Samouswolf/DSH-Plugins
C3DSH (DeepSeek Harness) 插件合集：DNA 记忆系统 + Agent 农场 + 进化引擎。零敏感、即插即用。 DSH plugins: DNA memory system + Agent Farm + Evolution Engine. Zero-sensitive, plug-and-play.
★ 1+ · Samouswolf/DSH-Plugins source on GitHub · this plugin in the registry
Samouswolf/DSH-Plugins is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It can rewrite the system prompt, can spawn subprocesses, executes system commands, reads credential-class env vars.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| can rewrite the system prompt | prompt_surface | subprocess, systemPrompt, webServer |
| can spawn subprocesses | subprocess_service | inject: subprocess |
| executes system commands | exec | ×11 src, e.g. agent-farm/index.mjs:108, agent-farm/index.mjs:143 |
| reads credential-class env vars | token_env | AGNES_API_KEY, CODEX_AUTH, OPENCODE_API_KEY |
Services it injects
fs skills slots subprocess systemPrompt timer tools webServer
Hooks it attaches
agent/turn-stopping session/event
Outbound domains
apihub.agnes-ai.com opencode.ai
Environment variables it reads
OPENCODE_API_KEY USERPROFILE AGNES_API_KEY OPENCODE_BASE_URL DNA_MEMORY_DIR AGNES_API_URL AGNES_ENV_FILE HERMES_CONFIG OPENCODE_PROVIDER DSH_FARM_DIR
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.