CanglongCl/dsh-web-review
C3DeepSeek Harness Web GUI 的网页预览与元素批注插件，让 AI 根据可视化反馈直接修改前端源码。
★ 10+ · CanglongCl/dsh-web-review source on GitHub · this plugin in the registry
CanglongCl/dsh-web-review is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, executes system commands, starts a network server.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | systemPrompt, webServer |
| executes system commands | exec | ×54 src, e.g. eval/grader.ts:6, eval/grader.ts:6 |
| starts a network server | net_server | ×12 src, e.g. demo/server.ts:23, eval/grader.ts:22 |
| reads credential-class env vars | token_env | DEEPSEEK_API_KEY |
Services it injects
agentDefaultModel agents commandUi conversation layout locale sessions skills slots systemPrompt webServer
Hooks it attaches
agent/disposed agent/pre-step session/event
Environment variables it reads
DEEPSEEK_API_KEY EVAL_DSH_CLI DSH_HOME DEMO_PORT DSH_WEB_HOST DSH_WEB_PORT MEDIA_DEBUG GITHUB_REF GITHUB_REPOSITORY DSH_HARNESS
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.