Verification
L2 · Structured
Security
Medium
Health
Active
Trust
Silver
What it does
Run live iOS simulators and your real iPhone over USB inside DeepSeek Harness conversations with 22 agent tools, MJPEG previews, and SwiftUI hot reload.
Installation
dsh plugin --profile web add github:Kickstartparty3459/dsh-iosInstall method: GitHub · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
DSH.SO VETMEDIUMdff582
Security reviewAutomated review · daily
MEDIUM
Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).
0 critical·8 high·7 medium·0 score
plugin version
0.1.0-rc.3dsh manifestscanned commit
dff582267ba82026-08-22latest commit
dff582267ba8vet verdict
suspicious · npmscore 0Vet is an AST static scan (npm artifact or git source).
`[](https://www.dsh.so/artifact/dsh-ios-2/)`Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
Risk details
| Risk | Rule | Location | Description |
|---|---|---|---|
| high | R3 | devicectl.js:627 | 直接访问 process.executable |
| high | R3 | devicectl.js:630 | 直接访问 process.bundleId |
| high | R3 | devicectl.js:631 | 直接访问 process.name |
| high | R2 | dev-card-smoke.mjs:93 | new Function / new AsyncFunction 动态执行 |
| high | R2 | dev-panel-smoke.mjs:228 | new Function / new AsyncFunction 动态执行 |
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-22 · activity: Active
• Repo created: 2026-08-22
• Stars: ★ 0 · Forks: 0
• Health: Active — committed within last 30 days
