dsh-whale-musume

DeepSeek Harness 桌宠插件：元气鲸鱼娘陪你写代码 🐋

PluginAI ModelsDesktopGameProductivity

Verification

L2 · Structured

Security

Medium

Health

Active

Trust

Silver

What it does

DeepSeek Harness 桌宠插件：元气鲸鱼娘陪你写代码 🐋

Installation

dsh plugin --profile web add dsh-whale-musume

Install method: npm · not yet tested in container (L3+)

Compatibility

DSH Version	Status
not stated	Declared — not tested

Requirements

• Node.js: not stated
• DSH: declared "not stated"
• External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SOWARNINGSCAN4 FILES

fabbb5

Security reviewAutomated review · daily

WARNING

No critical findings, but warning-level issues were detected (file writes, remote imports, base64 decoding, downloads).

0 critical·3 warning·10 info·4 files scanned

Version binding

scanned commitfabbb52babef2026-08-17

latest commitfabbb52babef

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Medium0 critical · 3 warning · 10 info

• Static heuristic scan: done (4 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

Scan findings · 12

infoUses localStorageassets/dsh-whale-moe.js:46
try { return root.localStorage.getItem("whale-moe:" + key) !== "0"; } catch (e) { return true; }
infoUses localStorageassets/dsh-whale-moe.js:49
try { root.localStorage.setItem("whale-moe:" + key, value ? "1" : "0"); } catch (e) { /* storage unavailable */ }
infoUses localStorageassets/dsh-whale-moe.js:55
var value = root.localStorage.getItem("whale-moe:mode");
infoMakes network requests (fetch / axios)assets/dsh-whale-moe.js:1390
root.fetch(url, { signal: ctrl ? ctrl.signal : undefined, headers: { Accept: "application/json" } }).then(function (res) {
infoMakes network requests (fetch / axios)assets/dsh-whale-moe.js:1607
fetch("/assets/peek-calibration.json").then(function (r) { return r.json(); }).then(function (json) {
warningFilesystem write operationsscripts/apply-theme.mjs:44
function write(file, content) { fs.writeFileSync(file, content, "utf8"); }
warningFilesystem write operationsscripts/apply-theme.mjs:167
fs.writeFileSync(path.join(backupDir, record.backupName), record.original);
warningFilesystem write operationsscripts/apply-theme.mjs:174
fs.writeFileSync(path.join(backupDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf8");
infoReads process.envscripts/apply-theme.mjs:15
const DEFAULT_TARGET = process.env.DSH_INSTALL_DIR || "DeepSeekHarness";
infoReads process.envscripts/apply-theme.mjs:16
const BACKUP_ROOT = process.env.DSH_WHALE_BACKUP || path.join(os.tmpdir(), "dsh-whale-moe-backup");
infoUses localStoragescripts/apply-theme.mjs:256
try { const v = window.localStorage.getItem("whale-moe:" + key); return v === null ? fallback : v; } catch (e) { return fallback; }
infoUses localStoragescripts/apply-theme.mjs:268
try { window.localStorage.setItem("whale-moe:" + prefKey, next ? "1" : "0"); } catch (e) {}

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-16 · activity: Active

• Repo created: 2026-08-17

• Stars: ★ 7 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/Sutera-Diffusus/dsh-whale-musume