registry / dsh-win32 / 0.17.4

dsh-win32@0.17.4

Fix and diagnose DeepSeek Harness on native Windows. Official PowerShell, Workspace Write, shortcuts, and legacy preset repair. No WSL.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The source ties flagged installation, process, and network activity to explicit setup/fix commands or package-owned runtime setup. Preset writes are scoped to the DSH home directory, and the optional account action requires explicit confirmation; no concrete attack behavior was established.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Setup, fix, or plugin activation, initiated by the user or host application.

Impact

No confirmed harmful effect; existing preset files are preserved, and the Star action requires an explicit answer.

Mechanism

Setup installs the package’s own DSH profile bundle and presets; plugin activation can add package-owned presets under the DSH home directory when local requirements are present.

AI rationale

Evidence

package.jsonbin/cli.mjsbin/setup-consent.mjslib/index.jslib/preset-install.js

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json limits its prepare hook to building the package.
The CLI runs setup only for an explicit setup command; profile installation is user-invoked.
Runtime preset installation targets DSH_HOME/.agent-presets and leaves an existing preset roster in place.
Plugin activation installs only presets whose required local shell or BusyBox is already available.
The GitHub Star command requires an explicit --yes or --no answer.

Evidence against

The scanner flags shell, network, and runtime package-manager calls, but inspected code ties them to explicit setup or fix commands and package-aligned installation.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 12 file(s), 137 KB of source, external domains: frippery.org, git-scm.com, github.com, learn.microsoft.com

Source & flagged code

7 flagged

bin/setup-consent.mjsView file

1import { execFileSync } from 'node:child_process' L2: import { existsSync, mkdirSync, writeFileSync } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/setup-consent.mjsView on unpkg · L1

bin/cli.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = dsh-win32@0.11.0 matchedIdentity = npm:ZHNoLXdpbjMy:0.11.0 similarity = 0.556 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.mjsView on unpkg

42if (process.env.ProgramFiles !== undefined) { L43: const candidate = join(process.env.ProgramFiles, 'PowerShell', '7', 'pwsh.exe') L44: if (existsSync(candidate)) return candidate

High

Shell

Package source references shell execution.

bin/cli.mjsView on unpkg · L42

7L8: import { execFileSync } from 'node:child_process' L9: import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs' ... L19: const WIN = process.platform === 'win32' L20: const DSH_HOME = process.env.DSH_HOME ?? join(homedir(), '.dsh') L21: const PRESET_ID = 'minimal-windows' L22: const PRESET_SRC = join(dirname(fileURLToPath(import.meta.url)), '..', 'preset', PRESET_ID) L23: const REPO = 'https://github.com/sjh9714/dsh-win32' L24: const SELF_VERSION = JSON.parse(

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/cli.mjsView on unpkg · L7

203// fault. L204: add('dsh-win32/bundle', 'warn', `profile runs ${wiredBundle}, this CLI is ${SELF_VERSION}`, 'npx dsh-win32 setup. If that reports no change, the profile\'s pnpm minimumReleaseAgeEx... L205: } ... L218: if (!WIN) { L219: for (const name of ['git_bash', 'powershell', 'koffi', 'persistent_powershell', 'workspace_write', 'sandbox_shell', 'write_fence']) add(name, 'skip', NOT_WINDOWS) L220: return { checks, gitBash, official }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/cli.mjsView on unpkg · L203

118const version = JSON.parse(readFileSync(manifest, 'utf8')).version L119: const loadable = tryExec(process.execPath, ['-e', 'require(process.argv[1])', dirname(manifest)]) !== undefined L120: results.push({ profile, version, loadable })

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.mjsView on unpkg · L118

lib/index.d.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/index.d.ts#virtual:normalized:round1View on unpkg

Source & flagged code

7 flagged · loading source

bin/setup-consent.mjsView file

1import { execFileSync } from 'node:child_process' L2: import { existsSync, mkdirSync, writeFileSync } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/setup-consent.mjsView on unpkg · L1

bin/cli.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.mjsView on unpkg

42if (process.env.ProgramFiles !== undefined) { L43: const candidate = join(process.env.ProgramFiles, 'PowerShell', '7', 'pwsh.exe') L44: if (existsSync(candidate)) return candidate

High

Shell

Package source references shell execution.

Findings

1 Critical5 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltabin/cli.mjs

HighChild Processbin/setup-consent.mjs

HighShellbin/cli.mjs

HighSame File Env Network Executionbin/cli.mjs

HighRuntime Package Installbin/cli.mjs

HighSemantic Analysis Limitedlib/index.d.ts#virtual:normalized:round1

MediumDynamic Requirebin/cli.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Low

Affected versions and remediation

This report applies to dsh-win32@0.17.4.

See all versions of dsh-win32 for other recorded verdicts.

Review the evidence and your use of dsh-win32@0.17.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-19 17:32:32.843Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.