What it does
Turn the official DeepSeek Harness WebUI into a natural desktop experience.
Installation
dsh plugin --profile web add dsh-desktop-20Install method: npm · not yet tested in container (L3+)
Compatibility
| DSH Version | Status |
|---|---|
| not stated | Declared — not tested |
Requirements
- • Node.js: not stated
- • DSH: declared "not stated"
- • External credentials: none detected
Security Report
Automated static scan, not manual review.
No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.
8c9826691ebc2026-08-178c9826691ebcThe scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
• Static heuristic scan: done (15 files)
• Dependency vulnerabilities: requires deep audit (L3+)
• Permission sandboxing: requires runtime testing (L4+)
Scan findings · 5
- infoHardcoded IP addressscripts/compose-bundle.mjs:17host: !!js ctx.webStartup.host ?? '127.0.0.1'
- infoMakes network requests (fetch / axios)src/client/desktop-settings-store.ts:26constructor(private readonly fetcher: Fetcher = (input, init) => globalThis.fetch(input, init)) {}
- infoReads process.envsrc/electron-entry.cjs:6const initial = JSON.parse(process.env.DSH_DESKTOP_INIT || 'null')
- infoReads process.envsrc/electron-entry.cjs:8const descriptor = process.env.DSH_DESKTOP_CONTROL
- infoHardcoded IP addresssrc/electron-entry.cjs:13const socket = net.connect(port, '127.0.0.1')
Heuristic static scan — may produce false positives. Review the source yourself before trusting.
Activity
Last commit 2026-08-17 · activity: Active
• Repo created: 2026-08-17
• Stars: ★ 4 · Forks: 1
• Health: Active — committed within last 30 days