`,
-	`.*pvremove\s+-f.*`,
-	`.*vgremove\s+-f.*`,
-}
+/*
+ * Copyright (c) KylinSoft  Co., Ltd. 2024.All rights reserved.
+ * PilotGo licensed under the Mulan Permissive Software License, Version 2.
+ * See LICENSE file for more details.
+ * Author: linjieren <linjieren@kylinos.cn>
+ * Date: Thu Jul 25 16:18:53 2024 +0800
+ */
+package agentcontroller
+
+import (
+	"regexp"
+
+	"gitee.com/openeuler/PilotGo/cmd/server/app/agentmanager"
+	"gitee.com/openeuler/PilotGo/sdk/logger"
+	"gitee.com/openeuler/PilotGo/sdk/response"
+	"github.com/gin-gonic/gin"
+)
+
+func RunCmd(c *gin.Context) {
+	logger.Debug("process get agent request")
+	// TODO: process agent info
+	uuid := c.Query("uuid")
+	cmd := c.Query("cmd")
+
+	agent := agentmanager.GetAgent(uuid)
+	if agent != nil {
+		data, err := agent.RunCommand(cmd)
+		if err != nil {
+			logger.Error("run command error, agent:%s, cmd:%s", uuid, cmd)
+			response.Fail(c, gin.H{"status": false}, err.Error())
+		}
+		logger.Info("run command on agent result:%v", data)
+		response.Success(c, nil, "run command success")
+		return
+	}
+
+	logger.Info("unknown agent:%s", uuid)
+	response.Fail(c, gin.H{"status": false}, "unknown agent")
+}
+
+func RunScriptWithBooleanCheck(c *gin.Context) {
+	logger.Debug("process get agent script request")
+	uuid := c.Query("uuid")
+	cmd := c.Query("cmd")
+
+	// 调用检测高危命令
+	if containsDangerousCommand(cmd) {
+		logger.Warn("Detected dangerous command")
+		response.Fail(c, gin.H{"status": false}, "Dangerous command detected in script.")
+		return
+	}
+
+	agent := agentmanager.GetAgent(uuid)
+	if agent != nil {
+		data, err := agent.RunCommand(cmd)
+		if err != nil {
+			logger.Error("run script error, agent:%s, cmd:%s", uuid, cmd)
+			response.Fail(c, gin.H{"status": false}, err.Error())
+			return
+		}
+		logger.Info("run script on agent result:%v", data)
+		response.Success(c, nil, "run script success")
+		return
+	}
+
+	logger.Info("unknown agent:%s", uuid)
+	response.Fail(c, gin.H{"status": false}, "unknown agent")
+}
+
+func containsDangerousCommand(content string) bool {
+	for _, pattern := range dangerousCommandsList {
+		matched, err := regexp.MatchString(pattern, content)
+		if err != nil {
+			logger.Error("Error matching pattern %s: %v\n", pattern, err)
+			continue
+		}
+		if matched {
+			return true
+		}
+	}
+	return false
+}
+
+func findDangerousCommandsPos(content string) ([][]int, []string) {
+    var positions [][]int
+    var matchedCommands []string
+
+    for _, pattern := range dangerousCommandsList {
+        re, err := regexp.Compile(pattern)
+        if err != nil {
+            logger.Error("Error compiling pattern %s: %v\n", pattern, err)
+            continue
+        }
+        matches := re.FindAllStringIndex(content, -1)
+        for _, match := range matches {
+            start, end := match[0], match[1]-1
+            positions = append(positions, []int{start, end})
+            matchedCommands = append(matchedCommands, content[start:end+1])
+            // 记录高危命令
+        }
+    }
+    return positions, matchedCommands
+}
+
+var dangerousCommandsList = []string{
+	`.*rm\s+-[r,f,rf].*`,
+	`.*lvremove\s+-f.*`,
+	`.*poweroff.*`,
+	`.*shutdown\s+-[f,F,h,k,n,r,t,C].*`,
+	`.*pvremove\s+-f.*`,
+	`.*vgremove\s+-f.*`,
+}