Install verification: sandbox install ok, web smoke failed (L5) · tested on dsh 0.2.1-rc.2 · last checked Install verification details →
What it doesAI
Futu MCP plugin using OAuth 2.1 deferred auth; tokens stored safely outside workspace.
- OAuth 2.1 deferred authorization flow
- Tokens stored in ~/.dsh with 0600 permissions
- Connect to Futu (富途) MCP
Capability tags are AI-inferred or rule-extracted from the README (see badge) — vocabulary-limited, not install-verified. AI = inferred; README = literal keyword from the readme.
Installation
dsh plugin --profile web add github:yangzhe1991/dsh-futu-mcpInstall method: GitHub · sandbox install ok, web smoke failed (L5)
Verification & Compatibility
Grouped by plugin version: each card lists the dsh versions actually tested against that artifact version and their install verdicts (L5 wins). Untested combinations are omitted — absence means untested, never assumed compatible. L1–L3 are a plugin-level static archive (independent of the dsh version — the same verdict on every dsh row): they sit in each row's level grid next to L4/L5, marked "static", while their evidence is stored once per plugin inside that row's "checks & evidence" instead of being duplicated per version.
External credentials (plugin-level): none detected
Based on 1 requirement(s) across 2 @deepseek-ai/dsh-* packages. raw ranges
^0.1.1-rc.2 ×2
✗ Running dsh 0.2.1-rc.2 is outside the declared range — the official install gate rejects it (incompatible-version).
To force-install, grant an exact-version exemption: dsh plugin allow-version dsh-futu-mcp@0.1.1 0.2.1-rc.2 (the exemption lives in the local profile; this site does not assume one)
Whether it actually runs is a separate question → see the measured matrix below (L1–L5).
| plugin ＼ dsh | dsh 0.2.1-rc.2 current | dsh 0.2.1-alpha.4 | dsh 0.2.1-alpha.2 | dsh 0.2.0-rc.2 | dsh 0.2.0-rc.1 |
|---|---|---|---|---|---|
| df1eba | ✗ | ✗ | ✗ | ✗ | ✗ |
df1ebagithub15 failed2026-10-19
https://github.com/yangzhe1991/dsh-futu-mcp
✗dsh 0.2.1-rc.2current2026-10-19L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.1-rc.2
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.2.1-rc.2 · profile: l4-sandbox
Issued: 2026-10-19 · expires: 2026-10-26
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.2.1-alpha.42026-10-16L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.4
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.2.1-alpha.4 · profile: l4-sandbox
Issued: 2026-10-16 · expires: 2026-10-23
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.2.1-alpha.22026-10-11L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.2
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.2.1-alpha.2 · profile: l4-sandbox
Issued: 2026-10-11 · expires: 2026-10-18
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.2.0-rc.22026-10-09L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.2
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.2.0-rc.2 · profile: l4-sandbox
Issued: 2026-10-09 · expires: 2026-10-16
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.2.0-rc.12026-09-29L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.1
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.2.0-rc.1 · profile: l4-sandbox
Issued: 2026-09-29 · expires: 2026-10-06
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.1.7-rc.22026-09-25L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.1.7-rc.2
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.1.7-rc.2 · profile: l4-sandbox
Issued: 2026-09-25 · expires: 2026-10-02
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.7-rc.12026-09-23not tested
- • Node.js: v24.14.0
- • DSH: 0.1.7-rc.1
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.1.7-rc.1 · profile: l4-sandbox
Issued: 2026-09-23 · expires: 2026-09-30
View checks & evidence
This level was not executed in this scan.
