dsh-plugin-mini-dashboard

A session & token mini dashboard for DSH web. It renders just above the sidebar's "Settings" row and summarizes, in one small draggable float window, what your sessions are doing right now and what they have cost you today.

PluginUI & SkinsDesktopStorageWeb search

Verification

L1 · Found

Risk

Low

Health

Active

Trust

Unrated

What it doesAI

A draggable mini dashboard showing live session activity and token costs for DSH web.

Summarizes sessions and daily token costs
Small draggable float window above Settings
Shows what sessions are doing right now

AI-generated from the repo README — for reference only.

Installation

dsh plugin --profile web add github:focksor/dsh-plugin-mini-dashboard#v0.2.0

security scan passed · source release v0.2.0

Install method: GitHub · no verification record (L1-L5)

Compatibility

DSH Version	Status
not stated	no verification record

Requirements

• Node.js: not stated
• DSH: not stated
• External credentials: none detected

Author badges

Embed the official badges in your README to showcase security & install-test status:

Security Report

Automated static scan, not manual review.

DSH.SO VETMEDIUM35d34d

Security reviewAutomated review · daily

MEDIUM

Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).

0 critical·1 high·9 medium·22 score

Version binding

plugin version0.2.0dsh manifest

scanned commit35d34d51640d2026-08-28

latest commit35d34d51640d

vet verdictsuspicious · npmscore 22

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

Risk	Rule	Location	Description
high	R2	client.js:272	new Function / new AsyncFunction 动态执行
medium	R9	client.js:1115	循环内集合写入 map.set（无界增长信号）
medium	R9	index.js:1693	正则嵌套量词（ReDoS 风险：(a+)+ 类指数回溯）
medium	R9	index.js:1694	正则嵌套量词（ReDoS 风险：(a+)+ 类指数回溯）
medium	R9	index.js:1695	正则嵌套量词（ReDoS 风险：(a+)+ 类指数回溯）

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-28 · activity: Active

• Repo created: 2026-08-28

• Stars: ★ 0 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/focksor/dsh-plugin-mini-dashboard

Plugin notes

What is the dsh-plugin-mini-dashboard DeepSeek Harness plugin?

dsh-plugin-mini-dashboard is a DeepSeek Harness plugin maintained by @focksor. It is cataloged on dsh.so as a UI & Skins plugin for Web search tasks, with a public GitHub source, declared install command, and automated static security scan.

How do I install dsh-plugin-mini-dashboard?

Run dsh plugin --profile web add github:focksor/dsh-plugin-mini-dashboard#v0.2.0 in a DeepSeek Harness (dsh) environment. The command is parsed from the plugin manifest, but it has not yet been tested in an isolated sandbox at the L3+ level.

Is the security scan on this page a manual audit?

No. The scan is an automated heuristic review of the repository source and can produce false positives. It is not a manual security audit and never an endorsement; review the repository and installed permissions before using the plugin.

"DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture where everything is a plugin, and is powered by Cordis."
— DeepSeek Harness README

Sources: GitHub repository · DeepSeek Harness README · security scan data · Maintained by dsh.so · Last updated 2026-08-28