⚠️ This repository has been renamed: MCJF28/dsh-prompt-crafter — click to visit the new location. Everything below is preserved as originally indexed.
Install verification: Ecosystem plugin: installs via dsh plugin add but declares no dsh.bundle and mounts no plugin capability — the L1-L5 install ladder does not rate it; the security scan still runs.Install verification details →
What it does
One-click prompt rewriter in the DeepSeek Harness composer: three rewrite levels, follows the model you are already chatting with.
Installation
dsh plugin --profile web add github:MCJF28/dsh-prompt-optimizerInstall method: GitHub · runtime test inconclusive (L5 unknown)
Verification & Compatibility○ Ecosystem plugin
Grouped by plugin version: each card lists the dsh versions actually tested against that artifact version and their install verdicts (L5 wins). Untested combinations are omitted — absence means untested, never assumed compatible. L1–L3 are a plugin-level static archive (independent of the dsh version — the same verdict on every dsh row): they sit in each row's level grid next to L4/L5, marked "static", while their evidence is stored once per plugin inside that row's "checks & evidence" instead of being duplicated per version.
External credentials (plugin-level): none detected
○ The author declares no dsh version requirement — install is not blocked by version.
| plugin ＼ dsh | dsh 0.2.1-rc.2 current | dsh 0.2.1-alpha.4 |
|---|---|---|
| 6702d7 | ○ | ○ |
6702d7github○ 2 ecosystem plugin2026-10-18
https://github.com/MCJF28/dsh-prompt-optimizer
○dsh 0.2.1-rc.2current2026-10-18Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.1-rc.2
- • Plugin artifact: github · https://github.com/MCJF28/dsh-prompt-optimizer (version unstated)
ID: dsh-prompt-optimizer-21@6702d7@dsh0.2.1-rc.2 · profile: l4-sandbox
Issued: 2026-10-18 · expires: 2026-10-25
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.2.1-alpha.42026-10-18Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.4
- • Plugin artifact: github · https://github.com/MCJF28/dsh-prompt-optimizer (version unstated)
ID: dsh-prompt-optimizer-21@6702d7@dsh0.2.1-alpha.4 · profile: l4-sandbox
Issued: 2026-10-18 · expires: 2026-10-25
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
Author badges
Embed the official badges in your README to showcase security & install-test status:
`[](https://www.dsh.so/artifact/dsh-prompt-optimizer-21/)`Security Report
Two automated layers, neither a manual review: a static scan (per-plugin rule checks) and a model-driven dynamic security audit that covers only the subset static-flagged at warn or above and never executes plugin code.
Static medium, dynamic medium — stricter wins → overall medium.
v1.2.2dsh manifest1.2.2git2026-10-181.2.2same versionsuspicious · npmVet is an AST static scan (npm artifact or git source).
show static findings (1)
- criticalsecretSk · secrets
index.js:174|| 'sk-KF7KZR2M9xwq1rve7j7N0KYGgbmDfrwwuxrf2CI9Bvd7olPP',
show 3 audit findings
- mediumHard-coded shared API key for the free-channel endpoint is shipped in source
index.js:173Every installation contains the same bearer credential for https://api.hcnsec.cn/v1, sent in the Authorization header at index.js:328. The source comment itself states the credential is effectively public to all installers, so any user can extract and spend the owner's quota or have the key revoked, breaking the feature for everyone; env override only helps users who already know about it.
- mediumUser prompt drafts are sent to a third-party host that the UI never names
index.js:172In 'free' mode, enhanceOnce (index.js:609-611) posts the user's full draft plus the system prompt to callFreeChannel, which fetches this host at index.js:324. The settings payload exposes baseURL (index.js:507) but client.js renders only the model name, and the onboarding toast describes it merely as a 'built-in free model', so users are not told their text leaves the machine to an unrelated domain. Additionally the settings page automatically fires the probe (callFreeChannel at index.js:528) on every mount regardless of mode.
- lowHTTP handlers read an unbounded request body before JSON parsing
index.js:309readBody buffers the entire request into memory with no size cap and is used for both /settings (index.js:477) and /optimize (index.js:567), so a large POST can exhaust memory before the MAX_INPUT_CHARS check on the parsed text ever runs. Impact is limited to denial of service against the local plugin server.
Plugin does local HTTP prompt rewriting with no shell or path traversal, but ships a hard-coded shared API key and sends user drafts to a third-party host not shown in the UI.
Rule: the dynamic audit can only raise risk, never lower it (raise-only, never an exemption); a wrong raise is withdrawn by human review and the tier falls back to the static verdict. Overall verdict = the stricter of the two layers.
Disclaimer: the static scan and the dynamic security audit are both automated analysis, not a security guarantee. Always review what you install.
Activity
Last commit 2026-10-18 · activity: Active
• Repo created: 2026-10-17
• Stars: ★ 0 · Forks: 0
• Health: Active — committed within last 30 days
Source
Author README
View on GitHub ↗The author's original README from the repository — fetched live, unedited (the English page loads the default README).