YuJunZhiXue/dsh-purge
C3DeepSeek Harness 破甲：让所有模型都能破甲，不同模型可换不同提示词；默认提示词面向国模「小码酱」。Jailbreak for every model — swap prompts per model. 求 Star 收藏 ⭐
★ 3.0k · YuJunZhiXue/dsh-purge source on GitHub · this plugin in the registry
YuJunZhiXue/dsh-purge is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, gates tool execution, executes system commands.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | systemPrompt, webServer, system-prompt/assemble, tools/pre-execute |
| gates tool execution | tool_gate | hook: tools/pre-execute |
| executes system commands | exec | ×3 in authored code, e.g. scripts/patch-client-dock.mjs:8, scripts/patch-client-dock.mjs:8 |
| base64 decoding in build output only | base64_decode_bundled | ×5 in build output only, e.g. lib/index.js:1681, lib/skills.js:563 |
Services it injects
locale redteam slots systemPrompt tools webServer
Hooks it attaches
agent/inbox/claimed agent/pre-step agent/request session/created session/event subagent/end system-prompt/assemble tools/post-execute tools/pre-execute
Outbound domains
codeload.github.com fofa.info oa.example.com oa.demo.com
Environment variables it reads
DSH_HOME DSH_PERMISSION_MODE LOCALAPPDATA TEMP DSH_DESKTOP_INSTALL DSH_BASE DSH_SYSTEM_PROMPT DSH_PURGE_RESTART APPDATA PORT
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.