dsh.so
EN
English中文
dsh-trae-api avatar

dsh-trae-api

PluginNetwork
Verification
L1 · Found
Risk
Medium
Health
Active
Trust
Unrated

What it does

Installation

dsh plugin --profile web add github:Casually/dsh-trae-api

Install method: GitHub · no verification record (L1-L5)

Compatibility

DSH VersionStatus
not statedno verification record

Requirements

  • • Node.js: not stated
  • • DSH: not stated
  • • External credentials: none detected

Author badges

Embed the official badges in your README to showcase security & install-test status:

dsh.so risk
`[![dsh.so risk](https://www.dsh.so/badge/dsh-trae-api.svg)](https://www.dsh.so/artifact/dsh-trae-api/)`
dsh.so install
`[![dsh.so install](https://www.dsh.so/badge/install/dsh-trae-api.svg)](https://www.dsh.so/artifact/dsh-trae-api/)`

Security Report

Automated static scan, not manual review.

DSH.SO VETMEDIUMcea09b
Security reviewAutomated review · daily
MEDIUM

Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).

0 critical·1 high·35 medium·0 score
Version binding
plugin version1.1.0dsh manifest
scanned commitcea09b91fe652026-08-26
latest commitcea09b91fe65
vet verdictsuspicious · gitscore 0

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

RiskRuleLocationDescription
high
R7
client.js:189
硬编码密钥：环境变量密钥赋值
medium
R2
server.js:7
require() 动态模块加载（npm 包内能力触达）
medium
R2
check-upstream.js:9
require() 动态模块加载（npm 包内能力触达）
medium
R2
check-upstream.js:10
require() 动态模块加载（npm 包内能力触达）
medium
R2
check-upstream.js:11
require() 动态模块加载（npm 包内能力触达）
Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-26 · activity: Active

• Repo created: 2026-08-26

• Stars: ★ 0 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/Casually/dsh-trae-api

Was this page helpful?