2842902295/agent-deepseek
C2开源、可私有部署的多用户多角色全栈 Agent web 平台：以 DeepSeek harness为基础核心；多层子代理编排 × 技能凝练 × 应用看板，完全兼容手机端；Docker 一键部署，前后端一体轻量化，是一个完美契合vide coding时代的项目。
★ 0 · 2842902295/agent-deepseek source on GitHub · this plugin in the registry
2842902295/agent-deepseek is a DeepSeek Harness plugin rated C2 — one powerful capability or sensitive behavior. It runs code at install time, executes system commands, decodes base64 payloads, starts a network server.
A skill, not an installable plugin — ships SKILL.md with no plugin manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| runs code at install time | install_script | postinstall: node scripts/copy-excalidraw-assets.cjs |
| executes system commands | exec | ×26 in authored code, e.g. deploy/desktop-electron/src/main/ports.ts:2, deploy/desktop-electron/src/main/ports.ts:51 |
| decodes base64 payloads | base64_decode | ×4 in authored code, e.g. web/src/utils/crypto.ts:32, web/src/service/request/shared.ts:34 |
| starts a network server | net_server | ×2 in authored code, e.g. deploy/desktop-electron/src/main/ports.ts:24, deploy/desktop-electron/src/main/ports.ts:38 |
Services it injects
agents
Outbound domains
static.morflax.com schemas.microsoft.com schemas.openxmlformats.org git-lfs.github.com docs.soybeanjs.cn conventionalcommits.org discourse.threejs.org uicolors.app text-to-cad.dev api.map.baidu.com
Environment variables it reads
CESI_CANCEL_DIR DSH_HOME CODEX_HOME CLAUDE_HOME AGENTS_HOME CESI_BACKEND_DIR
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.