gwj001/arch-lens
C1一个基于代码事实的，ai画图、ai 讲解的代码架构学习台插件(An AI drawing and AI explanation code architecture learning platform plugin)
★ 5+ · gwj001/arch-lens source on GitHub · this plugin in the registry
gwj001/arch-lens is a DeepSeek Harness plugin rated C1 — ordinary capability surface. It eval in build output only, base64 decoding in build output only.
Not installable — declares only dsh.client, which dsh plugin add cannot install
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| eval in build output only | eval_bundled | ×1 in build output only, e.g. packages/arch-lens-backend/lib/index.mjs:239 |
| base64 decoding in build output only | base64_decode_bundled | ×2 in build output only, e.g. packages/arch-lens-backend/lib/index.mjs:58, packages/arch-lens-backend/lib/index.mjs:59 |
Services it injects
fs invariants remote sandboxPolicy sessions slots
Hooks it attaches
session/event
Environment variables it reads
ARCH_LENS_DEBUG
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.