deepseek-plugin-store

检测报告

能力清单

• 可执行外部程序spawns-processes高关注2 处命中
  • scripts/governance/pr-gate.mjs:3import { execFileSync } from 'node:child_process'
  • scripts/monitor-upstream.mjs:5import { execFile } from 'node:child_process'
  • 看它调用哪些程序。调用本机已有的工具是常见做法。
• 以 shell 执行命令shell-exec高关注2 处命中
  • scripts/governance/pr-gate.mjs:14const diff = execFileSync('git', ['diff', '--name-status', `${baseSha}...${headSha}`], { encoding: 'utf8' }).trim().spli…
  • scripts/governance/pr-gate.mjs:106if (readmeBatch) execFileSync(process.execPath, ['scripts/render-readme.mjs', '--check'], { stdio: 'inherit' })
  • 看命令字符串是拼出来的还是写死的。拼接用户输入才是真正的风险。
• 写入文件writes-files需留意27 处命中
  • scripts/analyze-quality.mjs:232await fs.writeFile(cachePath, JSON.stringify(cache, null, 2) + '\n')
  • scripts/build-site.mjs:73fs.writeFileSync(DATES_FILE, JSON.stringify(Object.fromEntries(Object.entries(dates).sort()), null, 1))
  • scripts/build-site.mjs:153for (const slug of ['dev', 'fun', 'notify', 'session']) fs.rmSync(`${loc.out.replace(/index\.html$/, '')}${slug}`, { rec…
  • scripts/build-site.mjs:173fs.mkdirSync(loc.out.split('/').slice(0, -1).join('/'), { recursive: true })
  • 看写入位置。写自己的配置目录是正常的，写系统目录不是。
• 启动伪终端spawns-pty需留意27 处命中
  • …mattismegevand-dsh-terminal.json:64"reason": "The plugin is primarily a terminal utility for DeepSeek Harness Web users: it adds a dockable, tabbed termina…
  • …1998815-dsh-workspace-tools.json:7"summary": "DSH(DeepSeek Harness) 右侧原生工具侧边栏插件：文件系统浏览器 / Git 变更与 diff / 会话变更 采用·撤回 / PTY 控制台。Windows 直连 node-pty，跟随 DSH 主…
  • …/iamsee123-dsh-web-terminal.json:7"summary": "Adds a multi-tab local terminal to the DeepSeek Harness web GUI, running host Shell sessions through node-pt…
  • …/iamsee123-dsh-web-terminal.json:63"reason": "Adds a multi-tab local terminal to the web GUI, using node-pty shells on the host and WebSocket streaming; hu…
  • 伪终端等于给了一个完整 shell。确认这是插件的核心功能。
• 发起网络请求network需留意11 处命中
  • scripts/analyze-quality.mjs:32const response = await fetch(url, { ...options, signal: AbortSignal.timeout(30000) })
  • scripts/discover.mjs:17const response = await fetch(url, { ...options, signal: AbortSignal.timeout(30000) })
  • scripts/governance/evidence.mjs:8const response = await fetch(url, { headers, signal: AbortSignal.timeout(45000) })
  • scripts/governance/evidence.mjs:64const response = await fetch('https://api.github.com/graphql', {
  • 看请求发往哪些域名。发往作者自己的后端是常见做法。
• 读取环境变量reads-env一般54 处命中
  • …67/lhf6623-dsh-proxy-config.json:62"reason": "A general utility plugin that configures and persists HTTP/SOCKS proxy settings, injecting them into process.…
  • …67/lhf6623-dsh-proxy-config.json:12"reason": "A general utility plugin that configures and persists HTTP/SOCKS proxy settings, injecting them into process.…
  • lib/index.js:8const configured = process.env.DSH_HOME?.trim();
  • lib/types/index.js:7const configured = process.env.DSH_HOME?.trim();
  • 环境变量里常混有密钥。看它是否把整个 env 都读走。
• 读取文件reads-files一般26 处命中
  • scripts/analyze-quality.mjs:21return JSON.parse(await fs.readFile(file, 'utf8'))
  • scripts/build-site.mjs:35const text = fs.readFileSync(loc.readme, 'utf8')
  • scripts/build-site.mjs:70const dates = fs.existsSync(DATES_FILE) ? JSON.parse(fs.readFileSync(DATES_FILE, 'utf8')) : {}
  • scripts/build-site.mjs:150const master = fs.readFileSync('site/template.html', 'utf8')
  • 读文件是绝大多数插件的正常工作方式，本身不构成顾虑。
• 接触凭据或密钥credentials一般26 处命中
  • …iehuang227-source-live-talk.json:42"code": "README notes credentials are supplied via dsh ctx.credentials or local proxy for providers, introducing runtime…
  • …enkai-dsh-web-search-tavily.json:23"Can optionally read TAVILY_API_KEY from the environment or ~/.dsh/.credentials.yaml",
  • …enkai-dsh-web-search-tavily.json:46"Can optionally read TAVILY_API_KEY from the environment or ~/.dsh/.credentials.yaml",
  • …fne123-dsh-plugin-api-quota.json:29"code": "Host registers GET /api-quota/balance and resolves DeepSeek API key through ctx.credentials before querying htt…
  • 看它读取哪些凭据、发往哪里。用于登录自己的服务是正常的。
• 动态加载模块dynamic-import一般6 处命中
  • …mulin778-web-dsh-translator.json:7"summary": "Built-in translator plugin for DeepSeek Harness (DSH): multi-language, multi-model streaming translation, do…
  • …sh-plugin-skill-manager-gui.json:27"code": "README describes a graphical web settings manager for SKILL.md with create, edit, import (ZIP), delete, and lis…
  • …liu-za-81-dsh-theme-firefly.json:27"Supports local media import (image/video) for wallpaper assets with client-side storage.",
  • …liu-za-81-dsh-theme-firefly.json:59"Supports local media import (image/video) for wallpaper assets with client-side storage.",
  • 动态导入本身无害，但会让依赖关系难以静态审阅。

这份报告的口径

扫描读的是包里的源码，全程不执行第三方代码。 本次读了 13877 个文件，扫描于 2026-10-22。 命中次数只说明源码里出现过这类调用，不说明行为好坏——一个插件读写文件 500 次和 1 次 都会被记为「读取文件」。这是能力清单，不是信任评分，也不是安全结论： 没扫出来的能力可能只是写法没被规则覆盖。

可信度

这个插件只在 GitHub 上发布，没有走过 npm 的分发链路。下面的梯子按 GitHub 通道的证据计算：补丁审计、钉在 commit 上的源码快照、隔离试装；L2 的「宿主启动」这一层还没有对 git 通道跑过，所以等级停在 L1。

• -20隔离环境装不上fail：C:\Users\A01\AppData\Local\Temp\dsh-l2-home-w0-6836-1792672600\profiles\l2probe\.plugin-manager\logs\operation-gd9Vxo\pnpm.log dsh: git-hosted plugins build on
• -10声明与实物不符：client-present-undeclaredmajor：['docs/ui/index.html', 'docs/zh/ui/index.html', 'lib/client.js', 'lib/types/client/Store.d.ts']
• -5cordis entry id「plugin-store」被 2 个包共用，同时安装会互相替换warn：dsh-plugins-store
• -2没有 READMEminor