dsh.so
EN
English中文
dsh-agent-in-browser avatar

dsh-agent-in-browser

Let a DeepSeek Harness agent see and control your browser in real time — read, screenshot, navigate, click, and manage tabs via tool calls.

Ecosystem pluginBrowserVisionVision / OCRWeb search
Verification
L5 · Ecosystem plugin
Ecosystem plugin
Risk
LowRisk
Health
Stable
Trust
Silver

Install verification: Ecosystem plugin: installs via dsh plugin add but declares no dsh.bundle and mounts no plugin capability — the L1-L5 install ladder does not rate it; the security scan still runs.Install verification details →

What it doesAI

Lets a DeepSeek Harness agent see and control your browser in real time: read, screenshot, navigate, click, and manage tabs via tool calls.

  • Real-time browser visibility via screenshots and reads
  • Tool-driven navigation, clicking, and tab management
  • Integrates with DeepSeek Harness agent tool calls
browserAIvisionAI

Capability tags are AI-inferred or rule-extracted from the README (see badge) — vocabulary-limited, not install-verified. AI = inferred; README = literal keyword from the readme.

Installation

dsh plugin --profile web add github:chris-003/dsh-agent-in-browser#v0.2.0
verified v0.2.0

Install method: GitHub · runtime test inconclusive (L5 unknown)

Verification & Compatibility○ Ecosystem plugin

Grouped by plugin version: each card lists the dsh versions actually tested against that artifact version and their install verdicts (L5 wins). Untested combinations are omitted — absence means untested, never assumed compatible. L1–L3 are a plugin-level static archive (independent of the dsh version — the same verdict on every dsh row): they sit in each row's level grid next to L4/L5, marked "static", while their evidence is stored once per plugin inside that row's "checks & evidence" instead of being duplicated per version.

External credentials (plugin-level): none detected

Declared DSH compatibilityfrom package.json · peerDependencies
package manifest not collected

package manifest not collected — the declared range is unknown.

Install compatibility matrix (rows = plugin versions〔latest 5〕, columns = dsh versions〔latest 5〕)
○ Ecosystem plugin
At-a-glance → evidence in the cards below
plugin ＼ dshdsh 0.2.1-rc.2
current
dsh 0.2.1-alpha.4dsh 0.2.1-alpha.2dsh 0.2.0-rc.2dsh 0.2.0-rc.1
v0.2.0○○○○○
Install compatibility (by plugin version, dsh versions within)
Legend:✓ L5 runtime verified○ ecosystem plugin◼ ecosystem app✗ failed
v0.2.0github○ 14 ecosystem plugin2026-10-19

https://github.com/chris-003/dsh-agent-in-browser

○dsh 0.2.1-rc.2current2026-10-19Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.2.1-rc.2
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.2.1-rc.2 · profile: l4-sandbox

Issued: 2026-10-19 · expires: 2026-10-26

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-19
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.0s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-19
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.0s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-19
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.0s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-19
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 82ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-10-19
ready line dsh web: http://127.0.0.1:57358/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-10-19
path / · HTTP 200 · took 82ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-10-19
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.2.1-alpha.42026-10-17Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.2.1-alpha.4
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.2.1-alpha.4 · profile: l4-sandbox

Issued: 2026-10-17 · expires: 2026-10-24

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-17
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.3s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-17
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.3s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-17
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.3s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-17
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 515ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-10-17
ready line dsh web: http://127.0.0.1:50765/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-10-17
path / · HTTP 200 · took 515ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-10-17
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.2.1-alpha.22026-10-11Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.2.1-alpha.2
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.2.1-alpha.2 · profile: l4-sandbox

Issued: 2026-10-11 · expires: 2026-10-18

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-11
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.7s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-11
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.7s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-11
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.7s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-11
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 287ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-10-11
ready line dsh web: http://127.0.0.1:49806/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-10-11
path / · HTTP 200 · took 287ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-10-11
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.2.0-rc.22026-10-09Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.2.0-rc.2
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.2.0-rc.2 · profile: l4-sandbox

Issued: 2026-10-09 · expires: 2026-10-16

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-09
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 3.2s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-09
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 3.2s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-09
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 3.2s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-09
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 745ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-10-09
ready line dsh web: http://127.0.0.1:64707/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-10-09
path / · HTTP 200 · took 745ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-10-09
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.2.0-rc.12026-09-29Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.2.0-rc.1
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.2.0-rc.1 · profile: l4-sandbox

Issued: 2026-09-29 · expires: 2026-10-06

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-29
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 3.6s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-29
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 3.6s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-29
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 3.6s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-29
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 593ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-09-29
ready line dsh web: http://127.0.0.1:49271/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-09-29
path / · HTTP 200 · took 593ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-09-29
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.1.7-rc.22026-09-25Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.1.7-rc.2
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.1.7-rc.2 · profile: l4-sandbox

