What it doesAI
Generate a playable visual novel (Galgame) webpage from a script and character/background/music assets.
- Input: script document plus character, CG, background, and music assets
- Output: a playable visual novel webpage
- New GalGame generation mode in the DSH workspace
AI-generated from the repo README — for reference only.
Installation
dsh plugin --profile web add github:baisama-cloud/dsh-galgame-generatorInstall method: GitHub · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.
code-exec ×1shell ×10.3.0dsh manifestb5568ca55e722026-08-20b5568ca55e72The scan result is valid for the scanned commit. New commits within 7 days are tolerated (the rating still counts); after 7 days without a rescan the badge shows outdated.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
vet verdict: vet: clean · score 100
- R12 · info [heuristic] (downgraded) — engines.node=>=18.18 低于 DSH 运行要求(>=22.19),可能不兼容
- R3 · info [certain] (downgraded) — 只读 process 成员(能力触达面):process.exitCode
- R3 · info [certain] — 只读 process 成员(能力触达面):process.execPath
- R3 · info [certain] (downgraded) — 只读 process 成员(能力触达面):process.exitCode
- R6 · info [heuristic] — 字符串特征:child_process 引用
vet is advisory and does not change dsh’s four-tier level.
• Static heuristic scan: done (6 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
High-risk findings · 2 / 2
- criticalChild process module usage (Node.js)scripts/check.mjs:4import { execFileSync } from 'node:child_process'
- criticalShell command execution (exec / execSync)scripts/check.mjs:21execFileSync(process.execPath, ['--check', p], { stdio: 'pipe' })
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-18 · activity: Active
• Repo created: 2026-08-20
• Stars: ★ 2 · Forks: 0
• Health: Active — committed within last 30 days
