{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"awu12277-dsh-stock-watch","slug":"awu12277-dsh-stock-watch","rank":91,"url":"https://github.com/Awu12277/dsh-stock-watch","name":"Awu12277/dsh-stock-watch","category":"fun","description":{"zh":"A 股自选股实时行情盯盘插件：在 DeepSeek Harness（DSH）Web 界面的右上角显示一个可折叠弹窗，实时监控自选股行情、切换分组、查看分时与 K 线、设置买卖目标价。","en":"A-share watchlist real-time market monitoring plugin: a collapsible popup in the top-right corner of the DeepSeek Harness (DSH) web interface for real-time quote monitoring, group switching, intraday and candlestick (K-line) charts, and buy/sell target price settings."},"stars":57,"starsCheckedAt":"2026-08-21","repository":{"owner":"Awu12277","repo":"dsh-stock-watch","requestedRef":null,"subpath":""},"npm":null,"downloads":null,"installMode":"github-source","upstreamInstall":"dsh plugin --profile web add github:Awu12277/dsh-stock-watch","tarball":null,"added":"2026-08-15","page":"https://awesome-dsh-plugin.com/p/Awu12277/dsh-stock-watch/","screenshots":["https://raw.githubusercontent.com/Awu12277/dsh-stock-watch/main/screenshots/detail-kline-dark.png","https://raw.githubusercontent.com/Awu12277/dsh-stock-watch/main/screenshots/detail-minute-dark.png","https://raw.githubusercontent.com/Awu12277/dsh-stock-watch/main/screenshots/list-dark.png"],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"awu12277-dsh-stock-watch","slug":"awu12277-dsh-stock-watch","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:20:39.139Z","scanStatus":"static-complete","verdict":"pass","score":100,"commit":"0bd76f3f72b647249b2168fc50ae4955c6c86575","commitDate":"2026-08-17T16:22:44+08:00","artifactDigest":"sha256:3b869e3835b4d478d0e0ccc9cc28bee4a6f3106d100a52d7baf57e9f9ea79c23","downloadUrl":"https://github.com/Awu12277/dsh-stock-watch/archive/0bd76f3f72b647249b2168fc50ae4955c6c86575.tar.gz","installMode":"github-source","installCommand":"dsh plugin --profile web add github:Awu12277/dsh-stock-watch","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"dsh-stock-watch","packageVersion":"1.0.8","bundle":{"patch":"./cordis.patch.yml"},"client":{"platform":"web","inject":[]},"lifecycleScripts":{},"peerDependencies":[]},"identity":{"status":"found","installMode":"github-source","upstreamNpm":null,"manifestName":"dsh-stock-watch","nameMatch":null,"npm":{"name":"dsh-stock-watch","latestVersion":"1.0.8","publishedAt":"2026-08-17T08:23:04.801Z","createdAt":"2026-08-14T22:29:56.460Z","versionCount":17,"maintainers":1,"repository":null,"hasInstallScripts":false,"deprecated":false},"repositoryMatch":"missing","provenance":"none","tarballHost":null,"versionMatch":"match"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"dsh-stock-watch","name":"dsh-stock-watch","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["agent-control","browser-ui","environment","filesystem","host-bundle","network"],"outboundHosts":[{"host":"unpkg.com","count":2},{"host":"cdn.jsdelivr.net","count":2},{"host":"web.ifzq.gtimg.cn","count":2}],"findings":[{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"scripts/probe-fan-docked.mjs","pathClass":"source","line":44,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"以方法或属性形式出现（如 x.eval），并非全局 eval","hash":"28366978e2c23ab9f917d164"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"scripts/probe-fan-repro.mjs","pathClass":"source","line":19,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"以方法或属性形式出现（如 x.eval），并非全局 eval","hash":"4b6104298db63f6ba58c9cea"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"scripts/probe-fan.mjs","pathClass":"source","line":78,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"以方法或属性形式出现（如 x.eval），并非全局 eval","hash":"d4c9d69272281a6bacd7a709"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"scripts/probe-fan.mjs","pathClass":"source","line":137,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"以方法或属性形式出现（如 x.eval），并非全局 eval","hash":"d4c9d69272281a6bacd7a709"},{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"scripts/probe-zoom.mjs","pathClass":"source","line":121,"evidence":"eval(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","note":"以方法或属性形式出现（如 x.eval），并非全局 eval","hash":"2b7bc42efae30c18f1a75c91"}],"counts":{"critical":0,"high":0,"medium":0,"low":0},"rawCounts":{"critical":0,"high":5,"medium":0,"low":0},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":15,"bytesScanned":406821,"truncated":false,"lockfiles":[],"pathClasses":{"markdown":3,"source":9,"cordis":1,"data":1,"manifest":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:20:39.139Z","commit":"0bd76f3f72b647249b2168fc50ae4955c6c86575","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:19:27.744Z","commit":"0bd76f3f72b647249b2168fc50ae4955c6c86575","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:47:15.256Z","commit":"0bd76f3f72b647249b2168fc50ae4955c6c86575","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"0bd76f3f72b647249b2168fc50ae4955c6c86575","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:20:39.139Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"0bd76f3f72b647249b2168fc50ae4955c6c86575","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:19:27.744Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"0bd76f3f72b647249b2168fc50ae4955c6c86575","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:47:15.256Z"}]}