goatliamia/dsh-runtime
C3不要让 Model 为确定性问题反复思考，也不要让 Harness 为不确定的问题假装知道答案
★ 5+ · goatliamia/dsh-runtime source on GitHub · this plugin in the registry
goatliamia/dsh-runtime is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, executes system commands.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | systemPrompt |
| executes system commands | exec | ×6 in authored code, e.g. scripts/pack-release.mjs:17, scripts/pack-release.mjs:17 |
Services it injects
agentDefaultModel agents commands jobs runtimeSeam sessions settings slots systemPrompt tools
Hooks it attaches
agent/created agent/disposed agent/error agent/inbox/claimed agent/inbox/inserted agent/pre-step agent/session-start agent/status agent/turn-stopping exp/job-changed llm/stream session/disposed session/event subagent/end subagent/start tools/result
Environment variables it reads
USERPROFILE EXP_RESULTS_DIR EXP_SCENARIO EXP_RUN EXP_ARM APPDATA EXP_MODE DSH_HOME SPIKE_TS_TEXT RUNTIME_EVIDENCE_SRC
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.