smanx/dsh-proxy
C3HTTP + WebSocket 反向代理：把局域网端口转发到本地 DSH 服务
★ 10+ · smanx/dsh-proxy source on GitHub · this plugin in the registry
smanx/dsh-proxy is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, executes system commands, eval in build output only, decodes base64 payloads.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | dsh-proxy/cordis.patch.yml |
| executes system commands | exec | ×4 in authored code, e.g. node/build.js:7, node/build.js:7 |
| eval in build output only | eval_bundled | ×1 in build output only, e.g. dsh-proxy/lib/index.cjs:2091 |
| decodes base64 payloads | base64_decode | ×2 in authored code, e.g. node/proxy-core.js:87, dsh-proxy/src/session.ts:37 |
| starts a network server | net_server | ×2 in authored code, e.g. node/proxy-core.js:179, dsh-proxy/src/proxy.ts:175 |
| reads credential-class env vars | token_env | PROXY_PASSWORD |
| reads credential-class env vars in development tooling the package does not ship | token_env_tooling | in development tooling the package does not ship: DSH_SMOKE_PASS |
Services it injects
connection locale slots webServer
Outbound domains
npmmirror.com git.io
Environment variables it reads
DSH_PROXY_VERSION DEBUG PROXY_PORT DSH_PORT PROXY_USERNAME PROXY_PASSWORD DEBUG_FD
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.