Community DeepSeek Harness plugin for verifiable AI agent authorization, execution evidence, and offline delivery verification
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 28
filesystem 13
- fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/deny-observation-response.mjs :3
import { existsSync, writeFileSync } from 'node:fs' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/drop-first-action-response.mjs :3
import { existsSync, writeFileSync } from 'node:fs' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/live-preflight.mjs :12
} from 'node:fs' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/preflight-driver/index.js :1
import { writeFileSync } from 'node:fs' - fs dengyier-openworkproof-dsh-plugin-9cf3192/src/host-version.ts :1
import { readFileSync, realpathSync } from 'node:fs' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/bridge-client.test.ts :2
import { mkdtemp, readFile, rm } from 'node:fs/promises' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/compatibility.test.ts :1
import { readFileSync } from 'node:fs' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/fixtures/fake-bridge.mjs :2
import { appendFileSync } from 'node:fs' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/host-version.test.ts :1
import { mkdtemp, mkdir, rm, symlink, writeFile } from 'node:fs/promises' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/live-preflight-source.test.ts :2
import { mkdtempSync, writeFileSync } from 'node:fs' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/packaged-runtime.test.ts :2
import { mkdtempSync } from 'node:fs' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/plugin-activation.test.ts :1
import { readFile } from 'node:fs/promises' - fs (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/release-metadata.test.ts :1
import { readFileSync } from 'node:fs'
shell / exec 6
- shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/deny-observation-response.mjs :4
import { spawn } from 'node:child_process' - shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/drop-first-action-response.mjs :4
import { spawn } from 'node:child_process' - shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/scripts/live-preflight.mjs :16
import { spawn, spawnSync } from 'node:child_process' - shell dengyier-openworkproof-dsh-plugin-9cf3192/src/bridge-client.ts :2
import { spawn, type ChildProcessWithoutNullStreams } from 'node:child_process' - shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/live-preflight-source.test.ts :1
import { execFileSync } from 'node:child_process' - shell (weak) dengyier-openworkproof-dsh-plugin-9cf3192/test/packaged-runtime.test.ts :1
import { execFileSync } from 'node:child_process'
install hooks 2
- prepare dengyier-openworkproof-dsh-plugin-9cf3192/package.json :40
pnpm build - prepack dengyier-openworkproof-dsh-plugin-9cf3192/package.json :41
pnpm build
declared dependencies 8
- @deepseek-ai/cordis@4.0.1
- @deepseek-ai/dsh@0.1.1-rc.2
- @deepseek-ai/dsh-commands@0.1.1-rc.2
- @deepseek-ai/dsh-session@0.1.1-rc.2
- @deepseek-ai/dsh-tools@0.1.1-rc.2
- @types/node@22.18.3
- typescript@5.9.2
- vitest@3.2.4