wenbin-wb/dsh-bridge
C3🚀 DeepSeek Harness 多通道远程访问与安全守护插件 | 局域网扫码直连、Cloudflare / 自建公网隧道、微信 / QQ / 飞书 / Telegram 机器人全生命周期对话 | 内置全协议访问安全认证、后台防篡改与容灾保命体系
★ 100+ · wenbin-wb/dsh-bridge source on GitHub · this plugin in the registry
wenbin-wb/dsh-bridge is a DeepSeek Harness plugin rated C3 — powerful capability combined with sensitive behavior. It patches the dsh runtime, command execution in build output only, executes commands in development tooling the package does not ship, base64 decoding in build output only.
Installable plugin — declares a dsh.bundle manifest
What it can do
| Capability | Flag | Evidence |
|---|---|---|
| patches the dsh runtime | runtime_patch | ./cordis.patch.yml |
| command execution in build output only | exec_bundled | ×10 in build output only, e.g. lib/cloudflared-manager.mjs:1, lib/cloudflared-manager.mjs:1 |
| executes commands in development tooling the package does not ship | exec_tooling | ×3 in development tooling the package does not ship, e.g. scripts/create-github-release.mjs:1, scripts/create-github-release.mjs:1 |
| base64 decoding in build output only | base64_decode_bundled | ×4 in build output only, e.g. lib/tunnel-client.mjs:323, lib/tunnel-client.mjs:476 |
| network server in build output only | net_server_bundled | ×1 in build output only, e.g. lib/index.js:378 |
| reads credential-class env vars | token_env | TELEGRAM_BOT_TOKEN |
| reads credential-class env vars in development tooling the package does not ship | token_env_tooling | in development tooling the package does not ship: GH_TOKEN, GITHUB_TOKEN |
Services it injects
agents approval connection sessionPersistence sessions slots webServer workspaceRegistry workspaces
Hooks it attaches
approval/request feishu/action feishu/message qq/interaction qq/message session/event telegram/action telegram/message wechat/message
Outbound domains
t.me bot.q.qq.com open.feishu.cn registry.npmmirror.com tunnel.yourdomain.com novac2c.cdn.weixin.qq.com applink.feishu.cn bots.qq.com api.bot.qq.com api.telegram.org
Environment variables it reads
DSH_HOME Path USERPROFILE TELEGRAM_BOT_TOKEN HTTPS_PROXY ALL_PROXY http_proxy
How to read this
Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.
Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.