Issued: 2026-09-25 · expires: 2026-10-02

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-25
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.5s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-25
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.5s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-25
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.5s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-25
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 40ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-09-25
ready line dsh web: http://127.0.0.1:50585/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-09-25
path / · HTTP 200 · took 40ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-09-25
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.1.7-alpha.22026-09-23Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.1.7-alpha.2
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.1.7-alpha.2 · profile: l4-sandbox

Issued: 2026-09-23 · expires: 2026-09-30

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-23
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.7s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-23
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.7s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-23
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.7s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-23
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 21ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-09-23
ready line dsh web: http://127.0.0.1:60865/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-09-23
path / · HTTP 200 · took 21ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-09-23
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.1.6-alpha.22026-09-20Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.1.6-alpha.2
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.1.6-alpha.2 · profile: l3-fullscan

Issued: 2026-09-20 · expires: 2026-09-27

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-19
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.1s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-19
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.1s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-19
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.1s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-19
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 236ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-09-19
ready line dsh web: http://127.0.0.1:57209/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-09-19
path / · HTTP 200 · took 236ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-09-19
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.1.6-alpha.12026-09-17Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.1.6-alpha.1
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.1.6-alpha.1 · profile: l4-sandbox

Issued: 2026-09-17 · expires: 2026-09-24

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-17
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.2s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-17
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.2s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-17
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.2s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-17
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 19ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-09-17
ready line dsh web: http://127.0.0.1:58114/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-09-17
path / · HTTP 200 · took 19ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-09-17
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.1.5-rc.22026-09-12Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.1.5-rc.2
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.1.5-rc.2 · profile: l4-sandbox

Issued: 2026-09-12 · expires: 2026-09-19

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-12
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.2s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-12
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.2s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-12
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.2s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-12
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 15ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-09-12
ready line dsh web: http://127.0.0.1:53052/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-09-12
path / · HTTP 200 · took 15ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-09-12
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.1.3-alpha.22026-09-09Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.1.3-alpha.2
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.1.3-alpha.2 · profile: l4-sandbox

Issued: 2026-09-09 · expires: 2026-09-16

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-09
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.3s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-09
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.3s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-09
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.3s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-09
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 17ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-09-09
ready line dsh web: http://127.0.0.1:61781/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-09-09
path / · HTTP 200 · took 17ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-09-09
verdict not-found · entries 149
phases: active 120 · null 28 · loading 1
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.1.3-alpha.12026-09-07Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.1.3-alpha.1
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.1.3-alpha.1 · profile: l4-sandbox

Issued: 2026-09-07 · expires: 2026-09-14

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-07
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.4s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-07
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.4s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-07
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 2.4s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-07
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 37ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-09-07
ready line dsh web: http://127.0.0.1:59448/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-09-07
path / · HTTP 200 · took 37ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-09-07
verdict not-found · entries 150
phases: active 122 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○dsh 0.1.2-rc.12026-09-05Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: 0.1.2-rc.1
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dsh0.1.2-rc.1 · profile: l3-fullscan

Issued: 2026-09-05 · expires: 2026-09-12

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install succeeded✓ Passed
L5 · Run tested? Unknown

ecosystem plugin: no dsh.bundle declaration

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-09-04
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 48ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-09-04
ready line dsh web: http://127.0.0.1:51089/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-09-04
path / · HTTP 200 · took 48ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-09-04
verdict not-found · entries 149
phases: active 121 · null 28
ecosystem plugin: installed, but declares no dsh.bundle — not mounted as a plugin (shown as L5 · ecosystem plugin)

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

○prehistory2026-10-04Ecosystem plugin
Environment & artifact
  • • Node.js: v24.14.0
  • • DSH: unknown
  • • Plugin artifact: github · https://github.com/chris-003/dsh-agent-in-browser#v0.2.0
Levels (L1–L3 plugin-level static archive · L4/L5 newest real verdicts for this combination)
L1 static
Passed
L2 static
Passed
L3 static
Passed
L4 sandbox
Passed
L5 runtime
Unknown
Ecosystem plugin: no install verdict — not a usable dsh plugin (shown as L5 · ecosystem plugin)
Ecosystem plugin

ID: dsh-agent-in-browser@v0.2.0@dshunknown · profile: l4-sandbox

Issued: 2026-10-04 · expires: 2026-10-11

View checks & evidence
L1 · Found✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L2 · Structured✓ Passed
Defaulted from L3✓ Passed
defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)
L3 · Install spec✓ Passed
Install command parsed✓ Passed
Source: registry verification · Method: install spec parse · Captured 2026-10-18
DSH version declared✓ Passed
Source: registry verification · Method: DSH version declaration · Captured 2026-10-18
L4 · Install tested✓ Passed
Install executed in confined sandbox✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-04
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 5.9s
Install succeeded✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-04
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 5.9s
Installed artifact confirmed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-04
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · channel GitHub source · outcome ran · exit 0
check took: 5.9s
L5 · Run tested? Unknown

not present in web-profile loader inventory

Sandbox install passed✓ Passed
Source: Windows ACL sandbox · Method: sandbox install run · Captured 2026-10-04
spec github:chris-003/dsh-agent-in-browser#v0.2.0 · install mode reused L4 scratch
check took: 19ms
Web boot ready✓ Passed
Source: DSH runtime · Method: web boot · Captured 2026-10-04
ready line dsh web: http://127.0.0.1:61050/?token=…
HTTP endpoint served✓ Passed
Source: DSH runtime · Method: HTTP request · Captured 2026-10-04
path / · HTTP 200 · took 19ms
Plugin active in inventory? Unknown
Source: DSH runtime · Method: plugin inventory query · Captured 2026-10-04
verdict not-found · entries 149
phases: active 121 · null 28
not present in web-profile loader inventory

L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.

