Install verification: sandbox install ok, web smoke failed (L5) · tested on dsh 0.2.1-rc.2 · last checked Install verification details →
What it doesAI
DSH plugin that auto-installs rembg and provides an LLM-accessible background-removal tool for images with CPU/GPU model selection.
- Auto-installs rembg and Python dependencies into plugin directory
- Supports CPU or local NVIDIA GPU modes
- Model list management, install models and set default
Capability tags are AI-inferred or rule-extracted from the README (see badge) — vocabulary-limited, not install-verified. AI = inferred; README = literal keyword from the readme.
Installation
dsh plugin --profile web add github:mengruoa/dsh-rembgInstall method: GitHub · sandbox install ok, web smoke failed (L5)
Verification & Compatibility
Grouped by plugin version: each card lists the dsh versions actually tested against that artifact version and their install verdicts (L5 wins). Untested combinations are omitted — absence means untested, never assumed compatible. L1–L3 are a plugin-level static archive (independent of the dsh version — the same verdict on every dsh row): they sit in each row's level grid next to L4/L5, marked "static", while their evidence is stored once per plugin inside that row's "checks & evidence" instead of being duplicated per version.
External credentials (plugin-level): none detected
Based on 1 requirement(s) across 2 @deepseek-ai/dsh-* packages. raw ranges
>=0.1.7-rc.1 ×2
✓ Running dsh 0.2.1-rc.2 is within the declared range — install is not blocked by version.
Whether it actually runs is a separate question → see the measured matrix below (L1–L5).
| plugin ＼ dsh | dsh 0.2.1-rc.2 current | dsh 0.2.1-alpha.4 | dsh 0.2.1-alpha.2 | dsh 0.2.0-rc.2 | dsh 0.2.0-rc.1 |
|---|---|---|---|---|---|
| 8e17b7 | ✗ | ✗ | ✗ | ✗ | ✗ |
8e17b7github✓ 5 runtime-verified6 failed2026-10-18
https://github.com/mengruoa/dsh-rembg
✗dsh 0.2.1-rc.2current2026-10-18L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.1-rc.2
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.2.1-rc.2 · profile: l4-sandbox
Issued: 2026-10-18 · expires: 2026-10-25
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.2.1-alpha.42026-10-16L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.4
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.2.1-alpha.4 · profile: l4-sandbox
Issued: 2026-10-16 · expires: 2026-10-23
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.2.1-alpha.22026-10-10L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.2
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.2.1-alpha.2 · profile: l4-sandbox
Issued: 2026-10-10 · expires: 2026-10-17
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.2.0-rc.22026-10-08L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.2
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.2.0-rc.2 · profile: l4-sandbox
Issued: 2026-10-08 · expires: 2026-10-15
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗dsh 0.2.0-rc.12026-09-29L5 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.1
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.2.0-rc.1 · profile: l4-sandbox
Issued: 2026-09-29 · expires: 2026-10-06
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.7-rc.22026-09-25L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.7-rc.2
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.1.7-rc.2 · profile: l4-sandbox
Issued: 2026-09-25 · expires: 2026-10-02
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.7-rc.12026-09-23not tested
- • Node.js: v24.14.0
- • DSH: 0.1.7-rc.1
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.1.7-rc.1 · profile: l4-sandbox
Issued: 2026-09-23 · expires: 2026-09-30
View checks & evidence
This level was not executed in this scan.
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.6-alpha.22026-09-20L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.2
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.1.6-alpha.2 · profile: l4-sandbox
Issued: 2026-09-20 · expires: 2026-09-27
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.6-alpha.12026-09-17L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.1
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.1.6-alpha.1 · profile: l4-sandbox
Issued: 2026-09-17 · expires: 2026-09-24
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.5-rc.22026-09-11L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.5-rc.2
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.1.5-rc.2 · profile: l4-sandbox
Issued: 2026-09-11 · expires: 2026-09-18
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.3-alpha.22026-09-08L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.3-alpha.2
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dsh0.1.3-alpha.2 · profile: l4-sandbox
Issued: 2026-09-08 · expires: 2026-09-15
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✗prehistory2026-10-05L5 · failed
- • Node.js: v24.14.0
- • DSH: unknown
- • Plugin artifact: github · https://github.com/mengruoa/dsh-rembg (version unstated)
ID: dsh-rembg@8e17b7@dshunknown · profile: l4-sandbox
Issued: 2026-10-05 · expires: 2026-10-12
View checks & evidence
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
Author badges
Embed the official badges in your README to showcase security & install-test status:
`[](https://www.dsh.so/artifact/dsh-rembg/)``[](https://www.dsh.so/artifact/dsh-rembg/)``[](https://www.dsh.so/artifact/dsh-rembg/)`Security Report
Two automated layers, neither a manual review: a static scan (per-plugin rule checks) and a model-driven dynamic security audit that covers only the subset static-flagged at warn or above and never executes plugin code.
