Laplace-bit/dsh-smooth-stream

C3

DeepSeek Harness Web UI plugin for streaming rendering and scroll handling.

★ 50+ · Laplace-bit/dsh-smooth-stream source on GitHub · this plugin in the registry

Laplace-bit/dsh-smooth-stream is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, executes system commands, starts a network server.

Installable plugin — declares a dsh.bundle manifest

What it can do

CapabilityFlagEvidence
patches the dsh runtimeruntime_patch./cordis.patch.yml
executes system commandsexec×5 in authored code, e.g. scripts/probe-activation.mjs:14, scripts/probe-activation.mjs:35
starts a network servernet_server×48 in authored code, e.g. scripts/analyze-glide-profile.mjs:26, scripts/analyze-glide-profile.mjs:34

Services it injects

slots

Hooks it attaches

slots/changed

Environment variables it reads

AUDIT_CHROMIUM OVERLAP_DUMP CHROME_BIN SEED PROBE_DISABLE_PLUGIN AUDIT_EVENT_WINDOW BENCHMARK_CPU PRESET FPS DEMO_CPS

How to read this

Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.

Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.