omdsh-dev/dsh-fun-ticker
C1DSH 行情跑马灯插件:可自选标的的加密/汇率/A股/指数/港美股跑马灯,免 key 数据源,宿主代理+缓存
★ 1+ · omdsh-dev/dsh-fun-ticker source on GitHub · this plugin in the registry
omdsh-dev/dsh-fun-ticker is a DeepSeek Harness plugin rated C1 — ordinary capability surface. Scanning 19 code files turned up none of the capabilities we look for: no runtime patch, no prompt or API surface, no subprocess use, no credential-class environment reads and no install-time scripts.
Not installable — declares only dsh.client, which dsh plugin add cannot install
Services it injects
invariants locale slots
Hooks it attaches
fun-ticker/settings-changed
Outbound domains
data-api.binance.vision api.frankfurter.dev quote.eastmoney.com api.coingecko.com push2.eastmoney.com push2his.eastmoney.com hq.sinajs.cn finance.sina.com.cn
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.