dsh.so
EN
English中文
deepseek-harness-android-app avatar

deepseek-harness-android-app

DeepSeek Harness 安卓通用控制端：Termux 引导、一键部署、内置浏览器与存储管理（dsh-plugin 生态）

PluginBrowserStorage
Verification
L2 · Structured
Security
High
Health
Active
Trust
Silver

What it does

DeepSeek Harness 安卓通用控制端：Termux 引导、一键部署、内置浏览器与存储管理（dsh-plugin 生态）

Installation

dsh plugin --profile web add deepseek-harness-android-app

Install method: npm · not yet tested in container (L3+)

Compatibility

DSH VersionStatus
not statedDeclared — not tested

Requirements

  • • Node.js: not stated
  • • DSH: declared "not stated"
  • • External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SOHIGH-RISKSCAN3 FILES
c27eb2
Security reviewAutomated review · daily
HIGH-RISK

Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.

4 critical·3 warning·4 info·3 files scanned
shell ×3code-exec ×1
Version binding
scanned commitc27eb2dbef832026-08-16
latest commitc27eb2dbef83

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: High4 critical · 3 warning · 4 info

• Static heuristic scan: done (3 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

Scan findings · 11

  • criticalChild process module usage (Node.js)daemon/server.mjs:13
    import { spawn, execFileSync } from 'node:child_process';
  • criticalShell command execution (exec / execSync)daemon/server.mjs:116
    dshVersion = String(execFileSync(DSH_BIN, ['--version'], { timeout: 15000 })).trim();
  • criticalShell command execution (exec / execSync)daemon/server.mjs:159
    try { node = String(execFileSync(PREFIX + '/bin/node', ['-v'], { timeout: 10000 })).trim(); } catch { /* ignore */ }
  • criticalShell command execution (exec / execSync)daemon/server.mjs:162
    const out = String(execFileSync(PREFIX + '/bin/df', ['-h', HOME], { timeout: 10000 }));
  • warningHTTP request to a raw IP addressdaemon/server.mjs:124
    const url = new URL(req.url, 'http://127.0.0.1');
  • warningFilesystem write operationsdaemon/server.mjs:321
    fs.writeFileSync(f, body, 'utf8');
  • infoHardcoded IP addressdaemon/server.mjs:34
    const s = net.connect({ port, host: '127.0.0.1' });
  • infoHardcoded IP addressdaemon/server.mjs:124
    const url = new URL(req.url, 'http://127.0.0.1');
  • infoHardcoded IP addressdaemon/server.mjs:397
    server.listen(PORT, '127.0.0.1', () => {
  • warningHTTP request to a raw IP addressdaemon/start-daemon.sh:4
    if ! curl -s --max-time 2 http://127.0.0.1:8023/api/ping >/dev/null 2>&1; then
  • infoHardcoded IP addressdaemon/start-daemon.sh:4
    if ! curl -s --max-time 2 http://127.0.0.1:8023/api/ping >/dev/null 2>&1; then

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-16 · activity: Active

• Repo created: 2026-08-16

• Stars: ★ 4 · Forks: 1

• Health: Active — committed within last 30 days

Source

GitHub: github.com/Jensen-Yao/deepseek-harness-android-app

Was this page helpful?