🗑️ The original repository has been deleted or made private. This page is an archival snapshot from indexing time; the install command may no longer work.

DSH-GUI

DeepSeek Harness 的简易桌面壳（Electron）：后端托管、系统托盘、插件管理器与一键安装包，让 DSH 开箱即用。

Ecosystem appDesktopFile

Verification

L5 · Ecosystem app

Risk

Out of scope

Health

Stable

Trust

Silver

Install verification: Ecosystem app: not installed via dsh plugin add, so the L1-L5 plugin install-verification ladder does not apply; the security scan still runs.Install verification details →

What it doesAI

Electron desktop shell for DeepSeek Harness with backend hosting, system tray, and plugin manager.

Native desktop window for DSH Web UI
Backend hosting and system tray
Plugin manager: npm, local dir, Git

desktopAIfileAI

Capability tags are AI-inferred or rule-extracted from the README (see badge) — vocabulary-limited, not install-verified. AI = inferred; README = literal keyword from the readme.

Installation

GitHub repository

Ecosystem apps are not installable via dsh plugin add: desktop / web shells install or deploy through their own release channel (GitHub Releases or the project site).

The level reads L5 · Ecosystem plugin / L5 · Ecosystem app per the three-way classification (the L1-L5 ladder does not rate them); the security scan still runs.

Verification & Compatibility

Grouped by plugin version: each card lists the dsh versions actually tested against that artifact version and their install verdicts (L5 wins). Untested combinations are omitted — absence means untested, never assumed compatible. L1–L3 are a plugin-level static archive (independent of the dsh version — the same verdict on every dsh row): they sit in each row's level grid next to L4/L5, marked "static", while their evidence is stored once per plugin inside that row's "checks & evidence" instead of being duplicated per version.

External credentials (plugin-level): none detected

Install compatibility matrix (rows = plugin versions〔latest 5〕, columns = dsh versions〔latest 5〕)

At-a-glance → evidence in the cards below

plugin ＼ dsh	dsh 0.1.1-rc.2
v0.1.0	·

Install compatibility (by plugin version, dsh versions within)

Legend:✓ L5 runtime verified○ ecosystem plugin◼ ecosystem app✗ failed

v0.1.0github2026-08-22

https://github.com/0Ra1n416/DSH-GUI

Ecosystem app: not installed via dsh plugin add (a desktop / web shell) — its level reads L5 · Ecosystem app.

Only the latest 3 published versions are shown; source-snapshot (commit hash) groups, unstated groups and older versions are omitted — the full archive stays in the data layer (snapshot/unstated groups appear only when a plugin has no published version).

Author badges

Embed the official badges in your README to showcase security & install-test status:

Security Report

Automated static scan, not manual review.

DSH.SO VETMEDIUM5bf522

Security reviewAutomated review · daily

MEDIUM

Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).

0 critical·2 high·15 medium

Version binding

plugin versionv0.1.0

scanned version0.1.0git2026-08-24

current version0.1.0same version

vet verdictsuspicious · git

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

Risk	Rule	Location	Description
high	R2	plugin-manager.js:15	require('child_process') 危险内置模块（执行/网络能力触达）
high	R2	index.js:4	require('child_process') 危险内置模块（执行/网络能力触达）
medium	R2	preload-settings.js:2	require() 动态模块加载（npm 包内能力触达）
medium	R2	preload-plugins.js:3	require() 动态模块加载（npm 包内能力触达）
medium	R2	settings.js:3	require('path') 标准内置模块

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-15 · activity: Stable

• Repo created: 2026-08-18

• Stars: ★ 2 · Forks: 0

• Health: Stable — committed within 90 days

Source

GitHub: github.com/0Ra1n416/DSH-GUI

Plugin notes

What is DSH-GUI?

DSH-GUI is an ecosystem app maintained by @0Ra1n416, not a DSH plugin package — it cannot be installed via dsh plugin add; desktop / web shells ship through the project's own release channel. It is cataloged on dsh.so as a Desktop entry, with a public source repository and automated static security scan.

How do I install DSH-GUI?

This is an ecosystem app, not a plugin installable via dsh plugin add: desktop / web shells install or deploy through their own release channel. Its level reads L5 · Ecosystem app; the security scan still runs.

How does the security scan relate to a manual audit?

The scan is automated static analysis of the repository source — a scalable first line of defense that can produce false positives and miss context; it is not a manual security audit. Before using a plugin, review the repository and installed permissions, and combine the scan with the verification level (L4/L5) and health signals.

"DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture where everything is a plugin, and is powered by Cordis."
— DeepSeek Harness README

Sources: GitHub repository · DeepSeek Harness README · security scan data · Maintained by dsh.so · Last updated 2026-08-18