Install verification: Ecosystem plugin: installs via dsh plugin add but declares no dsh.bundle and mounts no plugin capability — the L1-L5 install ladder does not rate it; the security scan still runs.Install verification details →
What it doesAI
Provides multi-mode agent presets for DeepSeek Harness with per-mode model routing and tiered subagent delegation.
- Multi-mode agent presets for DeepSeek Harness
- Per-mode model routing
- Tiered subagent delegation
Capability tags are AI-inferred or rule-extracted from the README (see badge) — vocabulary-limited, not install-verified. AI = inferred; README = literal keyword from the readme.
Installation
dsh plugin --profile web add github:jiazz197-cmyk/omd-dsh#v0.1.2Install method: GitHub · runtime test inconclusive (L5 unknown)
Verification & Compatibility○ Ecosystem plugin
Grouped by plugin version: each card lists the dsh versions actually tested against that artifact version and their install verdicts (L5 wins). Untested combinations are omitted — absence means untested, never assumed compatible. L1–L3 are a plugin-level static archive (independent of the dsh version — the same verdict on every dsh row): they sit in each row's level grid next to L4/L5, marked "static", while their evidence is stored once per plugin inside that row's "checks & evidence" instead of being duplicated per version.
External credentials (plugin-level): none detected
○ The author declares no dsh version requirement — install is not blocked by version.
| plugin ＼ dsh | dsh 0.2.1-rc.2 current | dsh 0.2.1-alpha.4 | dsh 0.2.1-alpha.2 | dsh 0.2.0-rc.2 | dsh 0.2.0-rc.1 |
|---|---|---|---|---|---|
| v0.1.2 | ○ | ○ | ○ | ○ | ○ |
v0.1.2github○ 11 ecosystem plugin2026-10-19
https://github.com/jiazz197-cmyk/omd-dsh
○dsh 0.2.1-rc.2current2026-10-19Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.1-rc.2
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.2.1-rc.2 · profile: l4-sandbox
Issued: 2026-10-19 · expires: 2026-10-26
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.2.1-alpha.42026-10-16Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.4
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.2.1-alpha.4 · profile: l4-sandbox
Issued: 2026-10-16 · expires: 2026-10-23
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.2.1-alpha.22026-10-10Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.1-alpha.2
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.2.1-alpha.2 · profile: l4-sandbox
Issued: 2026-10-10 · expires: 2026-10-17
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.2.0-rc.22026-10-08Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.2
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.2.0-rc.2 · profile: l4-sandbox
Issued: 2026-10-08 · expires: 2026-10-15
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.2.0-rc.12026-09-29Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.2.0-rc.1
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.2.0-rc.1 · profile: l4-sandbox
Issued: 2026-09-29 · expires: 2026-10-06
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.7-rc.22026-09-25Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.7-rc.2
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.1.7-rc.2 · profile: l4-sandbox
Issued: 2026-09-25 · expires: 2026-10-02
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.7-alpha.22026-09-23Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.7-alpha.2
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.1.7-alpha.2 · profile: l4-sandbox
Issued: 2026-09-23 · expires: 2026-09-30
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.6-alpha.22026-09-20Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.2
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.1.6-alpha.2 · profile: l3-fullscan
Issued: 2026-09-20 · expires: 2026-09-27
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.6-alpha.12026-09-17Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.6-alpha.1
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.1.6-alpha.1 · profile: l4-sandbox
Issued: 2026-09-17 · expires: 2026-09-24
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○dsh 0.1.5-rc.22026-09-13Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: 0.1.5-rc.2
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dsh0.1.5-rc.2 · profile: l4-sandbox
Issued: 2026-09-13 · expires: 2026-09-20
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
○prehistory2026-10-04Ecosystem plugin
- • Node.js: v24.14.0
- • DSH: unknown
- • Plugin artifact: github · https://github.com/jiazz197-cmyk/omd-dsh#v0.1.2
ID: omd-dsh@v0.1.2@dshunknown · profile: l4-sandbox
Issued: 2026-10-04 · expires: 2026-10-11
View checks & evidence
not present in web-profile loader inventory
L1–L3 are plugin-level static conclusions (baseline, identical across dsh versions): evidence is stored once per plugin.
Only the latest 3 published versions are shown; source-snapshot (commit hash) groups, unstated groups and older versions are omitted — the full archive stays in the data layer (snapshot/unstated groups appear only when a plugin has no published version).
