JunNanLYS/dsh-layered-memory

C3

让 DeepSeek Harness 拥有跨会话长期记忆:AI 自动记住你是谁、你的项目和偏好,新会话直接带上背景,生活与工作记忆自动分开互不干扰,零配置无感运行 | Long-term memory for DeepSeek Harness: the AI remembers who you are, your projects and preferences across sessions,

★ 10+ · JunNanLYS/dsh-layered-memory source on GitHub · this plugin in the registry

JunNanLYS/dsh-layered-memory is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, executes system commands, starts a network server.

Installable plugin — declares a dsh.bundle manifest

What it can do

CapabilityFlagEvidence
patches the dsh runtimeruntime_patch./cordis.patch.yml
can rewrite the system promptprompt_surfacesystemPrompt
executes system commandsexec×3 in authored code, e.g. src/store/runtime-installer.ts:16, src/store/runtime-installer.ts:72
starts a network servernet_server×2 in authored code, e.g. bench/harness/dsh-bench-runner/src/index.js:905, bench/harness/dsh-bench-runner/src/index.js:946

Services it injects

agentDefaultModel agents connection llm sessions slots systemPrompt tools

Hooks it attaches

agent/created agent/disposed agent/pre-step agent/session-start internal/service llm/adapters-updated session/event

Outbound domains

hf-mirror.com proxy.corp

Environment variables it reads

NO_PROXY ALL_PROXY HTTPS_PROXY DSH_BENCH_DISTILL_TIMEOUT_MS no_proxy https_proxy all_proxy HTTP_PROXY http_proxy DSH_BENCH_DATA_DIR

How to read this

Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.

Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.