Finderchangchang/brewreel
C3精酿 BrewReel：让 DeepSeek 这类便宜模型也能做出好看的竖版宣传片。写一份产品简报，AI 挑镜头、写文案，一条命令出片。3 种配方、6 个行业、广告法校验，开源可商用。
★ 100+ · Finderchangchang/brewreel source on GitHub · this plugin in the registry
Finderchangchang/brewreel is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, executes system commands, base64 decoding in build output only.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| executes system commands | exec | ×15 in authored code, e.g. scripts/extract-frames.mjs:15, scripts/extract-frames.mjs:15 |
| base64 decoding in build output only | base64_decode_bundled | ×2 in build output only, e.g. scripts/lib/tts/aliyun.mjs:147, scripts/lib/tts/volcengine.mjs:121 |
Services it injects
tools
Outbound domains
api.minimax.io api.minimaxi.com openspeech.bytedance.com dashscope.aliyuncs.com api-uw.minimax.io ws-123.cn-beijing.maas.aliyuncs.com ws-123.ap-southeast-1.maas.aliyuncs.com
Environment variables it reads
FFMPEG DSH_HOME PYTHON PROMO_DEV_STYLES SystemRoot SYSTEMROOT
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.