{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"3274375092-dsh-voice","slug":"3274375092-dsh-voice","rank":447,"url":"https://github.com/3274375092/dsh-voice","name":"3274375092/dsh-voice","category":"voice","description":{"zh":"语音输入插件：对着麦克风说话，识别后的文字作为普通聊天消息发送（本地模型或浏览器语音识别）。","en":"Voice input for DeepSeek Harness: speak into the microphone and the recognized text is submitted as a normal chat message, via local or browser speech recognition."},"stars":6,"starsCheckedAt":"2026-08-21","repository":{"owner":"3274375092","repo":"dsh-voice","requestedRef":null,"subpath":""},"npm":null,"downloads":null,"installMode":"github-source","upstreamInstall":"dsh plugin --profile web add github:3274375092/dsh-voice","tarball":null,"added":"2026-08-16","page":"https://awesome-dsh-plugin.com/p/3274375092/dsh-voice/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"3274375092-dsh-voice","slug":"3274375092-dsh-voice","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:25:01.259Z","scanStatus":"static-complete","verdict":"pass","score":99,"commit":"ceab3e7e756dc3e27bf19bddd318159d710520ff","commitDate":"2026-08-21T18:40:07+08:00","artifactDigest":"sha256:9def9466721e19d105c771f6cb2d2de9f42508fb87ef31aae2c2d57a2bcdab09","downloadUrl":"https://github.com/3274375092/dsh-voice/archive/ceab3e7e756dc3e27bf19bddd318159d710520ff.tar.gz","installMode":"github-source","installCommand":"dsh plugin --profile web add github:3274375092/dsh-voice","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"@nn12138/dsh-voice","packageVersion":"0.2.6","bundle":{"patch":"./cordis.patch.yml"},"client":{"inject":["@deepseek-ai/dsh-client-runtime","@deepseek-ai/dsh-client-connection"],"platform":"web"},"lifecycleScripts":{},"peerDependencies":["@deepseek-ai/cordis"]},"identity":{"status":"found","installMode":"github-source","upstreamNpm":null,"manifestName":"@nn12138/dsh-voice","nameMatch":null,"npm":{"name":"@nn12138/dsh-voice","latestVersion":"0.2.6","publishedAt":"2026-08-21T10:44:46.269Z","createdAt":"2026-08-14T21:29:18.960Z","versionCount":7,"maintainers":1,"repository":null,"hasInstallScripts":false,"deprecated":false},"repositoryMatch":"missing","provenance":"none","tarballHost":null,"versionMatch":"match"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"voice","name":"@nn12138/dsh-voice","path":"cordis.example.yml","disabled":false},{"id":"voice","name":"@nn12138/dsh-voice","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["browser-ui","environment","filesystem","host-bundle","network","session","subprocess"],"outboundHosts":[{"host":"hf-mirror.com","count":1}],"findings":[{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"scripts/verify-package.cjs","pathClass":"source","line":17,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"bb088fbd20922e4d71d76941"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"scripts/verify-package.cjs","pathClass":"source","line":17,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"0edb03fbc716bc99ba47c96d"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"tools/download-models.cjs","pathClass":"source","line":9,"evidence":"execSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"87a0c5d6571bbb3173412f45"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"tools/download-models.cjs","pathClass":"source","line":9,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"306ab204136209e82dffa5ee"}],"counts":{"critical":0,"high":0,"medium":0,"low":4},"rawCounts":{"critical":0,"high":0,"medium":0,"low":4},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-present","vulnerabilities":"complete","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":49,"bytesScanned":195610,"truncated":false,"lockfiles":["pnpm-lock.yaml"],"pathClasses":{"test-example-docs":16,"markdown":5,"cordis":2,"manifest":1,"yaml":1,"source":23,"data":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:25:01.259Z","commit":"ceab3e7e756dc3e27bf19bddd318159d710520ff","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:26:13.681Z","commit":"ceab3e7e756dc3e27bf19bddd318159d710520ff","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:54:53.657Z","commit":"ceab3e7e756dc3e27bf19bddd318159d710520ff","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"ceab3e7e756dc3e27bf19bddd318159d710520ff","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:25:01.259Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"ceab3e7e756dc3e27bf19bddd318159d710520ff","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:26:13.681Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"ceab3e7e756dc3e27bf19bddd318159d710520ff","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:54:53.657Z"}]}