jingyunstudio/jingyun-dsh
C3基于 Jingyun Studio + DeepSeek Harness (DSH) 打造的一站式 AI 商业化桌面客户端，一个将 AI 智能体 / 技能 / 工作流转化为可交易商品的完整商业化平台客户端。 井云为 DSH 注入了完整的商业闭环：登录注册 → 会员体系 → 订阅支付 → 云端资产 → 多端同步，让 AI 开发者 30 分钟内将自己的智能体封装为独立的商业产品。
★ 500+ · jingyunstudio/jingyun-dsh source on GitHub · this plugin in the registry
jingyunstudio/jingyun-dsh is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, executes system commands, decodes base64 payloads, reads credential-class env vars.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| executes system commands | exec | ×32 in authored code, e.g. scripts/prepare_vendor.js:1, scripts/prepare_vendor.js:1 |
| decodes base64 payloads | base64_decode | ×5 in authored code, e.g. packages/jingyun-dsh/src/assets/service.ts:499, packages/jingyun-dsh/src/connectors/jingyun-tunnel-client.ts:277 |
| reads credential-class env vars | token_env | IMA_API_KEY, IMA_OPENAPI_APIKEY |
Services it injects
commands layout sessionController sessions settings slots uiWorkspace webServer workspaceRegistry
Hooks it attaches
session/event
Outbound domains
registry.npmmirror.com open.feishu.cn ghfast.top dl.google.com cn.clawhub-mirror.com work.weixin.qq.com www.npmjs.com npmmirror.com www.python.org api.dingtalk.com
Environment variables it reads
DSH_HOME DWS_CONFIG_DIR WATCH_REPORT_DEPENDENCIES DSH_CONFIG_DIR IMA_API_KEY IMA_OPENAPI_APIKEY IMA_CLIENT_ID IMA_OPENAPI_CLIENTID DSH_PORTABLE XDG_DATA_HOME
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.