dsh.so
EN
English中文
dsh-whale-galgame avatar

dsh-whale-galgame

工作推gal两不误~面向DeepSeek Harness的跨会话事件感知Galgame引擎与界面插件，支持鲸鱼娘/GPT/Claude/Grok/Gemini/Kimi多位模型娘角色

PluginAI ModelsUI & Skins
Verification
L2 · Structured
Security
High
Health
Active
Trust
Silver

What it does

工作推gal两不误~面向DeepSeek Harness的跨会话事件感知Galgame引擎与界面插件，支持鲸鱼娘/GPT/Claude/Grok/Gemini/Kimi多位模型娘角色

Installation

dsh plugin --profile web add dsh-whale-galgame

Install method: npm · not yet tested in container (L3+)

Compatibility

DSH VersionStatus
not statedDeclared — not tested

Requirements

  • • Node.js: not stated
  • • DSH: declared "not stated"
  • • External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SOHIGH-RISKSCAN12 FILES
621531
Security reviewAutomated review · daily
HIGH-RISK

Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.

2 critical·1 warning·8 info·12 files scanned
code-exec ×1shell ×1
Version binding
plugin version0.3.0dsh manifest
scanned commit62153117de542026-08-18
latest commit62153117de54

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: High2 critical · 1 warning · 8 info

• Static heuristic scan: done (12 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

Scan findings · 11

  • criticalChild process module usage (Node.js)scripts/release-audit.mjs:1
    import { execFileSync } from 'node:child_process'
  • criticalShell command execution (exec / execSync)scripts/release-audit.mjs:142
    const packResult = JSON.parse(execFileSync(packCommand[0], packCommand[1], {
  • warningShell command execution (exec / execSync)scripts/release-audit.mjs:188
    const tracked = execFileSync('git', ['ls-files', '--cached', '--others', '--exclude-standard', '-z'], {
  • infoReads process.envscripts/release-audit.mjs:9
    const npmExecPath = process.env.npm_execpath
  • infoReads process.envscripts/release-audit.mjs:140
    ? [process.env.ComSpec || 'cmd.exe', ['/d', '/s', '/c', 'npm.cmd pack --dry-run --json --ignore-scripts']]
  • infoMakes network requests (fetch / axios)src/client/index.ts:312
    const res = await fetch('/whale-galgame-api', {
  • infoReads process.envsrc/index.ts:490
    : (typeof process !== 'undefined' && process.env.DASHSCOPE_BASE_URL
  • infoReads process.envsrc/index.ts:491
    ? process.env.DASHSCOPE_BASE_URL
  • infoReads process.envsrc/index.ts:495
    : (typeof process !== 'undefined' ? process.env.DASHSCOPE_API_KEY || '' : ''),
  • infoMakes network requests (fetch / axios)src/index.ts:2524
    const res = await fetch(cfg.dashscopeBaseUrl.replace(/\/$/, '') + '/api/v1/services/aigc/multimodal-generation/generation', {
  • infoMakes network requests (fetch / axios)src/index.ts:2557
    const img = await fetch(imageRef)

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-17 · activity: Active

• Repo created: 2026-08-18

• Stars: ★ 5 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/JAdpp/dsh-whale-galgame

Was this page helpful?