dsh-chat-imagine

在 DSH 聊天窗口自动调用生图工具（API 渠道，或本机 CLI：已支持mmx / codex / agy）并展示图片。

PluginVisionTerminalNetworkTerminal / ShellVision / OCR

Verification

L2 · Structured

Security

Medium

Health

Active

Trust

Silver

What it does

在 DSH 聊天窗口自动调用生图工具（API 渠道，或本机 CLI：已支持mmx / codex / agy）并展示图片。

dsh plugin --profile web add dsh-chat-imagine

Install method: npm · not yet tested in container (L3+)

DSH Version	Status
not stated	Declared — not tested

Automated static scan, not manual review.

DSH.SOWARNINGSCAN4 FILES

761aa8

Security reviewAutomated review · daily

WARNING

No critical findings, but warning-level issues were detected (file writes, remote imports, base64 decoding, downloads).

0 critical·1 warning·5 info·4 files scanned

Version binding

scanned commit761aa8283cd52026-08-17

latest commit761aa8283cd5

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Medium0 critical · 1 warning · 5 info

• Static heuristic scan: done (4 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

warningHTTP request to a raw IP addressindex.js:105
: `http://127.0.0.1:${ctx.webServer.port}`
infoMakes network requests (fetch / axios)index.js:457
const resp = await fetch(`${baseURL.replace(/\/+$/, '')}/models`, {
infoMakes network requests (fetch / axios)index.js:797
const resp = await fetch(`${baseURL.replace(/\/+$/, '')}/models`, {
infoMakes network requests (fetch / axios)index.js:810
const response = await fetch(endpoint, {
infoHardcoded IP addressindex.js:105
: `http://127.0.0.1:${ctx.webServer.port}`
infoHardcoded IP addressindex.js:182
if (addr !== '127.0.0.1' && addr !== '::1' && addr !== '::ffff:127.0.0.1') {

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Last commit 2026-08-17 · activity: Active

• Repo created: 2026-08-17

• Stars: ★ 4 · Forks: 1

• Health: Active — committed within last 30 days