一个 DeepSeek Harness MCP 配置页
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 4
filesystem 2
- fs HenC49-dsh-mcp-manager-4a1fc80/index.js :46
import { mkdir, readFile, rename, writeFile } from 'node:fs/promises' - fs (weak) HenC49-dsh-mcp-manager-4a1fc80/test/run-test.mjs :18
import { mkdir, readFile, rm, writeFile } from 'node:fs/promises'
network 1
- net HenC49-dsh-mcp-manager-4a1fc80/client.js :126
const response = await fetch(`/mcp-manage/api/${method}`, {
secrets 2
- secrets (weak) HenC49-dsh-mcp-manager-4a1fc80/test/run-test.mjs :144
process.env.TOY_TEST_SECRET = 's3cret-value' - secrets (weak) HenC49-dsh-mcp-manager-4a1fc80/test/toy-server.mjs :68
text: JSON.stringify({ secret: process.env.TOY_TEST_SECRET ?? null, leaked: process.env.FAKE_API_KEY ?? null }),
declared dependencies 8
- @modelcontextprotocol/sdk@^1.12.0
- @deepseek-ai/schemastery@^3.18.1
- @deepseek-ai/cordis@^4.0.1
- @deepseek-ai/dsh-tools@^0.1.0-rc.6
- @deepseek-ai/dsh-client-runtime@^0.1.0-rc.6
- @deepseek-ai/dsh-client-locale@^0.1.0-rc.6
- @deepseek-ai/dsh-client-ui-slots@^0.1.0-rc.6
- react@^18.2.0