pazz11/Jnpz
C1改配置+重启才能加 MCP？DeepSeek Harness (DSH) 插件「技能配置」解决：设置页粘贴 JSON 即连 MCP 服务器、热加载免重启；上传 zip/.skill 自动识别 SKILL.md，创建/编辑/启停技能，即点即用
★ 10+ · pazz11/Jnpz source on GitHub · this plugin in the registry
pazz11/Jnpz is a DeepSeek Harness plugin rated C1 — ordinary capability surface. It base64 decoding in build output only.
Not installable — declares only dsh.client, which dsh plugin add cannot install
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| base64 decoding in build output only | base64_decode_bundled | ×1 in build output only, e.g. lib/index.js:548 |
Services it injects
locale slots
Hooks it attaches
connection/reset
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.