github TypeScript re-analysis due

dengyier/openworkproof-dsh-plugin

github

Community DeepSeek Harness plugin for verifiable AI agent authorization, execution evidence, and offline delivery verification

maintainer
dengyier
license
Apache-2.0
first seen
2026-08-30
last seen
2026-08-30
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 28

filesystem 13

  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/deny-observation-response.mjs :3 import { existsSync, writeFileSync } from 'node:fs'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/drop-first-action-response.mjs :3 import { existsSync, writeFileSync } from 'node:fs'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/live-preflight.mjs :12 } from 'node:fs'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/preflight-driver/index.js :1 import { writeFileSync } from 'node:fs'
  • fs dengyier-openworkproof-dsh-plugin-9cf3192/src/host-version.ts :1 import { readFileSync, realpathSync } from 'node:fs'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/bridge-client.test.ts :2 import { mkdtemp, readFile, rm } from 'node:fs/promises'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/compatibility.test.ts :1 import { readFileSync } from 'node:fs'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/fixtures/fake-bridge.mjs :2 import { appendFileSync } from 'node:fs'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/host-version.test.ts :1 import { mkdtemp, mkdir, rm, symlink, writeFile } from 'node:fs/promises'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/live-preflight-source.test.ts :2 import { mkdtempSync, writeFileSync } from 'node:fs'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/packaged-runtime.test.ts :2 import { mkdtempSync } from 'node:fs'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/plugin-activation.test.ts :1 import { readFile } from 'node:fs/promises'
  • fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/release-metadata.test.ts :1 import { readFileSync } from 'node:fs'

shell / exec 6

  • shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/deny-observation-response.mjs :4 import { spawn } from 'node:child_process'
  • shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/drop-first-action-response.mjs :4 import { spawn } from 'node:child_process'
  • shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/live-preflight.mjs :16 import { spawn, spawnSync } from 'node:child_process'
  • shell dengyier-openworkproof-dsh-plugin-9cf3192/src/bridge-client.ts :2 import { spawn, type ChildProcessWithoutNullStreams } from 'node:child_process'
  • shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/live-preflight-source.test.ts :1 import { execFileSync } from 'node:child_process'
  • shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/packaged-runtime.test.ts :1 import { execFileSync } from 'node:child_process'

install hooks 2

  • prepare dengyier-openworkproof-dsh-plugin-9cf3192/package.json :40 pnpm build
  • prepack dengyier-openworkproof-dsh-plugin-9cf3192/package.json :41 pnpm build

declared dependencies 8

  • @deepseek-ai/cordis@4.0.1
  • @deepseek-ai/dsh@0.1.1-rc.2
  • @deepseek-ai/dsh-commands@0.1.1-rc.2
  • @deepseek-ai/dsh-session@0.1.1-rc.2
  • @deepseek-ai/dsh-tools@0.1.1-rc.2
  • @types/node@22.18.3
  • typescript@5.9.2
  • vitest@3.2.4