klarkxy/dsh-editor
C3基于 DeepSeek Harness 的桌面写作应用，提供稿纸编辑、AI 写作辅助与可选插件。
★ 10+ · klarkxy/dsh-editor source on GitHub · this plugin in the registry
klarkxy/dsh-editor is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, executes system commands, decodes base64 payloads.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | systemPrompt, webServer |
| executes system commands | exec | ×43 in authored code, e.g. scripts/after-pack-desktop.cjs:1, scripts/check-fusion-foundation.mjs:3 |
| decodes base64 payloads | base64_decode | ×1 in authored code, e.g. packages/dsh-editor-shell/src/client/root.tsx:625 |
| reads credential-class env vars | token_env | MINIMAX_H3_CN_KEY |
Services it injects
agentDefaultModel aiServices configForms connection editorWritingPreferences fs llm loader locale modules remote sandboxPolicy sessions settingsSchema slots storageDomain systemPrompt tools uiSession uiWorkspace webServer workspaceRegistry workspaces
Outbound domains
api.github.com www.idpf.org api.minimax.cn ghproxy.net gh-proxy.com ghfast.top purl.org www.daisy.org api.deepseek.com
Environment variables it reads
npm_execpath DSH_HOME PORTABLE_EXECUTABLE_FILE SystemRoot DSH_TELEMETRY_DISABLED DSH_DESKTOP_USER_DATA_DIR DSH_CLI_PATH GITHUB_REF GITHUB_OUTPUT GITHUB_STEP_SUMMARY
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.