dsh.so
EN
English中文
@lql341/deepseek-harness-linux-desktop avatar

@lql341/deepseek-harness-linux-desktop

Unofficial Linux x64 (AppImage/deb) port patch set for the DeepSeek Harness desktop app, aiming at macOS-like behaviour

Ecosystem appDesktop
Verification
L5 · Ecosystem app
Risk
LowRisk
Health
Active
Trust
Silver

Install verification: Ecosystem app: not installed via dsh plugin add, so the L1-L5 plugin install-verification ladder does not apply; the security scan still runs.

L1–L5 verification rules

What it does

Unofficial Linux x64 (AppImage/deb) port patch set for the DeepSeek Harness desktop app, aiming at macOS-like behaviour

Installation

GitHub repository

Ecosystem apps are not installable via dsh plugin add: desktop / web shells install or deploy through their own release channel (GitHub Releases or the project site).

The level reads L5 · Ecosystem plugin / L5 · Ecosystem app per the three-way classification (the L1-L5 ladder does not rate them); the security scan still runs.

Verification & Compatibility

No verification record yet for this plugin.

  • • Node.js: not stated
  • • DSH: not stated
  • • External credentials: none detected

Author badges

Embed the official badges in your README to showcase security & install-test status:

dsh.so risk
`[![dsh.so risk](https://www.dsh.so/badge/deepseek-harness-linux-desktop.svg)](https://www.dsh.so/artifact/deepseek-harness-linux-desktop/)`

Security Report

Two automated layers, neither a manual review: a static scan (per-plugin rule checks) and a model-driven dynamic security audit that covers only the subset static-flagged at warn or above and never executes plugin code.

deepseek-harness-linux-desktopAutomated review · daily

Static low, dynamic no conclusion — stricter wins → overall low.

static low→dynamic no conclusion→overall low
0 critical·0 high1 medium-risk findings hidden
lowoverall · low
1static scan · vet primaryvet AST static analysis (npm artifact or git source)
Version binding
plugin version—
scanned versionv0.2.1-rc.2-linux.4git2026-10-21
current versionv0.2.1-rc.2-linux.4same version
vet verdictclean · git

Vet is an AST static scan (npm artifact or git source).

show static findings (4)
  • criticaldestructiveRm · destructiveci/debian13-package-check.sh:47

    rm -rf /tmp/dsh-disabled-home /tmp/dsh-disabled-session

  • warningchildProcess · code-execci/scnet-release-audit.mjs:290

    const result = spawnSync(runtime, args, {

  • warningchildProcess · code-execci/scnet-release-audit.mjs:343

    const unpack = spawnSync('dpkg-deb', ['-x', deb, extracted], { stdio: 'inherit' })

  • warningcurlDownload · networkverify.sh:61

    code=$(curl -s -o /dev/null -m 15 -w '%{http_code}' "$url" 2>/dev/null || echo "ERR")

2dynamic auditmodel reads redacted source context · never executes plugin code

no dynamic conclusion (source harvest or model call failed) — no conclusion is not a pass; the overall rating falls back to the static tier.

Rule: the dynamic audit can only raise risk, never lower it (raise-only, never an exemption); a wrong raise is withdrawn by human review and the tier falls back to the static verdict. Overall verdict = the stricter of the two layers.

Disclaimer: the static scan and the dynamic security audit are both automated analysis, not a security guarantee. Always review what you install.

Activity

Last commit 2026-10-20 · activity: Active

• Repo created: 2026-09-30

• Stars: ★ 0 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/lql341/deepseek-harness-linux-desktop

Was this page helpful?