dsh-rider

PluginAI ModelsWeb searchVision / OCRFile

Verification

L1 · Found

Security

Medium

Health

Active

Trust

Unrated

What it doesAI

Bundle plugin providing free DuckDuckGo web search with Bing fallback, vision understanding, and file attachment for DSH assistant.

Free web search via DuckDuckGo, auto-fallback to Bing
Vision understanding: offloads images to vision-capable model
Paste image capture and drag-drop file upload to workspace

AI-generated from the repo README — for reference only.

Installation

dsh plugin --profile web add github:LingyeSoul/dsh-rider

Install method: GitHub · not yet tested in container (L3+)

Compatibility

DSH Version	Status
not stated	Declared — not tested

Requirements

• Node.js: not stated
• DSH: declared "not stated"
• External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SO VETMEDIUM28b4a0

Security reviewAutomated review · daily

MEDIUM

Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).

0 critical·1 high·0 medium·80 score

Version binding

plugin version0.5.0dsh manifest

scanned commit28b4a0009ee62026-08-21

latest commit28b4a0009ee6

vet verdictsuspicious · gitscore 80

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

Risk	Rule	Location	Description
high	R2	run.mjs:1018	vm.runInContext() 沙箱内执行代码

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-16 · activity: Active

• Repo created: 2026-08-21

• Stars: ★ 0 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/LingyeSoul/dsh-rider

Plugin notes

What is the dsh-rider DeepSeek Harness plugin?

dsh-rider is a DeepSeek Harness plugin maintained by @LingyeSoul. It is cataloged on dsh.so as a AI Models plugin for Web search tasks, with a public GitHub source, declared install command, and automated static security scan.

How do I install dsh-rider?

Run dsh plugin --profile web add github:LingyeSoul/dsh-rider in a DeepSeek Harness (dsh) environment. The command is parsed from the plugin manifest, but it has not yet been tested in an isolated container at the L3+ level.

Is the security scan on this page a manual audit?

No. The scan is an automated heuristic review of the repository source and can produce false positives. It is not a manual security audit and never an endorsement; review the repository and installed permissions before using the plugin.

"DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture where everything is a plugin, and is powered by Cordis."
— DeepSeek Harness README

Sources: GitHub repository · DeepSeek Harness README · security scan data · Maintained by dsh.so · Last updated 2026-08-21