c-ling/dsh-plugin-goldboard
C1DeepSeek Harness 黄金实时看板与策略诊断插件：Au99.99/XAU/CMB 行情、独立交易日历、招行双边历史、持仓建议与探索性回放。
★ 1+ · c-ling/dsh-plugin-goldboard source on GitHub · this plugin in the registry
c-ling/dsh-plugin-goldboard is a DeepSeek Harness plugin rated C1 — ordinary capability surface. It command execution in build output only.
Not installable — declares only dsh.client, which dsh plugin add cannot install
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| command execution in build output only | exec_bundled | ×1 in build output only, e.g. lib/alerts.js:12 |
Services it injects
connection llm locale remote settingsScope slots webServer
Outbound domains
www.sge.com.cn hq.sinajs.cn qt.gtimg.cn mbmodule-openapi.paas.cmbchina.com query1.finance.yahoo.com 60s.viki.moe push2.eastmoney.com api.gold-api.com goldprice.today api.jijinhao.com
Environment variables it reads
DSH_HOME
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.