HTian-qwq/prts-terrarchive

C3

为明日方舟的长篇剧情打造的RAG类DSH插件,拥有多种快速检索能力。

★ 10+ · HTian-qwq/prts-terrarchive source on GitHub · this plugin in the registry

HTian-qwq/prts-terrarchive is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, executes system commands, base64 decoding in build output only.

Installable plugin — declares a dsh.bundle manifest

What it can do

CapabilityFlagEvidence
patches the dsh runtimeruntime_patch./cordis.patch.yml
can rewrite the system promptprompt_surfacesystem-prompt/assemble
executes system commandsexec×7 in authored code, e.g. bin/check-runtime.mjs:6, bin/check-runtime.mjs:6
base64 decoding in build output onlybase64_decode_bundled×3 in build output only, e.g. lib/runtime/zod.js:661, lib/runtime/zod.js:2071
starts a network servernet_server×1 in authored code, e.g. bin/preview-rhine.mjs:42

Services it injects

agentPresets connection modelDirectories remote sessions skills slots theme workspaces

Hooks it attaches

agent/inbox/claimed session/event system-prompt/assemble tools/ptc-dispatch-log tools/result

Outbound domains

prts.chat modelscope.cn

Environment variables it reads

DSH_HOME DSH PRTS_DSH_VERSION PRTS_RHINE_RELEASES PORT PRTS_CORPUS_RELEASES_DIR

How to read this

Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.

Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.