freestylefly/wesight

Open-source desktop AI agent workspace with one-click Claude Code, Codex, OpenClaw, Hermes Agent setup and custom LLM model routing.

★ 500+ · freestylefly/wesight source on GitHub · this plugin in the registry

freestylefly/wesight is a DeepSeek Harness plugin rated C2 — one powerful capability or sensitive behavior. It runs code at install time, executes system commands, uses eval / new Function, decodes base64 payloads.

What it can do

Capability	Flag	Evidence
runs code at install time	`install_script`	postinstall: patch-package && electron-builder install-app-deps
executes system commands	`exec`	×187 src, e.g. scripts/apply-openclaw-patches.cjs:19, scripts/apply-openclaw-patches.cjs:19
uses eval / new Function	`eval`	×5 src, e.g. src/main/libs/claudeSdk.ts:48, SKILLs/web-search/server/playwright/operations.ts:84
decodes base64 payloads	`base64_decode`	×8 src, e.g. src/main/main.ts:5358, src/main/main.ts:5381
starts a network server	`net_server`	×18 src, e.g. scripts/dev.js:8, src/main/main.ts:3540
reads credential-class env vars	`token_env`	APPLE_APP_SPECIFIC_PASSWORD, ARK_API_KEY, IMAP_PASS, IMAP_REJECT_UNAUTHORIZED, QWEN_OAUTH_CLIENT_ID, SMTP_PASS

Outbound domains

wesight.ai openrouter.ai ark.cn-beijing.volces.com open.bigmodel.cn api.minimaxi.com generativelanguage.googleapis.com api.deepseek.com api.github.com console.volcengine.com gw.example.com

Environment variables it reads

LOCALAPPDATA APPDATA WESIGHT_OPENCLAW_VERBOSE_LOGS USERPROFILE SKILLS_ROOT WESIGHT_SKILLS_ROOT SMTP_USER APPLE_TEAM_ID WESIGHT_REQUIRE_APPLE_NOTARIZATION ProgramFiles

How to read this

Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.

Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.