NakamuraIA/dsh-plugin-speech

C1

Read assistant replies aloud in DeepSeek Harness: text-to-speech providers with streaming playback.

★ 1+ · NakamuraIA/dsh-plugin-speech source on GitHub · this plugin in the registry

NakamuraIA/dsh-plugin-speech is a DeepSeek Harness plugin rated C1 — ordinary capability surface. It eval in build output only, base64 decoding in build output only.

Not installable — declares only dsh.client, which dsh plugin add cannot install

What it can do

CapabilityFlagEvidence
eval in build output onlyeval_bundled×1 in build output only, e.g. lib/client.js:249
base64 decoding in build output onlybase64_decode_bundled×2 in build output only, e.g. lib/client.js:67, lib/client.js:68

Services it injects

locale remote settingsScope slots uiConversation webServer

How to read this

Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.

Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.