lhh010/dsh-ui-whale
C2【求⭐】🐋DSH Web UI 全手绘像素鲸鱼伙伴插件：会话标题栏常驻，平时眨眼/偶尔摆尾/动胸鳍，思考运行时持续动起来，回合完成头顶喷水，点击还会冒爱心，不工作时还会偷懒睡觉，零核心改动。 【喜欢的话就点点star⭐吧~】
★ 10+ · lhh010/dsh-ui-whale source on GitHub · this plugin in the registry
lhh010/dsh-ui-whale is a DeepSeek Harness plugin rated C2 — one powerful capability or sensitive behavior. It executes system commands.
Not installable — declares only dsh.client, which dsh plugin add cannot install
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| executes system commands | exec | ×6 in authored code, e.g. sync-mirrors.mjs:14, sync-mirrors.mjs:14 |
Services it injects
invariants locale slots webServer
Outbound domains
api.github.com
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.