Author badges
Embed the official badges in your README to showcase security & install-test status:
`[](https://www.dsh.so/artifact/omd-dsh/)`Security Report
Two automated layers, neither a manual review: a static scan (per-plugin rule checks) and a model-driven dynamic security audit that covers only the subset static-flagged at warn or above and never executes plugin code.
Static low; dynamic low (authoritative when present) → overall low.
v0.1.0v0.1.2git2026-10-25v0.1.2same versionclean · gitVet is an AST static scan (npm artifact or git source).
show static findings (10)
- warningshellExec · shell
packages/omd-dsh/src/cli.ts:117const out = execFileSync(probe, ["dsh"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }); - warningfsWrite · files
packages/omd-dsh/src/cli.ts:354else { if (!flags.dryRun) { await fs.mkdir(dirname(destFile), { recursive: true }); await fs.writeFile(destFile, sourceText, "utf8"); } log( - warningfsWrite · files
packages/omd-dsh/src/cli.ts:359await fs.writeFile(join(targetDir, ".omd-meta.json"), JSON.stringify({ source: "omd-dsh", sourceVersion, files: nextFiles }, null, 2) + "\n" - warningfsWrite · files
packages/omd-dsh/src/cli.ts:386else { if (!flags.dryRun) { await fs.mkdir(vendorTargetDir, { recursive: true }); await fs.writeFile(destFile, sourceText, "utf8"); } log(ac - warningmanifest-fs-unfenced · sandbox
packages/omd-dsh/presets/omd-architect/agent.cordis.ymlMutating filesystem tool has no explicit fs backend in realm - warningmanifest-search-unfenced · sandbox
packages/omd-dsh/presets/omd-architect/agent.cordis.ymlSearch tool reads without an explicit fs mount - warningmanifest-shell-unfenced · sandbox
packages/omd-dsh/presets/omd-architect/agent.cordis.ymlShell tool without a sandbox runner or policy in realm - warningmanifest-fs-unfenced · sandbox
packages/omd-dsh/presets/omd-executor/agent.cordis.ymlMutating filesystem tool has no explicit fs backend in realm - warningmanifest-search-unfenced · sandbox
packages/omd-dsh/presets/omd-executor/agent.cordis.ymlSearch tool reads without an explicit fs mount - warningmanifest-shell-unfenced · sandbox
packages/omd-dsh/presets/omd-executor/agent.cordis.ymlShell tool without a sandbox runner or policy in realm
show 2 audit findings
- lowPreset YAML embeds unescaped deny names inside an evaluated `!!js` expression
packages/omd-dsh/src/cli.ts:239The sync step generates a preset entry whose value is a JavaScript expression evaluated by the harness config loader. Tier `deny` names come from omd-matrix.json and are wrapped in single quotes without escaping, so a name containing a quote would terminate the string literal and inject arbitrary JS into that config value. Reachability requires write access to the installed package's omd-matrix.json, i.e. a position the attacker could already use to edit lib/vendor/*.mjs directly, so this is a hardening gap rather than a privilege boundary crossing.
- lowAny node_modules tree is trusted to supply in-process imports for the harness
packages/omd-dsh/src/cli.ts:184The harness location (from --harness, the npx cache scan, or the persisted $DSH_HOME/omd-dsh-harness.json) is only checked for the existence of @deepseek-ai/dsh-scope/package.json. resolveHarnessModule then reads that tree's manifests and rewrites vendored imports to absolute file:// URLs, which the DSH harness later imports in-process when loading the preset. Anyone who can write to the chosen tree (or to the cache file, which is read back with the same weak check) can therefore get their code loaded into the agent process; the precondition is already write access to the user's config/package
Static warnings are all benign fixed-argument exec plus $DSH_HOME-scoped writes; only two low-severity config-trust gaps, no critical/high risk.
Rule (2026-10-24): when a dynamic conclusion exists it is authoritative (it may raise or lower the level); without one, the static/vet fused tier applies. The audit never writes the exemption list (exemptions are manual only); a wrong conclusion is withdrawn by human review and the tier falls back to static/vet.
Disclaimer: the static scan and the dynamic security audit are both automated analysis, not a security guarantee. Always review what you install.
Activity
Last commit 2026-08-29 · activity: Stable
• Repo created: 2026-08-23
• Stars: ★ 10 · Forks: 0
• Health: Stable — committed within 90 days
Source
GitHub: github.com/jiazz197-cmyk/omd-dsh
Author README
View on GitHub ↗The author's original README from the repository — fetched live, unedited (the English page loads the default README).