{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"ai-galaxy-gpu-dsh-sound","slug":"ai-galaxy-gpu-dsh-sound","rank":1222,"url":"https://github.com/AI-Galaxy-GPU/dsh-sound","name":"AI-Galaxy-GPU/dsh-sound","category":"voice","description":{"zh":"六类事件独立提示音：回合完成、审批、提问、计划评审、目标受阻、任务失败各有独立声音与音量，可在 Web 设置面板配置（内置合成音 / 静音 / 本地音频文件）。","en":"Per-event sound notifications: turn completion, approval, question, plan-review, goal-blocked, and task-failure each get their own sound and volume, configurable in the Web UI (built-in synth, mute, or local audio file)."},"stars":1,"starsCheckedAt":"2026-08-21","repository":{"owner":"AI-Galaxy-GPU","repo":"dsh-sound","requestedRef":null,"subpath":""},"npm":null,"downloads":null,"installMode":"github-source","upstreamInstall":"dsh plugin --profile web add github:AI-Galaxy-GPU/dsh-sound","tarball":null,"added":"2026-08-16","page":"https://awesome-dsh-plugin.com/p/AI-Galaxy-GPU/dsh-sound/","screenshots":["https://raw.githubusercontent.com/AI-Galaxy-GPU/dsh-sound/main/assets/screenshots/sound-image.png"],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"ai-galaxy-gpu-dsh-sound","slug":"ai-galaxy-gpu-dsh-sound","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:32:55.392Z","scanStatus":"static-complete","verdict":"pass","score":99,"commit":"99b20f3bb5ca27c64d37a1a855900ce832a541e5","commitDate":"2026-08-16T14:53:12+08:00","artifactDigest":"sha256:69f4c4fc7137aee620ea998afe985f9491d769d1c2ae936ca6dd7cab54d0bbdb","downloadUrl":"https://github.com/AI-Galaxy-GPU/dsh-sound/archive/99b20f3bb5ca27c64d37a1a855900ce832a541e5.tar.gz","installMode":"github-source","installCommand":"dsh plugin --profile web add github:AI-Galaxy-GPU/dsh-sound","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"dsh-sound","packageVersion":"0.3.3","bundle":{"patch":"./cordis.patch.yml"},"client":{"platform":"web","inject":["@deepseek-ai/dsh-client-runtime","@deepseek-ai/dsh-client-ui-settings"]},"lifecycleScripts":{},"peerDependencies":["@deepseek-ai/cordis"]},"identity":{"status":"found","installMode":"github-source","upstreamNpm":null,"manifestName":"dsh-sound","nameMatch":null,"npm":{"name":"dsh-sound","latestVersion":"0.0.1","publishedAt":"2026-08-19T07:47:02.204Z","createdAt":"2026-08-19T07:47:01.744Z","versionCount":1,"maintainers":1,"repository":"git+https://github.com/dushaobindoudou/dsh-sound.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"mismatch","provenance":"none","tarballHost":null,"versionMatch":"differs"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"dsh-sound","name":"dsh-sound","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["browser-ui","filesystem","host-bundle","session"],"outboundHosts":[],"findings":[{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"tools/test-client.mjs","pathClass":"source","line":118,"evidence":"new Function(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","hash":"942e95b1a477686df9dc74bf","review":{"verdict":"placeholder","reason":"该 new Function 位于 tools/test-client.mjs 测试脚本中，仅用于在单测里加载自身打包后的客户端源码进行沙盒模拟测试，不在 package.json files 列表内，不随插件发布或在真实宿主运行时执行。","model":"sonnet","reviewedAt":"2026-08-21T11:01:41.318Z"}},{"id":"HT-IDENTITY-001","title":"npm 上存在同名包但指向其他仓库","severity":"low","confidence":"medium","path":"package.json","pathClass":"manifest","line":1,"evidence":"npm repository=git+https://github.com/dushaobindoudou/dsh-sound.git ≠ ai-galaxy-gpu/dsh-sound","remediation":"npm 上存在同名包但指向其它仓库；从源码安装时请使用 github: 引用并锁定 commit。","layer":"identity","hash":"f9565ded324938965caedd08"}],"counts":{"critical":0,"high":0,"medium":0,"low":1},"rawCounts":{"critical":0,"high":1,"medium":0,"low":1},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-present","vulnerabilities":"complete","identity":"complete","artifact":"not-compared","llmReview":"complete","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":12,"bytesScanned":132273,"truncated":false,"lockfiles":["package-lock.json"],"pathClasses":{"markdown":3,"cordis":1,"source":5,"data":1,"manifest":1,"script":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"],"review":{"model":"sonnet","reviewedAt":"2026-08-22T08:32:55.392Z","summary":null,"intentMatch":null,"findingsReviewed":1,"findingsCandidates":1,"fromCache":1,"usage":null}},"timeline":[{"scannedAt":"2026-08-22T08:32:55.392Z","commit":"99b20f3bb5ca27c64d37a1a855900ce832a541e5","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:37:10.187Z","commit":"99b20f3bb5ca27c64d37a1a855900ce832a541e5","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:06:13.104Z","commit":"99b20f3bb5ca27c64d37a1a855900ce832a541e5","policyVersion":"HT-DSH-0.2.0","verdict":"caution","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"99b20f3bb5ca27c64d37a1a855900ce832a541e5","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:32:55.392Z"},{"kind":"verdict-change","from":"caution","to":"pass","commit":"99b20f3bb5ca27c64d37a1a855900ce832a541e5","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:37:10.187Z"},{"kind":"first-scan","from":null,"to":"caution","commit":"99b20f3bb5ca27c64d37a1a855900ce832a541e5","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T11:06:13.104Z"}]}