dsh-client-ui-knowledge-cards

A plugin of Deepseek Harness(DSH),transform your recent chat history into beautifully designed knowledge cards, ready to download and share.

PluginKnowledgeUI & SkinsMemoryFileStorage

Verification

L4 · Install tested

Passed

Risk

Medium

Health

Active

Trust

Silver

What it doesAI

Creates beautiful knowledge cards from recent chat history for download and sharing.

Transform chat history into knowledge cards
Beautiful, ready-to-share card design
Download cards directly from DSH environment

AI-generated from the repo README — for reference only.

Installation

dsh plugin --profile web add github:wangxueqi00/dsh-client-ui-knowledge-cards#v0.1.2

security scan passed · source release v0.1.2

Install method: GitHub · sandbox install verified (L4)

Verification & Compatibility

Static checks (version-independent)

L1 静态

Passed

L2 静态

Passed

L3 静态

Passed

L1–L3 are registry / install-spec static checks — constant across dsh versions.

External credentials (plugin-level): none detected

Per-version runtime verdicts (L4/L5)

dsh 0.1.2-alpha.1currentL5 · inconclusive

Environment

• Node.js: v24.14.0
• DSH: 0.1.2-alpha.1

Runtime levels

L4 版本

Passed

L5 版本

Unknown

Install test ran but produced no conclusive verdict

L5 · inconclusive

ID: dsh-client-ui-knowledge-cards-20260902T162209Z · profile: l5-web-smoke

Issued: 2026-09-02 · expires: 2026-12-01

View checks & evidence

L1 · Found✓ Passed

↳ carried from earlier record dsh-client-ui-knowledge-cards-20260902T044820Z (l3-fullscan)

Defaulted from L3L1.0_DEFAULTED_FROM_L3✓ Passed

defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)

L2 · Structured✓ Passed

↳ carried from earlier record dsh-client-ui-knowledge-cards-20260902T044820Z (l3-fullscan)

Defaulted from L3L2.0_DEFAULTED_FROM_L3✓ Passed

defaulted to passed — L3 install spec passed (full-registry L3 sweep policy)

L3 · Install spec✓ Passed

↳ carried from earlier record dsh-client-ui-knowledge-cards-20260902T044820Z (l3-fullscan)

Install command parsedL3.1_INSTALL_COMMAND_PARSED✓ Passed

Source: registry verification · Method: install spec parse · Captured 2026-09-02

DSH version declaredL3.2_DSH_VERSION_DECLARED✓ Passed

Source: registry verification · Method: DSH version declaration · Captured 2026-09-02

L4 · Install tested✓ Passed

Install succeededL4.2_INSTALL_SUCCESS✓ Passed

L5 · Run tested? Unknown

no dsh.bundle declaration

Sandbox install passedL5.1_INSTALL_PASSED_SANDBOXED✓ Passed

Web boot readyL5.2_WEB_BOOT_READY✓ Passed

Source: DSH runtime · Method: web boot

HTTP endpoint servedL5.3_HTTP_SERVED✓ Passed

Source: DSH runtime · Method: HTTP request

Plugin active in inventoryL5.4_PLUGIN_INVENTORY_ACTIVE? Unknown

Source: DSH runtime · Method: plugin inventory query

installed but declares no dsh.bundle — not a web-profile plugin

Author badges

Embed the official badges in your README to showcase security & install-test status:

Security Report

Automated static scan, not manual review.

DSH.SO VETMEDIUM719a73

Security reviewAutomated review · daily

MEDIUM

Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).

0 critical·4 high·121 medium·0 score

Version binding

plugin version0.1.2dsh manifest

scanned commit719a7393f7702026-09-02

latest commit719a7393f770

vet verdictsuspicious · npmscore 0

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

Risk	Rule	Location	Description
high	R2	client.js:56484	Function() 动态构造函数
high	R2	client.js:73380	Function() 动态构造函数
high	R2	client.js:131809	Function() 动态构造函数
high	R2	client.js:135662	Function() 动态构造函数
medium	R9	client.js:3805	正则嵌套量词（ReDoS 风险：(a+)+ 类指数回溯）

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-31 · activity: Active

• Repo created: 2026-09-01

• Stars: ★ 1 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/wangxueqi00/dsh-client-ui-knowledge-cards

Plugin notes

What is the dsh-client-ui-knowledge-cards DeepSeek Harness plugin?

dsh-client-ui-knowledge-cards is a DeepSeek Harness plugin maintained by @wangxueqi00. It is cataloged on dsh.so as a Knowledge plugin for Memory tasks, with a public GitHub source, declared install command, and automated static security scan.

How do I install dsh-client-ui-knowledge-cards?

Run dsh plugin --profile web add github:wangxueqi00/dsh-client-ui-knowledge-cards#v0.1.2 in a DeepSeek Harness (dsh) environment. This exact command has been verified by a real install inside an isolated windows-acl sandbox (L4).

Is the security scan on this page a manual audit?

No. The scan is an automated heuristic review of the repository source and can produce false positives. It is not a manual security audit and never an endorsement; review the repository and installed permissions before using the plugin.

"DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture where everything is a plugin, and is powered by Cordis."
— DeepSeek Harness README

Sources: GitHub repository · DeepSeek Harness README · security scan data · Maintained by dsh.so · Last updated 2026-09-01

dsh-client-ui-knowledge-cards

What it doesAI

Installation

Verification & Compatibility

Author badges

Security Report

Risk details

Activity

Source

Author README