dsh.so
EN
English中文
Flowboard avatar

Flowboard

运行在 DeepSeek Harness 中的开源办公协作与团队管理插件，让目标、会议、Agent 执行、进度和资料在同一套办公逻辑中持续流动。

Plugin
Verification
L2 · Structured
Security
High
Health
Active
Trust
Silver

What it does

运行在 DeepSeek Harness 中的开源办公协作与团队管理插件，让目标、会议、Agent 执行、进度和资料在同一套办公逻辑中持续流动。

Installation

dsh plugin --profile web add github:juntaoding/Flowboard

Install method: GitHub · not yet tested in container (L3+)

Compatibility

DSH VersionStatus
not statedDeclared — not tested

Requirements

  • • Node.js: not stated
  • • DSH: declared "not stated"
  • • External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SOHIGH-RISKSCAN15 FILES
012220
Security reviewAutomated review · daily
HIGH-RISK

Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.

1 critical·1 warning·7 info·15 files scanned
code-exec ×1
Version binding
plugin version0.1.2-alpha.5
scanned commit0122200e5a422026-08-17
latest commit0122200e5a42

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: High1 critical · 1 warning · 7 info

• Static heuristic scan: done (15 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

Scan findings · 9

  • infoReads process.envpackages/server/src/cli.ts:7
    const host = process.env.FLOWBOARD_HOST ?? '127.0.0.1'
  • infoReads process.envpackages/server/src/cli.ts:8
    const port = Number(process.env.FLOWBOARD_PORT ?? 8787)
  • infoReads process.envpackages/server/src/cli.ts:9
    const token = process.env.FLOWBOARD_TOKEN
  • infoHardcoded IP addresspackages/server/src/cli.ts:7
    const host = process.env.FLOWBOARD_HOST ?? '127.0.0.1'
  • warningHTTP request to a raw IP addresspackages/server/src/worker-cli.ts:10
    const repository = new SqliteFlowboardRepository(db, process.env.FLOWBOARD_PUBLIC_URL ?? 'http://127.0.0.1:8787')
  • infoReads process.envpackages/server/src/worker-cli.ts:9
    const db = openDatabase({ path: resolve(process.env.FLOWBOARD_DB ?? 'data/flowboard.db') })
  • infoReads process.envpackages/server/src/worker-cli.ts:10
    const repository = new SqliteFlowboardRepository(db, process.env.FLOWBOARD_PUBLIC_URL ?? 'http://127.0.0.1:8787')
  • infoHardcoded IP addresspackages/server/src/worker-cli.ts:10
    const repository = new SqliteFlowboardRepository(db, process.env.FLOWBOARD_PUBLIC_URL ?? 'http://127.0.0.1:8787')
  • criticalChild process module usage (Node.js)scripts/stage-plugin-assets.mjs:4
    import { spawn } from 'node:child_process'

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-17 · activity: Active

• Repo created: 2026-08-17

• Stars: ★ 12 · Forks: 1

• Health: Active — committed within last 30 days

Source

GitHub: github.com/juntaoding/Flowboard

Was this page helpful?