Acidmoon/DIzzy-DSH
C3My DSH plugins
★ 5+ · Acidmoon/DIzzy-DSH source on GitHub · this plugin in the registry
Acidmoon/DIzzy-DSH is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, can spawn subprocesses, gates tool execution.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | subprocess, systemPrompt, webServer, system-prompt/assemble, tools/pre-execute |
| can spawn subprocesses | subprocess_service | inject: subprocess |
| gates tool execution | tool_gate | hook: tools/pre-execute |
| executes system commands | exec | ×99 src, e.g. scripts/patch-dsh-history-projections.mjs:16, scripts/patch-dsh-history-projections.mjs:16 |
| uses eval / new Function | eval | ×1 src, e.g. third-party/dsh-notification/lib/index.js:258 |
| decodes base64 payloads | base64_decode | ×10 src, e.g. third-party/DSH-better-sidebar/lib/client-registry.js:2785, third-party/DSH-better-sidebar/lib/client.js:2785 |
| starts a network server | net_server | ×3 src, e.g. third-party/dsh-genui/scripts/e2e.mjs:64, third-party/dsh-subscription-auth/lib/oauth.js:126 |
| reads credential-class env vars | token_env | DEEPSEEK_API_KEY |
Services it injects
agentDefaultModel agentPresets agents connection conversation credentials inputTriggers invariants llm locale remote sessionProjections sessions settings skills slots subprocess systemPrompt timer tools webRuntime webServer workspaces
Hooks it attaches
agent/created agent/disposed agent/inbox/inserted agent/pre-step agent/request agent/turn-stopping connection/reset credentials/updated internal/service llm/adapters-updated session/event system-prompt/assemble tools/post-execute tools/pre-execute tools/result
Outbound domains
auth.x.ai chatgpt.com api.anthropic.com auth.kimi.com auth.openai.com vision.anionex.me api.x.ai api.kimi.com api.deepseek.com agent-vision.anionex.me
Environment variables it reads
DSH_HOME USERPROFILE DSH_HARNESS_ROOT npm_config_prefix DSH_ROOT DEEPSEEK_BASE_URL HTTPS_PROXY https_proxy HTTP_PROXY http_proxy
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.