Only the latest 3 published versions are shown; source-snapshot (commit hash) groups, unstated groups and older versions are omitted — the full archive stays in the data layer (snapshot/unstated groups appear only when a plugin has no published version).

Author badges

Embed the official badges in your README to showcase security & install-test status:

dsh.so risk
`[![dsh.so risk](https://www.dsh.so/badge/dsh-agent-in-browser.svg)](https://www.dsh.so/artifact/dsh-agent-in-browser/)`

Security Report

Two automated layers, neither a manual review: a static scan (per-plugin rule checks) and a model-driven dynamic security audit that covers only the subset static-flagged at warn or above and never executes plugin code.

dsh-agent-in-browserAutomated review · daily

Static low, dynamic medium — stricter wins → overall medium.

static low→dynamic medium→overall medium
0 critical·0 high
mediumoverall · medium
1static scan · vet primaryvet AST static analysis (npm artifact or git source)
Version binding
plugin version—
scanned versionv0.2.0git2026-10-21
current versionv0.2.0same version
vet verdictclean · git

Vet is an AST static scan (npm artifact or git source).

show static findings (7)
  • warningchildProcess · code-execagent-in-browser/dynamic/bridge-smoke.mjs:13

    const child = spawn(process.execPath, [join(here, 'bridge-server.mjs')], {

  • warningnetIp · networkchrome-extension/src/options/main.tsx:8

    const [webuiUrl, setWebuiUrl] = useState('http://127.0.0.1:3080')

  • warningnetIp · networkchrome-extension/src/options/main.tsx:36

    <input value={webuiUrl} onChange={(e) => setWebuiUrl(e.target.value)} placeholder="http://127.0.0.1:3080" />

  • warningnetIp · networkchrome-extension/src/sidepanel/main.tsx:9

    setSrc((v.webuiUrl as string) || 'http://127.0.0.1:3080')

  • warningnetIp · networkfirefox-extension/src/options/main.tsx:9

    const [webuiUrl, setWebuiUrl] = useState('http://127.0.0.1:3080')

  • warningnetIp · networkfirefox-extension/src/options/main.tsx:37

    <input value={webuiUrl} onChange={(e) => setWebuiUrl(e.target.value)} placeholder="http://127.0.0.1:3080" />

  • warningnetIp · networkfirefox-extension/src/sidepanel/main.tsx:10

    setSrc((v.webuiUrl as string) || 'http://127.0.0.1:3080')

2dynamic auditmodel reads redacted source context · never executes plugin code
highest grademedium
merged intooverall medium
audited at2026-10-19
findings0 critical·0 high1 medium / 1 low hidden
show 2 audit findings
  • mediumAuth falls back to a shared hard-coded default token that ships in all componentsagent-in-browser/dynamic/bridge-server.mjs:21

    The same DEFAULT_TOKEN constant (lib/protocol/types.js line 33) is also the default in the host plugin Config (`token: z.string().min(3).default(DEFAULT_TOKEN)`), and it is baked into the Chrome/Firefox extensions. If the operator does not override it, the token is publicly known and identical for every install. Because the server (new WebSocketServer, line 23) does not check Origin, a page the user visits or a local process can open ws://127.0.0.1:38745, complete the handshake with the default token and impersonate the browser: it would receive every agent command and could feed fabricated re

  • lowWebSocket auth token written in cleartext to stderr startup logagent-in-browser/dynamic/bridge-server.mjs:109

    When the bridge is spawned by the dynamic plugin or run by hand, the shared secret guarding the browser channel is emitted to stderr. That stream is captured by the parent process/log aggregation, so the credential can be persisted or exposed wherever those logs are collected, weakening the only authentication boundary.

Loopback WS bridge is token-gated, but falls back to a shared hard-coded default token and prints it to stderr; the real server/tool-dispatch files were not harvested.

Rule: the dynamic audit can only raise risk, never lower it (raise-only, never an exemption); a wrong raise is withdrawn by human review and the tier falls back to the static verdict. Overall verdict = the stricter of the two layers.

Disclaimer: the static scan and the dynamic security audit are both automated analysis, not a security guarantee. Always review what you install.

Activity

Last commit 2026-08-31 · activity: Stable

• Repo created: 2026-08-31

• Stars: ★ 0 · Forks: 0

• Health: Stable — committed within 90 days

Source

GitHub: github.com/chris-003/dsh-agent-in-browser

Was this page helpful?