qq247505/DeepSeek-VisionPlus

C3

DeepSeek VisionPlus — official-grade vision extension for DeepSeek Harness. Routes image understanding to a free vision-model pool (Zhipu GLM, SiliconFlow Qwen) with automatic fallback, rate limiting,

★ 0 · qq247505/DeepSeek-VisionPlus source on GitHub · this plugin in the registry

qq247505/DeepSeek-VisionPlus is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, runs code at install time, uses eval / new Function, decodes base64 payloads.

What it can do

CapabilityFlagEvidence
patches the dsh runtimeruntime_patch./cordis.patch.yml
runs code at install timeinstall_scriptpostinstall: node scripts/enhance.mjs
uses eval / new Functioneval×2 src, e.g. dist/index.mjs:2092, dist/schemas-DXny_Pxn.mjs:141
decodes base64 payloadsbase64_decode×8 src, e.g. dist/index.mjs:68, dist/index.mjs:69

Services it injects

agentDefaultModel attachments connection credentials llm modelDirectories settings slots webServer

Hooks it attaches

agent/request session/event

Outbound domains

openrouter.ai ai-gateway.vercel.sh bedrock-runtime.us-east-1.amazonaws.com opencode.ai router.huggingface.co api.openai.com gateway.ai.cloudflare.com api.mistral.ai api.individual.githubcopilot.com platform.openai.com

Environment variables it reads

DEBUG

How to read this

Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.

Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.