dsh.so
EN
English中文
dsh-tavern avatar

dsh-tavern

基于 DeepSeek Harness（DSH）的 SillyTavern 类文字游戏 Agent，支持候选项生成、对话式人物卡编辑、剧本模式与素材抽取。

PluginGame
Verification
L1 · Found
Security
High
Health
Active
Trust
Unrated

What it does

基于 DeepSeek Harness（DSH）的 SillyTavern 类文字游戏 Agent，支持候选项生成、对话式人物卡编辑、剧本模式与素材抽取。

Installation

dsh plugin --profile web add github:flizzywine/dsh-tavern

Install method: GitHub · not yet tested in container (L3+)

Compatibility

DSH VersionStatus
not statedDeclared — not tested

Requirements

  • • Node.js: not stated
  • • DSH: declared "not stated"
  • • External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SOHIGH-RISKSCAN6 FILES
6c6c80
Security reviewAutomated review · daily
HIGH-RISK

Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.

1 critical·6 warning·13 info·6 files scanned
code-exec ×1
Version binding
plugin version0.2.0dsh manifest
scanned commit6c6c804e730a2026-08-18
latest commit6c6c804e730a

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: High1 critical · 6 warning · 13 info

• Static heuristic scan: done (6 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

Scan findings · 12

  • criticalChild process module usage (Node.js)bin/dsh-tavern.mjs:3
    import { spawn, spawnSync } from 'node:child_process'
  • warningHTTP request to a raw IP addressbin/dsh-tavern.mjs:333
    console.log(`DSH Tavern 正在运行：PID ${state.record.pid}，http://127.0.0.1:${state.port}`)
  • warningHTTP request to a raw IP addressbin/dsh-tavern.mjs:425
    console.log(`DSH Tavern 已启动：PID ${child.pid}，http://127.0.0.1:${state.port}`)
  • infoReads process.envbin/dsh-tavern.mjs:28
    const DSH_ROOT = process.env.DSH_HOME || path.join(os.homedir(), '.dsh')
  • infoReads process.envbin/dsh-tavern.mjs:164
    return (process.env.PATH || '').split(path.delimiter).map((entry) => path.resolve(entry).toLowerCase())
  • infoReads process.envbin/dsh-tavern.mjs:179
    let binDir = process.env.DSH_TAVERN_BIN_DIR || process.env.PNPM_HOME
  • infoHardcoded IP addressbin/dsh-tavern.mjs:290
    export function isPortOpen(port, host = '127.0.0.1', timeout = 300) {
  • infoHardcoded IP addressbin/dsh-tavern.mjs:333
    console.log(`DSH Tavern 正在运行：PID ${state.record.pid}，http://127.0.0.1:${state.port}`)
  • infoHardcoded IP addressbin/dsh-tavern.mjs:425
    console.log(`DSH Tavern 已启动：PID ${child.pid}，http://127.0.0.1:${state.port}`)
  • warningHTTP request to a raw IP addressinstall.sh:84
    echo "DSH Tavern 安装完成：http://127.0.0.1:3081"
  • warningHTTP request to a raw IP addressinstall.sh:88
    open http://127.0.0.1:3081 >/dev/null 2>&1 || true
  • warningHTTP request to a raw IP addressinstall.sh:90
    xdg-open http://127.0.0.1:3081 >/dev/null 2>&1 || true

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-17 · activity: Active

• Repo created: 2026-08-18

• Stars: ★ 4 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/flizzywine/dsh-tavern

Was this page helpful?