MeteorNOX/DeepSeek-Balance-Whale-Widget
C2DeepSeek Harness（DSH）一只住在 DSH 界面右下角的小鲸鱼娘，帮你盯着DeepSeek账户余额。QQ弹弹，支持拖拽吸附、左吸附翻转、数字滚动动画，随界面自动启用，建议直接喊来你的dsh安装
★ 3.8k · MeteorNOX/DeepSeek-Balance-Whale-Widget source on GitHub · this plugin in the registry
MeteorNOX/DeepSeek-Balance-Whale-Widget is a DeepSeek Harness plugin rated C2 — one powerful capability or sensitive behavior. It patches the dsh runtime, executes commands in development tooling the package does not ship, base64 decoding in build output only.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| executes commands in development tooling the package does not ship | exec_tooling | ×6 in development tooling the package does not ship, e.g. tools/ci-audit-selftest.mjs:14, tools/ci-audit-selftest.mjs:14 |
| base64 decoding in build output only | base64_decode_bundled | ×3 in build output only, e.g. lib/index.js:3384, lib/index.js:3516 |
Hooks it attaches
session/disposed session/event
Outbound domains
platform.deepseek.com api.deepseek.com api.moonshot.cn api.moonshot.ai open.bigmodel.cn api.kimi.com api.minimaxi.com opencode.ai api.z.ai api.minimax.io
Environment variables it reads
DSH_HOME DSHW_TRUSTED_HOSTS DSHW_ADMIN_HOSTS DSH_CLIENT_VERSION DSH_VERSION DSH_LOCALE CODEX_HOME
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.