smanx/dsh-proxy
C3HTTP + WebSocket 反向代理：把局域网端口转发到本地 DSH 服务
★ 1+ · smanx/dsh-proxy source on GitHub · this plugin in the registry
smanx/dsh-proxy is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, executes system commands, uses eval / new Function, decodes base64 payloads.
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | dsh-proxy/cordis.patch.yml |
| executes system commands | exec | ×7 src, e.g. dsh-proxy/build.mjs:18, dsh-proxy/build.mjs:18 |
| uses eval / new Function | eval | ×1 src, e.g. dsh-proxy/lib/index.cjs:1628 |
| decodes base64 payloads | base64_decode | ×5 src, e.g. node/proxy-core.js:51, dsh-proxy/lib/index.cjs:1450 |
| starts a network server | net_server | ×5 src, e.g. node/proxy-core.js:109, dsh-proxy/lib/index.cjs:1322 |
| reads credential-class env vars | token_env | DSH_SMOKE_PASS, PROXY_PASSWORD |
Services it injects
connection locale slots webServer
Outbound domains
npmmirror.com
Environment variables it reads
DSH_PROXY_VERSION DSH_HOME PROXY_PORT DSH_PORT PROXY_USERNAME PROXY_PASSWORD DSH_SMOKE_UPSTREAM_PORT DSH_SMOKE_USER DSH_SMOKE_PASS
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.