wink-run/tokenbank

C2

Token Bank — the local LLM gateway that sits between your AI agents and every provider. Know where tokens go · Spend less with smart routing to Ollama, Groq, GitHub Models · Earn by sharing idle quot

★ 50+ · wink-run/tokenbank source on GitHub · this plugin in the registry

wink-run/tokenbank is a DeepSeek Harness plugin rated C2 — one powerful capability or sensitive behavior. It runs code at install time, executes system commands, uses eval / new Function, decodes base64 payloads.

What it can do

CapabilityFlagEvidence
runs code at install timeinstall_scriptpostinstall: electron-rebuild -f -w better-sqlite3
executes system commandsexec×75 src, e.g. client/electron/agent-executor.js:6, client/electron/agent-executor.js:1260
uses eval / new Functioneval×2 src, e.g. server/static/support.js:702, server/static/support.js:1044
decodes base64 payloadsbase64_decode×5 src, e.g. client/electron/agent-executor.js:64, client/electron/main.js:460
starts a network servernet_server×9 src, e.g. client/cli/admin-api.js:910, client/electron/agent-dispatch-server.js:90
reads credential-class env varstoken_envAPPLE_APP_SPECIFIC_PASSWORD, TB_DISPATCH_TOKEN, TB_PARENT_SESSION_KEY, TOKENBANK_CLI, TOKENBANK_COMPRESS, TOKENBANK_SERVER_URL

Outbound domains

claude.ai api.openai.com codeload.github.com api.github.com auth.openai.com openrouter.ai unpkg.com apihub.agnes-ai.com api.anthropic.com chatgpt.com

Environment variables it reads

APPDATA LOCALAPPDATA TB_CLIENT_ID GATEWAY_PORT TB_MAIN_AGENT_ID CODEX_HOME TB_GATEWAY_URL CLAUDE_CONFIG_DIR DSH_HOME TOKENBANK_CLI

How to read this

Levels measure capability surface and transparency, not maliciousness. A C3 plugin can be entirely legitimate — a desktop shell genuinely needs subprocesses. The point is that you can see this before installing. See the levels explained and how dsh plugins work.

Findings come from static analysis of shipped code; nothing is executed. Think a flag is wrong? Open an issue — every flag cites the file and line it came from.