moonbowterfly/dsh-bio-genie
C3生物信息学「许愿式分析」dsh 插件：57 个语义化工具 + bio_python 执行器（Biopython 全功能 · 出版级绘图 · 代谢建模/FBA · 基因编辑 · 合成生物学设计）+ 50 个 skill；零安装自举私有 Python 环境，中国网络自动镜像适配。
★ 1+ · moonbowterfly/dsh-bio-genie source on GitHub · this plugin in the registry
moonbowterfly/dsh-bio-genie is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, runs code at install time, can rewrite the system prompt, executes system commands.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| runs code at install time | install_script | postinstall: node scripts/install-preset.js |
| can rewrite the system prompt | prompt_surface | systemPrompt |
| executes system commands | exec | ×25 in authored code, e.g. scripts/run-python-test.mjs:10, scripts/run-python-test.mjs:10 |
| starts a network server | net_server | ×4 in authored code, e.g. scripts/test-gem-capabilities.mjs:38, scripts/test-gem-capabilities.mjs:95 |
Services it injects
skills slots systemPrompt tools
Hooks it attaches
agent/turn-start agent/turn-stopping session/event tools/post-execute
Outbound domains
pypi.tuna.tsinghua.edu.cn gh-proxy.com registry.npmmirror.com
Environment variables it reads
DSH_HOME DSH_BIO_PYTHON GALATEA_MODELS_DIR USERPROFILE DSH_SKILLS_ALLOW_SKIP DSH_BIO_UV_BASE SKIP_NETWORK DSH_BIO_PYTHON_MIRROR UV_PYTHON_INSTALL_MIRROR DSH_BIO_PYPI_INDEX
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.