dsh-ask-cases
Assisted Asking: a star left of the composer rewrites a vague question into an answerable one, using the current conversation as context.
This report shows the evidence for dsh-ask-cases@0.1.2. 0 of 3 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package’s rewrite flow is user-triggered, but its host handler silently logs session identifiers to a fixed local path. This is an undisclosed privacy risk, though the inspected code does not show those log values being sent over the network.
Decision evidence
public snapshot- The host appends runtime log entries to a hard-coded path: C:/Users/sam15/Documents/deepseek-harness/default-workspace/.tmp/ask-cases-rewrite.log.
- When a rewrite request includes a session ID, the code logs up to five active session IDs and whether the requested session exists.
- Rewrite logs include the session ID and draft/context lengths; the log call does not include the draft or context text.
- The README says the plugin does not write session logs, contrary to the runtime logging code.
- The client sends a rewrite request after the user clicks the plugin button.
- The package has no lifecycle scripts, and the searched client source did not contain the flagged bidi control characters.
Source & flagged code
6 flaggedSource contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
lib/client.jsView on unpkg · L240A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
lib/client.jsView on unpkgThe host appends runtime log entries to a hard-coded path: C:/Users/sam15/Documents/deepseek-harness/default-workspace/.tmp/ask-cases-rewrite.log.
Findings
Affected versions and remediation
This report applies to dsh-ask-cases@0.1.2.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of dsh-ask-cases@0.1.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.