Fisfzy/ego-browser
C3DSH（DeepSeek Harness）插件：把 ego-lite 浏览器（给 AI Agent 用的 Chromium）接入 HARNESS——13 个结构化 ego_* 工具（文本语义快照、语义定位点击、表单填充、截图、CDP 控制、任务空间隔离），内置 ego 运行时，Linux + Chrome 开箱即用，无需克隆官方仓库或手动构建。
★ 10+ · Fisfzy/ego-browser source on GitHub · this plugin in the registry
Fisfzy/ego-browser is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can spawn subprocesses, executes system commands, decodes base64 payloads.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can spawn subprocesses | subprocess_service | inject: subprocess |
| executes system commands | exec | ×20 src, e.g. bin/ego-cast-worker.mjs:42, bin/ego-cast-worker.mjs:42 |
| decodes base64 payloads | base64_decode | ×5 src, e.g. runtime/ego-browser/dist/out/index.js:2302, runtime/ego-browser/dist/out/index.js:2666 |
| starts a network server | net_server | ×4 src, e.g. bin/ego-cast-worker.mjs:864, bin/ego-cast-worker.mjs:1016 |
Services it injects
connection locale slots subprocess tools webServer
Hooks it attaches
connection/reset
Outbound domains
www.google.com x.com
Environment variables it reads
LOCALAPPDATA EGO_BROWSER_AGENT_WORKSPACE USERPROFILE EGO_LINUX_CDP_URL EGO_LINUX_CHROME XDG_STATE_HOME ProgramFiles EGO_LINUX_PANEL EGO_LINUX_PROXY XDG_DATA_HOME
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.