ARFCON/dsh-hub-DSH
C1dsh-hub — DSH 插件中枢
★ 1+ · ARFCON/dsh-hub-DSH source on GitHub · this plugin in the registry
ARFCON/dsh-hub-DSH is a DeepSeek Harness plugin rated C1 — ordinary capability surface. It command execution in build output only.
Not installable — declares only dsh.client, which dsh plugin add cannot install
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| command execution in build output only | exec_bundled | ×4 in build output only, e.g. lib/index.js:33, lib/index.js:33 |
Services it injects
locale remote slots
Outbound domains
api.github.com gitee.com ghfast.top gh-proxy.com codeload.github.com ghproxy.net data.jsdelivr.com cdn.jsdelivr.net
Environment variables it reads
DSH_CLIENT_APP_DIR DSH_HOME DSH_CLIENT_PLUGINS_DIR LOCALAPPDATA DSH_PLUGIN_DEV_GITHUB DSH_PLUGIN_DEVELOPER NPM_CONFIG_REGISTRY DSH_CLIENT_AUTO_SEARCH
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.