Static low; dynamic medium (authoritative when present) → overall medium.
v0.2.0dsh manifest0.2.0git2026-10-240.2.0same versionclean · gitVet is an AST static scan (npm artifact or git source).
show static findings (5)
- warningchildProcess · code-exec
index.js:107const child = spawn(cmd, args, { stdio: ['ignore', 'pipe', 'pipe'], env, detached: true }); let stdout = ''; let stderr = ''; let settled = - warningcurlDownload · network
install-cpu.sh:33curl -fL -o "$PYTHON_TGZ_PATH" "$PYTHON311_URL" - warningcurlDownload · network
install-cpu.sh:35wget -O "$PYTHON_TGZ_PATH" "$PYTHON311_URL" - warningcurlDownload · network
install.sh:43curl -fL -o "$PYTHON_TGZ_PATH" "$PYTHON311_URL" - warningcurlDownload · network
install.sh:45wget -O "$PYTHON_TGZ_PATH" "$PYTHON311_URL"
show 3 audit findings
- mediumSettings route CSRF check (Origin==Host) is bypassable via DNS rebinding, exposing install/delete actions
index.js:280The route authenticates nothing beyond `sec-fetch-site` and an equality test between the Origin host and the Host header, both of which are attacker-controlled when a malicious page is served from a hostname that is rebound to 127.0.0.1 on the same port as the DSH web server. In that case sec-fetch-site is 'same-origin' and Origin/Host match, so a remote page can POST actions: 'initialize' (spawns bash install.sh/install-cpu.sh and pip installs), 'install-model', 'delete-model', 'clear-environment' (rm -rf of ~/.dsh/rembg) and 'mutate' settings. No credentials or user gesture are required once
- lowPOST body is buffered without a size limit
index.js:274Any request that passes the origin checks can stream an arbitrarily large body into memory before JSON.parse runs, allowing local or rebound-origin callers to exhaust the DSH process heap.
- lowpip dependencies installed from a mirror without hash pinning; autoInstall defaults to true
install.sh:68The standalone Python tarball is SHA256-pinned, but the wheels are installed with `--index-url` from the allowlisted mirror (aliyun / pypi.org) and no `--require-hashes`, and the nvidia-* packages are unversioned. A compromised or malicious mirror package would execute arbitrary code inside the venv the plugin later spawns. This path is reachable without an explicit user gesture because Config.autoInstall defaults to true, so the first `rembg` tool call triggers ensureInstalled (install-cpu.sh line 57 does the same for 'rembg[cpu]').
Careful plugin: no shell interpolation, SHA256-pinned Python/model downloads, guarded rm; the main residual risk is a DNS-rebinding bypass of the settings route's Origin/Host check.
Rule (2026-10-24): when a dynamic conclusion exists it is authoritative (it may raise or lower the level); without one, the static/vet fused tier applies. The audit never writes the exemption list (exemptions are manual only); a wrong conclusion is withdrawn by human review and the tier falls back to static/vet.
Disclaimer: the static scan and the dynamic security audit are both automated analysis, not a security guarantee. Always review what you install.
Activity
Last commit 2026-09-29 · activity: Active
• Repo created: 2026-08-21
• Stars: ★ 0 · Forks: 0
• Health: Active — committed within last 30 days
Source
GitHub: github.com/mengruoa/dsh-rembg
Author README
View on GitHub ↗The author's original README from the repository — fetched live, unedited (the English page loads the default README).