chaojixinren/dsh-reviewer-bot
C3原生 DeepSeek Harness 插件形态的代码评审机器人：跨代码平台、规则可插拔、可本地重放。
★ 10+ · chaojixinren/dsh-reviewer-bot source on GitHub · this plugin in the registry
chaojixinren/dsh-reviewer-bot is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, gates tool execution, executes system commands.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | sandbox, systemPrompt, tools/pre-execute |
| gates tool execution | tool_gate | hook: tools/pre-execute |
| executes system commands | exec | ×16 src, e.g. scripts/e2e-docker-sandbox.mjs:27, scripts/e2e-docker-sandbox.mjs:27 |
| starts a network server | net_server | ×3 src, e.g. scripts/e2e-install-modes.mjs:222, scripts/e2e-install-modes.mjs:224 |
| reads credential-class env vars | token_env | DEEPSEEK_API_KEY, FORGE_TOKEN |
Services it injects
agents forges fs remote reviewRules reviewRuntime reviewTools sandbox sandboxPolicy sessions slots subagents systemPrompt tools trustPolicy
Hooks it attaches
session/event tools/pre-execute
Outbound domains
api.github.com gitlab.com
Environment variables it reads
IMAGE GITHUB_OUTPUT DEEPSEEK_API_KEY FORGE_TOKEN
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.