dsh_plugins

DSH plugin: whale-purse 桌宠——DeepSeek 余额 + 多订阅用量/花费监视 + 精灵动画桌宠 + 后台任务进度卡。DeepSeek Harness (DSH) 插件 / desktop pet for usage tracking.

PluginDesktopAutomation

Verification

L1 · Found

Security

Medium

Health

Active

Trust

Unrated

What it does

DSH plugin: whale-purse 桌宠——DeepSeek 余额 + 多订阅用量/花费监视 + 精灵动画桌宠 + 后台任务进度卡。DeepSeek Harness (DSH) 插件 / desktop pet for usage tracking.

dsh plugin --profile web add github:linyufeng123456/dsh_plugins

Install method: GitHub · not yet tested in container (L3+)

DSH Version	Status
not stated	Declared — not tested

Automated static scan, not manual review.

DSH.SOWARNINGSCAN4 FILES

3e99c1

Security reviewAutomated review · daily

WARNING

No critical findings, but warning-level issues were detected (file writes, remote imports, base64 decoding, downloads).

0 critical·1 warning·4 info·4 files scanned

Version binding

plugin version—

scanned commit3e99c1bb2fd12026-08-18

latest commit3e99c1bb2fd1

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Medium0 critical · 1 warning · 4 info

• Static heuristic scan: done (4 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

infoReads process.envwhale-purse/lib/index.js:394
const env = process.env[envName]
infoMakes network requests (fetch / axios)whale-purse/lib/index.js:341
response = await fetch(url, {
infoMakes network requests (fetch / axios)whale-purse/lib/index.js:420
response = await fetch(adapter.usageUrl, {
warningHTTP request to a raw IP addresswhale-purse/scripts/screenshot.mjs:15
await page.goto('http://127.0.0.1:3080', { waitUntil: 'domcontentloaded' })
infoHardcoded IP addresswhale-purse/scripts/screenshot.mjs:15
await page.goto('http://127.0.0.1:3080', { waitUntil: 'domcontentloaded' })

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Last commit 2026-08-18 · activity: Active

• Repo created: 2026-08-18

• Stars: ★ 5 · Forks: 0

• Health: Active — committed within last 30 days