beijingwahw/dsh-companion
C3DeepSeek Companion — DeepSeek Harness 官方伴侣插件：对话导出/交接摘要/成本优化/全局检索 + 执行轨迹分析、Prompt 工程工作台、多模型竞技场、任务编排、安全与审计（E–J 九大模块，Cordis 插件化）。
★ 1+ · beijingwahw/dsh-companion source on GitHub · this plugin in the registry
beijingwahw/dsh-companion is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, decodes base64 payloads.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | systemPrompt, webServer |
| decodes base64 payloads | base64_decode | ×10 src, e.g. lib/client/api.js:225, lib/core/crypto.js:49 |
Services it injects
commands companion credentials sessionQuery settings slots storageDomain systemPrompt webServer
Outbound domains
platform.kimi.com api.deepseek.com api-docs.deepseek.com open.bigmodel.cn www.volcengine.com help.aliyun.com platform.minimaxi.com cloud.baidu.com bce.bdstatic.com
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.