dsh-versatileds@0.5.0
多功能DS插件：支持B站小号代理 + QQ 代理（NapCat 小号通道 / 官方机器人通道）。左侧栏在仅NapCat模式下一个入口，QQ机器人登录模式下为QQ机器人与多功能DS插件两个入口。UI层显示B站 / QQ / 通用三个模块页；QQ 侧支持本地 GPT-SoVITS 语音、Whisper 语音转文字、按账号/按模块的记忆与人设隔离或共享。QQ官方机器人模式下请自行按文档登录，该插件目前仅供学习/个人使用，商用需取得所有版权方授权。
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe plugin automatically writes global agent instructions outside its own directory, and those instructions are injected into later sessions. The template appears product-related and no malicious data flow was identified, so this is a warning-level agent capability concern.
Decision evidence
public snapshot- Plugin startup calls ensureAgentsTemplate automatically.
- If absent, the function writes a generated file to <DSH_HOME>/AGENTS.md.
- The generated file says it is automatically injected into each new session.
- The template appears tailored to the plugin’s memory, persona, and language preferences.
- The manifest has no lifecycle scripts.
- No credential exfiltration or unrelated outbound collector was identified.
Source & flagged code
11 flaggedPackage source references shell execution.
index.js#virtual:normalized:round1View on unpkg · L135Findings
Affected versions and remediation
This report applies to dsh-versatileds@0.5.0.
See all versions of dsh-versatileds for other recorded verdicts.
- Review the evidence and your use of dsh-versatileds@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.