Fisfzy/dsh-ego-browser
C3DSH（DeepSeek Harness）插件：把 ego-lite 浏览器（给 AI Agent 用的 Chromium）接入 HARNESS——13 个结构化 ego_* 工具（文本语义快照、语义定位点击、表单填充、截图、CDP 控制、任务空间隔离），内置 ego 运行时，Linux + Chrome 开箱即用，无需克隆官方仓库或手动构建。
★ 100+ · Fisfzy/dsh-ego-browser source on GitHub · this plugin in the registry
Fisfzy/dsh-ego-browser is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can spawn subprocesses, executes system commands, base64 decoding in build output only.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can spawn subprocesses | subprocess_service | inject: subprocess |
| executes system commands | exec | ×40 in authored code, e.g. bin/ego-cast-worker.mjs:7, bin/ego-cast-worker.mjs:7 |
| base64 decoding in build output only | base64_decode_bundled | ×5 in build output only, e.g. runtime/ego-browser/dist/out/index.js:2296, runtime/ego-browser/dist/out/index.js:2660 |
| starts a network server | net_server | ×7 in authored code, e.g. bin/ego-cast-worker.mjs:3310, bin/ego-cast-worker.mjs:5440 |
Services it injects
connection locale slots subprocess tools
Hooks it attaches
connection/reset
Outbound domains
gh-proxy.com www.google.com x.com
Environment variables it reads
LOCALAPPDATA EGO_LINUX_CHROME EGO_LINUX_CDP_URL USERPROFILE DISPLAY EGO_BROWSER_AGENT_WORKSPACE XDG_STATE_HOME ProgramFiles EGO_LINUX_STATE_DIR ELECTRON_RUN_AS_NODE
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.