Capability levels

What a plugin at each level can reach inside your agent, and why a high level is not a verdict.

C0

No notable capability surface.

C1

Ordinary: registers tools/services, calls external domains.

C2

Powerful: prompt surface, API interception, subprocess, exec, credential reads or install scripts.

C3

Powerful capabilities combined with sensitive behavior.

Levels measure capability surface and transparency — not maliciousness. A C3 plugin can be perfectly legitimate; you just deserve to know before it touches your agent.

Open the full interactive diagram

Check a plugin in 30 seconds

1

Search it

Type the plugin name or author into the registry.

2

Read the level and flags

C0–C3 tells you how much surface it has; the chips tell you which kind.

3

Open the evidence

Every flag cites a file and line. Disagree with one? The source is one click away.

Browse the registry · Report · Read the full primer on how dsh plugins work →