Safe Computer Use plugin for DeepSeek Harness with approvals and local audit archives
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 9 tools · 0 res
· 0 prompts
permission surface via README inference
tools
-
click
Click a current element index or screenshot coordinate.
-
drag
Drag between screenshot coordinates.
-
get_app_state
Capture one app window, accessibility tree, and element indexes.
-
list_apps
List installed and running applications.
-
perform_secondary_action
Invoke an advertised accessibility action.
-
press_key
Send a key or chord.
-
scroll
Scroll an element or app in one direction.
-
set_value
Set a supported accessibility control value.
-
type_text
Enter literal text.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 85a4907 · analyzer v33 · 1w ago
danger signals1
- dynamic code execution new Function() aibo204-dsh-plugin-computer-use-85a4907/lib/client.js :149
new Function("");
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 30
filesystem 5
- fs aibo204-dsh-plugin-computer-use-85a4907/lib/archive.js :3
import { mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises"; - fs (weak) aibo204-dsh-plugin-computer-use-85a4907/scripts/generate-typert.mjs :1
import { cp, mkdir, readFile, rm, symlink, writeFile } from 'node:fs/promises' - fs (weak) aibo204-dsh-plugin-computer-use-85a4907/scripts/normalize-generated.mjs :1
import { readFile, writeFile } from 'node:fs/promises' - fs aibo204-dsh-plugin-computer-use-85a4907/src/archive.ts :4
import { mkdir, readFile, readdir, rename, rm, writeFile } from 'node:fs/promises' - fs (weak) aibo204-dsh-plugin-computer-use-85a4907/tests/archive.spec.ts :1
import { mkdtemp, rm } from 'node:fs/promises'
declared dependencies 34
- @deepseek-ai/dsh-api-remotes@0.1.5-rc.1
- @deepseek-ai/dsh-client-locale@0.1.5-rc.1
- @deepseek-ai/dsh-client-ui-renderer@0.1.5-rc.1
- @deepseek-ai/dsh-client-ui-settings@0.1.5-rc.1
- @deepseek-ai/dsh-client-ui-settings-plugins@0.1.5-rc.1
- @deepseek-ai/dsh-client-ui-slots@0.1.5-rc.1
- @deepseek-ai/dsh-home-paths@0.1.5-rc.1
- @deepseek-ai/dsh-mcp-client@^0.1.5-rc.1
- @deepseek-ai/dsh-settings@0.1.5-rc.1
- @deepseek-ai/dsh-typert-protocol@0.1.5-rc.1
- @deepseek-ai/schemastery@^3.18.2
- open-computer-use@0.3.1
show 22 more
- react@^18.3.1
- zod@^4.4.3
- @deepseek-ai/cordis@4.0.2
- @deepseek-ai/dsh-agent@0.1.5-rc.1
- @deepseek-ai/dsh-attachment@0.1.5-rc.1
- @deepseek-ai/dsh-code-runtime@0.1.5-rc.1
- @deepseek-ai/dsh-http-proxy@0.1.5-rc.1
- @deepseek-ai/dsh-invariants@0.1.5-rc.1
- @deepseek-ai/dsh-llm@0.1.5-rc.1
- @deepseek-ai/dsh-scope@0.1.5-rc.1
- @deepseek-ai/dsh-session@0.1.5-rc.1
- @deepseek-ai/dsh-session-projection@0.1.5-rc.1
- @deepseek-ai/dsh-subprocess@0.1.5-rc.1
- @deepseek-ai/dsh-system-prompt@0.1.5-rc.1
- @deepseek-ai/dsh-tools@0.1.5-rc.1
- @deepseek-ai/dsh-typert-generator@0.1.5-rc.1
- @deepseek-ai/dsh-user-approval@0.1.5-rc.1
- @types/node@^24.10.0
- @types/react@~18.3.31
- tsdown@^0.22.2
- typescript@^6.0.3
- vitest@^4.1.8