Install verification: sandbox install failed (L4) · tested on dsh 0.2.1-rc.3 · last checked Install verification details →
What it doesAI
Adds a microphone button to the composer and a settings page that transcribes speech via the browser or any OpenAI-compatible audio endpoint, plus an offline Whisper server.
- Microphone seat inside the composer for one-click dictation
- Browser or OpenAI-compatible /audio/transcriptions endpoint support
- Fully offline local Whisper server included
Capability tags are AI-inferred or rule-extracted from the README (see badge) — vocabulary-limited, not install-verified. AI = inferred; README = literal keyword from the readme.
Installation
dsh plugin --profile web add github:QDchuan/dsh-voice-inputInstall method: GitHub · sandbox install failed (L4)
Verification & Compatibility
Grouped by plugin version: each card lists the dsh versions actually tested against that artifact version and their install verdicts (L5 wins). Untested combinations are omitted — absence means untested, never assumed compatible. L1–L3 are a plugin-level static archive (independent of the dsh version — the same verdict on every dsh row): they sit in each row's level grid next to L4/L5, marked "static", while their evidence is stored once per plugin inside that row's "checks & evidence" instead of being duplicated per version.
External credentials (plugin-level): none detected
Based on 1 requirement(s) across 3 @deepseek-ai/dsh-* packages. raw ranges
>=0.1.0-rc.1 <0.2.0 ×3
✗ Running dsh 0.2.1-rc.3 is outside the declared range — the official install gate rejects it (incompatible-version).
To force-install, grant an exact-version exemption: dsh plugin allow-version dsh-voice-input-14@0.1.0 0.2.1-rc.3 (the exemption lives in the local profile; this site does not assume one)
Whether it actually runs is a separate question → see the measured matrix below (L1–L5).
| plugin ＼ dsh | dsh 0.2.1-rc.3 current | dsh 0.2.1-rc.2 | dsh 0.2.1-alpha.4 | dsh 0.2.1-alpha.2 | dsh 0.2.0-rc.2 |
|---|---|---|---|---|---|
| 3f80ac | ✗ | ✓ | ✓ | ✓ | ✓ |
3f80acgithub✓ 11 runtime-verified1 failed2026-10-26
https://github.com/QDchuan/dsh-voice-input
✗dsh 0.2.1-rc.3current2026-10-26L4 · failed
- • Node.js: v24.14.0
- • DSH: 0.2.1-rc.3
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.2.1-rc.3 · profile: l4-sandbox
Issued: 2026-10-26 · expires: 2026-11-02
View checks & evidence
This level was not executed in this scan.
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.2.1-rc.22026-10-19L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.2.1-rc.2
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.2.1-rc.2 · profile: l4-sandbox
Issued: 2026-10-19 · expires: 2026-10-26
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.2.1-alpha.42026-10-16L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.4
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.2.1-alpha.4 · profile: l4-sandbox
Issued: 2026-10-16 · expires: 2026-10-23
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.2.1-alpha.22026-10-11L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.2
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.2.1-alpha.2 · profile: l4-sandbox
Issued: 2026-10-11 · expires: 2026-10-18
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.2.0-rc.22026-10-09L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.2
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.2.0-rc.2 · profile: l4-sandbox
Issued: 2026-10-09 · expires: 2026-10-16
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.2.0-rc.12026-09-30L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.1
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.2.0-rc.1 · profile: l4-sandbox
Issued: 2026-09-30 · expires: 2026-10-07
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.7-rc.22026-09-25L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.7-rc.2
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.1.7-rc.2 · profile: l4-sandbox
Issued: 2026-09-25 · expires: 2026-10-02
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.7-rc.12026-09-23not tested
- • Node.js: v24.14.0
- • DSH: 0.1.7-rc.1
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.1.7-rc.1 · profile: l4-sandbox
Issued: 2026-09-23 · expires: 2026-09-30
View checks & evidence
This level was not executed in this scan.
