ningbainb/deepseek-harness-desktop
C3Open-source Windows desktop client and GUI for DeepSeek Harness — zero-setup installer with Codex, plugins, skills, SSH, mobile remote access, and 11 skins.
★ 50+ · ningbainb/deepseek-harness-desktop source on GitHub · this plugin in the registry
ningbainb/deepseek-harness-desktop is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, can intercept API traffic, can spawn subprocesses.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| can rewrite the system prompt | prompt_surface | apiProxy, subprocess, systemPrompt, webServer, api/gate, system-prompt/assemble |
| can intercept API traffic | api_intercept | apiProxy, subprocess, systemPrompt, webServer, api/gate, system-prompt/assemble |
| can spawn subprocesses | subprocess_service | inject: subprocess |
| executes system commands | exec | ×14 src, e.g. apps/dsh-desktop/scripts/packaged-smoke-runner.mjs:1, apps/dsh-desktop/scripts/packaged-smoke-runner.mjs:41 |
| decodes base64 payloads | base64_decode | ×3 src, e.g. packages/dsh-tool-describe-image/src/media.ts:48, apps/dsh-desktop/src/extensions/qqbot.mjs:123 |
| starts a network server | net_server | ×2 src, e.g. apps/dsh-desktop/src/runtime-port.mjs:12, packages/dsh-ssh/src/engine/tunnel.ts:54 |
| reads credential-class env vars | token_env | VISION_API_KEY |
Services it injects
apiProxy connection conversation invariants locale remote sessionProjections sessions settingsScope slots subprocess systemPrompt theme tools webServer workspaceRegistry workspaces
Hooks it attaches
agent/pre-step agent/status api/gate connection/reset session/disposed session/event system-prompt/assemble theme/change tools/post-execute
Outbound domains
xxx.trycloudflare.com www.deepseek.com qm.qq.com gh-proxy.com ghproxy.net ghfast.top foo.trycloudflare.com api.openai.com example.trycloudflare.com api.example.com
Environment variables it reads
DSH_DESKTOP_E2E_EXECUTABLE DSH_HOME SystemRoot DSH_DESKTOP_USER_DATA DSH_AGENTS_HOME DSH_DESKTOP_SMOKE_EXIT DSH_PROFILE DSH_SKINS_DIR DSH_DESKTOP_STAR_PROMPT_PREVIEW DSH_DESKTOP_STARTUP_PREVIEW_STATE
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.