dsh.so
EN
English中文
plugin-audio-alert avatar

plugin-audio-alert

给DeepSeek Harness (DSH)的审批语音告警插件：当 DSH 遇到需要人工审核/审批时，用电脑 TTS 自动语音呼叫你——把"需要你审核"的内容念出来，同时照常在网页上弹出审批按钮让你点。

PluginProductivityBrowserMediaNotifications
Verification
L2 · Structured
Security
Medium
Health
Active
Trust
Silver

What it doesAI

Voice alert plugin for DeepSeek Harness that reads approval requests aloud via TTS and shows an approval button on the web page.

  • TTS voice call when manual approval is needed
  • Reads approval request content aloud
  • Shows clickable approval button on web UI

AI-generated from the repo README — for reference only.

Installation

dsh plugin --profile web add github:Couioly/plugin-audio-alert

Install method: GitHub · not yet tested in container (L3+)

Compatibility

DSH VersionStatus
not statedDeclared — not tested

Requirements

  • • Node.js: not stated
  • • DSH: declared "not stated"
  • • External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SO AUDITMEDIUMe72377
Security reviewAutomated review · daily
MEDIUM

Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.

1 critical·0 warning·5 info·3 files scanned
code-exec ×1
Version binding
plugin version1.0.0
scanned commite7237707c29f2026-08-20
latest commite7237707c29f

The scan result is valid for the scanned commit. New commits within 7 days are tolerated (the rating still counts); after 7 days without a rescan the badge shows outdated.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Second-opinion scan (vet · parallel evaluation)
vet: clean

vet verdict: vet: clean · score 100

  • R10 · info [heuristic] — 依赖清单：1 项（ws，供 LLM 审计供应链；已知漏洞核对见后续 OSV 精确版本查询（网络失败静默降级））
  • R3 · info [certain] — 只读 process 成员（能力触达面）：process.env
  • R3 · info [certain] — 只读 process 成员（能力触达面）：process.env
  • R3 · info [certain] — 只读 process 成员（能力触达面）：process.env
  • R6 · info [heuristic] — 字符串特征：child_process 引用

vet is advisory and does not change dsh’s four-tier level.

Risk: Medium1 critical · 0 warning · 5 info

• Static heuristic scan: done (3 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

High-risk findings · 1 / 1

  • criticalChild process module usage (Node.js)lib/index.js:17
    import { execFile } from 'node:child_process'

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-20 · activity: Active

• Repo created: 2026-08-20

• Stars: ★ 0 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/Couioly/plugin-audio-alert

Was this page helpful?