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.1.7-alpha.22026-09-23L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.1.7-alpha.2
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.1.7-alpha.2 · profile: l4-sandbox
Issued: 2026-09-23 · expires: 2026-09-30
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.1.6-alpha.22026-09-20L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.2
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.1.6-alpha.2 · profile: l3-fullscan
Issued: 2026-09-20 · expires: 2026-09-27
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.1.6-alpha.12026-09-17L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.1
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.1.6-alpha.1 · profile: l4-sandbox
Issued: 2026-09-17 · expires: 2026-09-24
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.1.5-rc.22026-09-12L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.1.5-rc.2
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.1.5-rc.2 · profile: l4-sandbox
Issued: 2026-09-12 · expires: 2026-09-19
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.1.3-alpha.22026-09-09L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.1.3-alpha.2
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.1.3-alpha.2 · profile: l4-sandbox
Issued: 2026-09-09 · expires: 2026-09-16
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.1.3-alpha.12026-09-07L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.1.3-alpha.1
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.1.3-alpha.1 · profile: l3-fullscan
Issued: 2026-09-07 · expires: 2026-09-14
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.1.2-rc.12026-09-05L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.1.2-rc.1
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp#df1eba
ID: dsh-futu-mcp@df1eba@dsh0.1.2-rc.1 · profile: l3-fullscan
Issued: 2026-09-05 · expires: 2026-09-12
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.1.2-alpha.12026-09-06L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.1.2-alpha.1
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dsh0.1.2-alpha.1 · profile: l3-fullscan
Issued: 2026-09-06 · expires: 2026-09-13
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗prehistory2026-10-05L5 · failed
- • Node.js: v24.14.0
- • DSH: unknown
- • Plugin artifact: github · https://github.com/yangzhe1991/dsh-futu-mcp (version unstated)
ID: dsh-futu-mcp@df1eba@dshunknown · profile: l4-sandbox
Issued: 2026-10-05 · expires: 2026-10-12
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
Author badges
Embed the official badges in your README to showcase security & install-test status:
`[](https://www.dsh.so/artifact/dsh-futu-mcp/)`Security Report
Two automated layers, neither a manual review: a static scan (per-plugin rule checks) and a model-driven dynamic security audit that covers only the subset static-flagged at warn or above and never executes plugin code.
Static low, dynamic low — stricter wins → overall low.
v0.1.1dsh manifest0.1.1git2026-10-210.1.1same versionclean · npmVet is an AST static scan (npm artifact or git source).
show static findings (5)
- warningnetIp · network
src/callback-server.ts:74url: `http://127.0.0.1:${actualPort}/callback`, - warningnetIp · network
src/callback-server.ts:88const parsed = new URL(url, 'http://127.0.0.1:1') - warningchildProcess · code-exec
src/oauth-provider.ts:70child = spawn('open', [url], { detached: true, stdio: 'ignore' }) - warningchildProcess · code-exec
src/oauth-provider.ts:72child = spawn('cmd', ['/c', 'start', '', url], { detached: true, stdio: 'ignore' }) - warningchildProcess · code-exec
src/oauth-provider.ts:74child = spawn('xdg-open', [url], { detached: true, stdio: 'ignore' })
show 3 audit findings
- lowOAuth callback page reflects unescaped error_description into HTML
src/oauth-provider.ts:91handleAuthCallback passes the URL query parameter errorDescription/error straight into renderAuthPage, which interpolates it into an HTML response served on http://127.0.0.1:<port>. When no authorization flow is active the stored state is undefined, so a request such as /callback?error=x&error_description=<img src=x onerror=...> passes the state comparison and renders attacker-controlled markup in the loopback origin; only UI spoofing on an ephemeral page with no secrets is achievable.
- lowOAuth state check passes when both callback state and stored state are undefined
src/oauth-provider.ts:513stateValue is only set inside state(); when existing tokens connect successfully no auth flow runs, yet the loopback callback server stays listening and a generation keeps a finishAuth finisher registered. A callback without a state parameter then passes the CSRF check. Actual code injection is blocked only because codeVerifierValue is equally unset and finishAuth throws, i.e. it relies on PKCE rather than on state validation.
- lowWindows browser launch passes the authorization URL through cmd /c start unquoted
src/oauth-provider.ts:72cmd.exe parses the command line, so '&' inside the authorization URL (which normally contains many query parameters) splits the command; if the authorization_endpoint advertised by discovery ever contained shell metacharacters plus a payload (requires controlling the MCP endpoint/MITM of an HTTPS peer that already sees the tokens), the trailing fragment could be executed as a command on Windows. macOS/Linux paths pass the URL as a plain argv element and are safe.
OAuth-only Futu MCP bridge with sound token storage and scope capping; only low-severity callback-page HTML reflection, a state-check gap neutralised by PKCE, and a Windows cmd URL quirk.
Rule: the dynamic audit can only raise risk, never lower it (raise-only, never an exemption); a wrong raise is withdrawn by human review and the tier falls back to the static verdict. Overall verdict = the stricter of the two layers.
Disclaimer: the static scan and the dynamic security audit are both automated analysis, not a security guarantee. Always review what you install.
Activity
Last commit 2026-08-31 · activity: Stable
• Repo created: 2026-08-31
• Stars: ★ 0 · Forks: 0
• Health: Stable — committed within 90 days
Source
Author README
View on GitHub ↗The author's original README from the repository — fetched live, unedited (the English page loads the default README).