franksong2702/dsh-codex-connect
C3Use openai-codex models and image generation via ChatGPT OAuth for DeepSeek Harness.
★ 100+ · franksong2702/dsh-codex-connect source on GitHub · this plugin in the registry
franksong2702/dsh-codex-connect is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, executes system commands, eval in build output only, decodes base64 payloads.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| executes system commands | exec | ×46 in authored code, e.g. scripts/adaptive-task-publication-session.mjs:5, scripts/adaptive-task-publication-session.mjs:5 |
| eval in build output only | eval_bundled | ×1 in build output only, e.g. lib/bin.js:4546 |
| decodes base64 payloads | base64_decode | ×5 in authored code, e.g. scripts/check-installed-images.mjs:6, scripts/check-issue-270-selection.mjs:125 |
| starts a network server | net_server | ×2 in authored code, e.g. scripts/check-capability-cli.mjs:17, scripts/check-capability-cli.mjs:49 |
| reads credential-class env vars | token_env | GH_TOKEN |
Services it injects
configForms connection invariants llm locale remote sessions slots
Hooks it attaches
agent/created agent/disposed agent/error agent/request agent/request-error agent/status agent/turn-stopping approval/request llm/stream loader/volatile-update tools/post-execute
Outbound domains
chatgpt.com api.openai.com learn.chatgpt.com api.github.com auth.openai.com
Environment variables it reads
DSH_HOME OTEL_SDK_DISABLED MATRIX_NPM_CLI DSH_TELEMETRY_MODE TASK_MATRIX_ROOT DSH_VERSION DSH_UNDECLARED_CANARY_VERSION GITHUB_STEP_SUMMARY GITHUB_SHA CODEX_HOME
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.