What it does
DSH Web skin plugin with built-in themes and custom image skins
Installation
dsh plugin --profile web add dsh-client-ui-skinsInstall method: npm · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
No critical findings, but warning-level issues were detected (file writes, remote imports, base64 decoding, downloads).
1321f06c4be92026-08-161321f06c4be9The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
• Static heuristic scan: done (8 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
Scan findings · 6
- warningHTTP request to a raw IP addressinstall-dsh-skins.sh:72say "完成!刷新 http://127.0.0.1:3080 → 设置 → 通用设置 → 皮肤"
- infoHardcoded IP addressinstall-dsh-skins.sh:72say "完成!刷新 http://127.0.0.1:3080 → 设置 → 通用设置 → 皮肤"
- infoUses localStoragelib/client.js:807var raw = localStorage.getItem(key);
- infoUses localStoragelib/client.js:812try { localStorage.setItem(key, value); } catch (err) { /* quota / privacy mode */ }
- warningHTTP request to a raw IP addressscripts/install.sh:70say "完成!刷新 http://127.0.0.1:3080 → 设置 → 通用设置 → 皮肤"
- infoHardcoded IP addressscripts/install.sh:70say "完成!刷新 http://127.0.0.1:3080 → 设置 → 通用设置 → 皮肤"
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-16 · activity: Active
• Repo created: 2026-08-16
• Stars: ★ 4 · Forks: 0
• Health: Active — committed within last 30 days
