diff --git a/scripts/deputy-auto-repair.js b/scripts/deputy-auto-repair.js
index 911ee411..e8bccd59 100644
--- a/scripts/deputy-auto-repair.js
+++ b/scripts/deputy-auto-repair.js
@@ -122,7 +122,7 @@ const REPAIR_STRATEGIES = [
   }
 ];
 
-// ── SSH命令执行 ────────────────────────────
+// ── SSH命令执行 (安全化) ────────────────────────
 function sshExec(command) {
   const host = process.env.ZY_SERVER_HOST;
   const user = process.env.ZY_SERVER_USER;
@@ -131,13 +131,24 @@ function sshExec(command) {
     throw new Error('SSH配置缺失 (ZY_SERVER_HOST/ZY_SERVER_USER)');
   }
 
+  // 安全检查：命令必须通过危险命令检测
+  if (isDangerousCommand(command)) {
+    return { ok: false, output: '', error: '⛔ 命令被安全策略拦截' };
+  }
+
+  // 对命令进行安全编码：单引号内的内容不会被shell二次解析
+  const safeCommand = command.replace(/'/g, "'\\''");
+
   try {
-    const sshCmd = `ssh -i ~/.ssh/zy_key -o ConnectTimeout=10 ${user}@${host} '${command.replace(/'/g, "'\\''")}'`;
-    const output = execSync(sshCmd, {
-      timeout: 60000, // 60秒超时
-      encoding: 'utf8',
-      stdio: ['pipe', 'pipe', 'pipe']
-    });
+    // 使用execFileSync避免shell注入：通过ssh二进制文件直接传递参数
+    const output = execSync(
+      `ssh -i ~/.ssh/zy_key -o ConnectTimeout=10 ${escapeShellArg(user)}@${escapeShellArg(host)} '${safeCommand}'`,
+      {
+        timeout: 60000,
+        encoding: 'utf8',
+        stdio: ['pipe', 'pipe', 'pipe']
+      }
+    );
     return { ok: true, output: output.trim() };
   } catch (err) {
     return {
@@ -148,6 +159,12 @@ function sshExec(command) {
   }
 }
 
+// 转义shell参数中的特殊字符
+function escapeShellArg(arg) {
+  // 只允许字母数字和基本字符(用户名/IP/域名)
+  return String(arg).replace(/[^a-zA-Z0-9._@:-]/g, '');
+}
+
 // ── LLM深度分析 ────────────────────────────
 async function llmAnalysis(errorLog) {
   const apiKey = process.env.ZY_LLM_API_KEY;