model-usage-plugin

统计各模型 tokens 消耗并估算费用，显示账户余额 | Model token usage stats and cost estimation with account balance for DSH

PluginData

Verification

L2 · Structured

Security

Low

Health

Active

Trust

Silver

What it does

统计各模型 tokens 消耗并估算费用，显示账户余额 | Model token usage stats and cost estimation with account balance for DSH

dsh plugin --profile web add model-usage-plugin

Install method: npm · not yet tested in container (L3+)

DSH Version	Status
not stated	Declared — not tested

Automated static scan, not manual review.

DSH.SOPASSEDSCAN4 FILES

0c9b39

Security reviewAutomated review · daily

PASSED

No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.

0 critical·0 warning·8 info·4 files scanned

Version binding

scanned commit0c9b392b0a3d2026-08-16

latest commit0c9b392b0a3d

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Low0 critical · 0 warning · 8 info

• Static heuristic scan: done (4 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

infoMakes network requests (fetch / axios)src/client.js:15
const getStats = () => fetch(API, { cache: 'no-store' }).then((res) => res.json())
infoMakes network requests (fetch / axios)src/client.js:16
const postAction = (body) => fetch(API, {
infoReads process.envsrc/index.js:110
const dshHome = process.env.DSH_HOME || (process.env.HOME || '') + '/.dsh'
infoReads process.envsrc/index.js:446
if (!apiKey && process.env.DEEPSEEK_API_KEY) apiKey = process.env.DEEPSEEK_API_KEY
infoReads process.envsrc/index.js:451
const base = (balanceBaseUrl || '').trim() || process.env.DEEPSEEK_BASE_URL || 'https://api.deepseek.com'
infoMakes network requests (fetch / axios)src/index.js:386
const response = await fetch(url, { signal: AbortSignal.timeout(10000) })
infoMakes network requests (fetch / axios)src/index.js:452
const response = await fetch(base.replace(/\/+$/, '') + '/user/balance', {
infoMakes network requests (fetch / axios)src/index.js:611
const response = await fetch('https://open.er-api.com/v6/latest/USD', { signal: AbortSignal.timeout(8000) })

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Last commit 2026-08-15 · activity: Active

• Repo created: 2026-08-16

• Stars: ★ 4 · Forks: 0

• Health: Active — committed within last 30 days