nanpaidashi/dsh-honcho-sync

C0

DSH plugin: auto-sync conversation turns to Honcho memory service

★ 1+ · nanpaidashi/dsh-honcho-sync source on GitHub · this plugin in the registry

nanpaidashi/dsh-honcho-sync is a DeepSeek Harness plugin rated C0 — no notable capability surface. Scanning 1 code files turned up none of the capabilities we look for: no runtime patch, no prompt or API surface, no subprocess use, no credential-class environment reads and no install-time scripts.

Not installable — has plugin code but no manifest to install it by

Hooks it attaches

session/event

Environment variables it reads

HONCHO_WORKSPACE HONCHO_USER_PEER HONCHO_AGENT_PEER HONCHO_URL

How to read this

Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.

Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.