weijiafu14/pi2dsh

Bridge the Pi and DeepSeek Harness ecosystems: one Pi Host ABI runs unmodified Pi extensions as native DSH plugins. 打通 Pi 与 DSH 生态。

★ 10+ · weijiafu14/pi2dsh source on GitHub · this plugin in the registry

weijiafu14/pi2dsh is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, can rewrite the system prompt, executes system commands, decodes base64 payloads.

What it can do

Capability	Flag	Evidence
patches the dsh runtime	`runtime_patch`	./cordis.patch.yml
can rewrite the system prompt	`prompt_surface`	systemPrompt
executes system commands	`exec`	×46 src, e.g. scripts/blackbox-community.mjs:28, scripts/check-pack.mjs:3
decodes base64 payloads	`base64_decode`	×8 src, e.g. src/runtime.ts:287, src/compat/vendor/pi-tui-terminal-image.ts:433
starts a network server	`net_server`	×9 src, e.g. scripts/blackbox-community.mjs:68, scripts/blackbox-community.mjs:94
reads credential-class env vars	`token_env`	DEEPSEEK_API_KEY, LITELLM_API_KEY, VISION_BRIDGE_API_KEY

Services it injects

commands inputTriggers skills slots systemPrompt tools

Hooks it attaches

llm/adapters-updated

Outbound domains

api.openai.com api.deepseek.com api.individual.githubcopilot.com git-scm.com sw.kovidgoyal.net auth.kimi.com api.npmjs.org chatgpt.com api.anthropic.com api.githubcopilot.com

Environment variables it reads

DEEPSEEK_API_KEY PI2DSH_DSH_ROOT PI_CODING_AGENT_DIR PI2DSH_E2E_REPORT WEB_SEARCH_PROVIDER SEARXNG_URL PI2DSH_BLACKBOX_PI_BIN PI2DSH_KEEP_TEST_ARTIFACTS DSH_ROOT PLAYWRIGHT_FROM

How to read this

Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.

Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.