registry / dsh-plugin-prompt-tool / 0.7.2

dsh-plugin-prompt-tool@0.7.2

DSH 插件：提示词工具，规范模型的思维链与回答内容，提供 Web UI 编辑 preset.md 与 AGENTS.md，并按 skills 目录注册可开关技能。

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 101 file(s), 1.03 MB of source, external domains: caniuse.com

Source & flagged code

4 flagged

lib/client.jsView file

Lines 1-26javascript

1window.__ModuleLoader__.load({

2 id: "dsh-plugin-prompt-tool",

3 factory: (require) => {

4 var module = { exports: {} };

5 var exports = module.exports;

6 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });

7 let react = require("react");

8 let react_dom = require("react-dom");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/client.jsView on unpkg · L6

9 let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");

10 let react_jsx_runtime = require("react/jsx-runtime");

11 //#region src/client/workspace-controller.ts

12 /** 侧边栏入口与中央列工作台共享的轻量开关状态。 */

13 var PromptToolWorkspaceController = class {

14 snapshot = { open: false };

15 listeners = /* @__PURE__ */ new Set();

16 getSnapshot = () => this.snapshot;

17 subscribe = (listener) => {

18 this.listeners.add(listener);

19 return () => {

20 this.listeners.delete(listener);

21 };

22 };

23 open() {

24 this.setOpen(true);

25 }

26 close() {

lib/index.mjsView file

Lines 22-62javascript

22 for (const dir of dirs()) try {

23 const watcher = watch(dir, { persistent: false }, () => {

engine/custom-bash.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

engine/custom-bash.mjs#virtual:normalized:round1View on unpkg

Source & flagged code

4 flagged · loading source

lib/client.jsView file

6Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" }); L7: let react = require("react"); L8: let react_dom = require("react-dom");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/client.jsView on unpkg · L6

lib/index.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = dsh-plugin-prompt-tool@0.7.0 matchedIdentity = npm:ZHNoLXBsdWdpbi1wcm9tcHQtdG9vbA:0.7.0 similarity = 0.990 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/index.mjsView on unpkg

42function parseFrontmatter(text) { L43: const source = text.charCodeAt(0) === 65279 ? text.slice(1) : text; L44: const match = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/.exec(source); L45: if (!match) return { L46: data: {}, L47: body: source ... L235: /** L236: * 从本插件自己的 package.json 读取 `dsh.bundle.requires` 中声明的 L237: * Web surface bundle（缺失时回退到 @deepseek-ai/dsh-web-app）。 ... L300: const notify = (message) => { L301: process.stderr.write(message + "\n"); L302: warn(message);

Findings

2 High4 Medium6 Low

HighSemantic Analysis Limitedengine/custom-bash.mjs#virtual:normalized:round1

HighPrevious Version Dangerous Deltalib/index.mjs

MediumDynamic Requirelib/client.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptolib/index.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to dsh-plugin-prompt-tool@0.7.2.

See all versions of dsh-plugin-prompt-tool for other recorded verdicts.

Review the evidence and your use of dsh-plugin-prompt-tool@0.7.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-31 04:16:20.067Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.