David131131/makise-kurisu-desktop-pet
C1牧濑红莉栖桌宠 Makise Kurisu Desktop Pet — DSH 动态插件 + Electron 桌面应用
★ 1+ · David131131/makise-kurisu-desktop-pet source on GitHub · this plugin in the registry
David131131/makise-kurisu-desktop-pet is a DeepSeek Harness plugin rated C1 — ordinary capability surface. Scanning 11 code files turned up none of the capabilities we look for: no runtime patch, no prompt or API surface, no subprocess use, no credential-class environment reads and no install-time scripts.
Not installable — declares only dsh.client, which dsh plugin add cannot install
Services it injects
timer webServer
Hooks it attaches
agent/error agent/status
Environment variables it reads
DSH_PET_HOST DSH_PET_PORT DSH_PET_STATUS_PATH
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.