What it doesAI
Rollback Whale is a DeepSeek Harness plugin for rollback and recovery, adding a sidebar menu and checkpoint manager to restore healthy states.
- Adds a compact power style menu to the sidebar
- Complete checkpoint manager in Settings
- Recovery payload stored outside DSH checkout
AI-generated from the repo README — for reference only.
Installation
dsh plugin --profile web add github:ccbili30-collab/dsh-plugin-rollback-whaleInstall method: GitHub · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.
code-exec ×50.1.0dsh manifest20a37cd278c42026-08-2020a37cd278c4The scan result is valid for the scanned commit. New commits within 7 days are tolerated (the rating still counts); after 7 days without a rescan the badge shows outdated.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
vet verdict: vet: clean · score 100
- R10 · info [heuristic] — 依赖清单：1 项（esbuild，供 LLM 审计供应链；已知漏洞核对见后续 OSV 精确版本查询（网络失败静默降级））
- R12 · info [heuristic] (downgraded) — engines.node=>=20 低于 DSH 运行要求（>=22.19），可能不兼容
- R3 · info [certain] — 只读 process 成员（能力触达面）：process.argv
- R3 · info [certain] — 只读 process 成员（能力触达面）：process.stderr
- R3 · info [certain] (downgraded) — 只读 process 成员（能力触达面）：process.exitCode
vet is advisory and does not change dsh’s four-tier level.
• Static heuristic scan: done (15 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
High-risk findings · 9 / 9
- criticalChild process module usage (Node.js)lib/cli.js:92import { execFileSync, spawn } from "node:child_process";
- criticalChild process module usage (Node.js)lib/index.js:2import { spawn } from "node:child_process";
- criticalChild process module usage (Node.js)src/index.ts:2import { spawn, type ChildProcess } from 'node:child_process'
- criticalChild process module usage (Node.js)src/index.ts:115let guardian: ChildProcess
- criticalChild process module usage (Node.js)src/recovery.ts:9import { execFileSync, spawn } from 'node:child_process'
- warningShell command execution (exec / execSync)lib/cli.js:264return execFileSync("git", ["-C", source, ...args], { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
- warningShell command execution (exec / execSync)lib/cli.js:282output = execFileSync("git", ["-C", source, "ls-files", "-z", "--cached", "--others", "--exclude-standard"], {
- warningShell command execution (exec / execSync)src/recovery.ts:290return execFileSync('git', ['-C', source, ...args], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }).trim()
- warningShell command execution (exec / execSync)src/recovery.ts:311output = execFileSync('git', ['-C', source, 'ls-files', '-z', '--cached', '--others', '--exclude-standard'], {
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-19 · activity: Active
• Repo created: 2026-08-20
• Stars: ★ 1 · Forks: 0
• Health: Active — committed within last 30 days
Source
GitHub: github.com/ccbili30-collab/dsh-plugin-rollback-whale