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.7-alpha.22026-09-23L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.7-alpha.2
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.1.7-alpha.2 · profile: l4-sandbox
Issued: 2026-09-23 · expires: 2026-09-30
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.6-alpha.22026-09-20L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.2
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.1.6-alpha.2 · profile: l3-fullscan
Issued: 2026-09-20 · expires: 2026-09-27
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.6-alpha.12026-09-17L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.1
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.1.6-alpha.1 · profile: l4-sandbox
Issued: 2026-09-17 · expires: 2026-09-24
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓dsh 0.1.5-rc.22026-09-13L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: 0.1.5-rc.2
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dsh0.1.5-rc.2 · profile: l4-sandbox
Issued: 2026-09-13 · expires: 2026-09-20
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
✓prehistory2026-10-05L5 · runtime verified
- • Node.js: v24.14.0
- • DSH: unknown
- • Plugin artifact: github · https://github.com/QDchuan/dsh-voice-input (version unstated)
ID: dsh-voice-input-14@3f80ac@dshunknown · profile: l4-sandbox
Issued: 2026-10-05 · expires: 2026-10-12
View checks & evidence
active in loader tree (150 entries)
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
Author badges
Embed the official badges in your README to showcase security & install-test status:
`[](https://www.dsh.so/artifact/dsh-voice-input-14/)``[](https://www.dsh.so/artifact/dsh-voice-input-14/)``[](https://www.dsh.so/artifact/dsh-voice-input-14/)``[](https://www.dsh.so/artifact/dsh-voice-input-14/)``[](https://www.dsh.so/artifact/dsh-voice-input-14/)``[](https://www.dsh.so/artifact/dsh-voice-input-14/)`Security Report
Two automated layers, neither a manual review: a static scan (per-plugin rule checks) and a model-driven dynamic security audit that covers only the subset static-flagged at warn or above and never executes plugin code.
Static low; dynamic medium (authoritative when present) → overall medium.
v0.1.0dsh manifest0.1.0git2026-10-280.1.0same versionclean · npmVet is an AST static scan (npm artifact or git source).
show static findings (9)
- warningnetIp · network
lib/asr.js:309hint: '示例：https://api.openai.com/v1 或 http://127.0.0.1:8080/v1', - warningnetIp · network
lib/client.js:159{ id: 'ollama', label: 'Ollama', provider: 'ollama', apiBase: 'http://127.0.0.1:11434/v1', model: '', language: 'zh' }, - warningnetIp · network
lib/client.js:160{ id: 'whispercpp', label: '本地 whisper.cpp', provider: 'openai', apiBase: 'http://127.0.0.1:8080/v1', model: 'whisper-1', language: 'zh' }, - warningnetIp · network
lib/client.js:1353if (base === '') base = 'http://127.0.0.1:8081/v1' - warningnetIp · network
lib/local.js:24'http://127.0.0.1:8081/v1', - warningnetIp · network
lib/local.js:25'http://127.0.0.1:8080/v1', - warningnetIp · network
lib/local.js:26'http://127.0.0.1:8000/v1', - warningnetIp · network
lib/ollama.js:29export const DEFAULT_OLLAMA_ORIGIN = 'http://127.0.0.1:11434' - warningchildProcess · code-exec
lib/scripts.js:267const child = spawn(interpreter, args, {
show 3 audit findings
- mediumSettings page can invoke host PowerShell actions with an unvalidated client-supplied argument
lib/client.jsThe free-text model field is forwarded verbatim through POST /api/voice-input/run-script into a host-side action; the browser performs no character validation (only a non-empty check). If the unharvested runner (lib/scripts.js / lib/routes.js) interpolates that string into a PowerShell command line instead of passing it as a separate argv element, an attacker-influenced model name becomes command execution on the user's machine. The sink could not be verified because those files were not harvested.
- lowDesignated PowerShell script runs automatically when the provider is switched to Ollama
lib/client.jsBoth enableScripts and autoRunScript default to true (`!== false`), so a single click on the Ollama chip silently executes the configured script (or `ollama.start`) on the host without a per-run confirmation. Anyone able to influence the stored configuration (shared profile, imported settings) gets host script execution from one UI click.
- lowLoopback auto-discovery hands recordings to whichever local port answers first
lib/client.jsAny local unprivileged process that listens on one of those fixed ports and mimics the OpenAI JSON shape will receive the user's audio (and may act as the configured transcription backend); the responder is not authenticated and the discovered address is used silently. The discovery implementation lives in the unharvested lib/local.js, so the exact probe could not be confirmed.
ASR client and UI bundle are defensively written, but the settings page can drive a host-side PowerShell runner with unvalidated client arguments, and the executor files were not harvested.
Rule (2026-10-28): when a dynamic conclusion exists it is authoritative (it may raise or lower the level); the static scan tier (vet primary, dsh backstop) applies only when there is none (not queued / audit failed / withdrawn). The audit never writes the exemption list (exemptions are manual only); a wrong conclusion is withdrawn by human review and the tier falls back to the static scan tier.
Disclaimer: the static scan and the dynamic security audit are both automated analysis, not a security guarantee. Always review what you install.
Activity
Last commit 2026-09-12 · activity: Stable
• Repo created: 2026-09-12
• Stars: ★ 0 · Forks: 0
• Health: Stable — committed within 90 days
Source
Author README
View on GitHub ↗The author's original README from the repository — fetched live, unedited (the English page loads the default README).