WSL043/dsh-codex-subscription
C3在 DeepSeek Harness 中直接使用 ChatGPT/Codex 订阅，无需 OpenAI API Key 或 Codex CLI，支持 OAuth 登录、订阅搜索与额度显示 | ChatGPT/Codex subscription plugin for DSH
★ 10+ · WSL043/dsh-codex-subscription source on GitHub · this plugin in the registry
WSL043/dsh-codex-subscription is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, executes system commands, decodes base64 payloads.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| executes system commands | exec | ×2 src, e.g. lib/index.js:6, src/external-url.js:1 |
| decodes base64 payloads | base64_decode | ×2 src, e.g. lib/index.js:632, src/codex-images.js:55 |
Services it injects
attachments connection conversation credentials llm loader locale modelDirectories remote settings settingsScope slots tools web
Hooks it attaches
connection/reset
Outbound domains
chatgpt.com auth.openai.com
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.