dsh-openai-oauth avatar

dsh-openai-oauth

Use ChatGPT OAuth and OpenAI Codex models in DeepSeek Harness—no API key or Codex CLI required.

PluginTerminalNetworkAI ModelsTerminal / Shell
Verification
L2 · Structured
Security
Low
Health
Active
Trust
Silver

What it does

Use ChatGPT OAuth and OpenAI Codex models in DeepSeek Harness—no API key or Codex CLI required.

Installation

dsh plugin --profile web add dsh-openai-oauth-2

Install method: npm · not yet tested in container (L3+)

Compatibility

DSH VersionStatus
not statedDeclared — not tested

Requirements

  • • Node.js: not stated
  • • DSH: declared "not stated"
  • • External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SOPASSEDSCAN15 FILES
b90850
Automated review · daily
PASSED

No critical or warning findings in the automated scan. The result is valid only for the commit hash shown.

0 critical·0 warning·6 info·15 files scanned
scanned commitb908509dea912026-08-17
latest commitb908509dea91

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Low0 critical · 0 warning · 6 info

• Static heuristic scan: done (15 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

Scan findings · 6

  • infoHardcoded IP addresslib/client.d.ts:19
    readonly browserHelp: "Uses PKCE and a one-time callback on 127.0.0.1:1455. This does not bind the account to the machine.";
  • infoHardcoded IP addresslib/login.js:80
    io.write("Waiting for the one-time loopback callback on 127.0.0.1:1455…\n");
  • infoHardcoded IP addresssrc/client/locales.ts:14
    browserHelp: 'Uses PKCE and a one-time callback on 127.0.0.1:1455. This does not bind the account to the machine.',
  • infoHardcoded IP addresssrc/client/locales.ts:48
    browserHelp: '使用 PKCE 和 127.0.0.1:1455 上的一次性回调;这不会把账号绑定到机器。',
  • infoHardcoded IP addresssrc/index.ts:57
    if (host !== '127.0.0.1') {
  • infoHardcoded IP addresssrc/index.ts:58
    throw new Error('dsh-openai-oauth: Web OAuth supports only a loopback Host bound to 127.0.0.1')

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-17 · activity: Active

• Repo created: 2026-08-17

• Stars: ★ 4 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/AdonisSheldon/dsh-openai-oauth

Was this page helpful?