Dsh-FileExplorer

给 DeepSeek Harness (DSH) Web 界面加一个 VS Code 风格的工作区文件浏览器：右侧文件树 + 可编辑标签页 + Markdown 阅读/编辑/分屏 + 悬浮大纲 + Quick Open 搜索。

PluginDeveloperBrowserKnowledgeUI & SkinsFileWeb search

Verification

L2 · Structured

Security

Medium

Health

Active

Trust

Silver

What it does

给 DeepSeek Harness (DSH) Web 界面加一个 VS Code 风格的工作区文件浏览器：右侧文件树 + 可编辑标签页 + Markdown 阅读/编辑/分屏 + 悬浮大纲 + Quick Open 搜索。

dsh plugin --profile web add dsh-fileexplorer

Install method: npm · not yet tested in container (L3+)

DSH Version	Status
not stated	Declared — not tested

Automated static scan, not manual review.

DSH.SOWARNINGSCAN5 FILES

cfade1

Security reviewAutomated review · daily

WARNING

No critical findings, but warning-level issues were detected (file writes, remote imports, base64 decoding, downloads).

0 critical·3 warning·6 info·5 files scanned

Version binding

scanned commitcfade1e83cd82026-08-16

latest commitcfade1e83cd8

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Medium0 critical · 3 warning · 6 info

• Static heuristic scan: done (5 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

infoUses localStoragelib/client.js:1023
var raw = localStorage.getItem("dsh-plugin-file-explorer.autosave");
infoUses localStoragelib/client.js:1033
var f = localStorage.getItem("dsh-plugin-file-explorer.font");
infoUses localStoragelib/client.js:1168
localStorage.setItem("dsh-plugin-file-explorer.autosave", JSON.stringify({ mode: next.mode, delay: next.delay }));
infoMakes network requests (fetch / axios)lib/client.js:528
var res = await fetch(url);
infoMakes network requests (fetch / axios)lib/client.js:537
var res = await fetch(url, {
infoMakes network requests (fetch / axios)lib/client.js:1488
return fetch(url, { method: "POST", body: blob }).then(function (res) {
warningFilesystem write operationslib/index.js:357
await fs.writeFile(tmp, buf, { flag: "wx" });
warningFilesystem write operationslib/index.js:484
await fs.writeFile(tmp, content, "utf8");
warningFilesystem write operationslib/index.js:526
await fs.writeFile(real, "", { flag: "wx" });

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Last commit 2026-08-16 · activity: Active

• Repo created: 2026-08-16

• Stars: ★ 4 · Forks: 0

• Health: Active — committed within last 30 days