What it does
动态心情图标 · DeepSeek Harness 插件 — bloub 表情随会话状态切换 favicon 与 logo,形状/颜色/文字可配置(8 shapes × 12 colors, animated SVG, MIT)
Installation
dsh plugin --profile web add github:Yuuhann1999/dsh-bloub-moodInstall method: GitHub · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.
code-exec ×32.1.1dsh manifestd59afb8165982026-08-19d59afb816598The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
• Static heuristic scan: done (6 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
High-risk findings · 3 / 3
- criticalDynamic code execution via eval()export-one.mjs:55window.eval(code);
- criticalDynamic code execution via eval()tools-gen-assets.mjs:58window.eval(code);
- criticalChild process module usage (Node.js)tools-gen-assets.mjs:7import { execFileSync } from 'child_process';
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-18 · activity: Active
• Repo created: 2026-08-19
• Stars: ★ 2 · Forks: 1
• Health: Active — committed within last 30 days
