{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"liguobao-deepseek-harness-remote","slug":"liguobao-deepseek-harness-remote","rank":104,"url":"https://github.com/liguobao/deepseek-harness-remote","name":"liguobao/deepseek-harness-remote","category":"remote","description":{"zh":"DeepSeek Harness 多端远程访问：从手机、平板、浏览器或另一台电脑继续进行中的会话，端到端加密通道（Noise IK + 自适应 Relay/WebRTC 传输），设备授权管理；远程端仅开放 ApiProxy 能力，支持 dsh-file-viewer 只读文件预览，不提供 Shell、远程桌面或写入权限。","en":"Multi-device remote access for DeepSeek Harness: continue an active session from your phone, tablet, browser, or another computer over an end-to-end encrypted channel (Noise IK + adaptive relay/WebRTC transport), with device authorization, ApiProxy-only remote capabilities, and read-only file preview via dsh-file-viewer — no shell, remote desktop, or write access."},"stars":45,"starsCheckedAt":"2026-08-21","repository":{"owner":"liguobao","repo":"deepseek-harness-remote","requestedRef":null,"subpath":""},"npm":null,"downloads":null,"installMode":"github-source","upstreamInstall":"dsh plugin --profile web add github:liguobao/deepseek-harness-remote","tarball":null,"added":"2026-08-16","page":"https://awesome-dsh-plugin.com/p/liguobao/deepseek-harness-remote/","screenshots":["https://raw.githubusercontent.com/liguobao/deepseek-harness-remote/main/docs/images/setting.png","https://raw.githubusercontent.com/liguobao/deepseek-harness-remote/main/docs/images/host-list.png","https://raw.githubusercontent.com/liguobao/deepseek-harness-remote/main/docs/images/remote.png"],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"liguobao-deepseek-harness-remote","slug":"liguobao-deepseek-harness-remote","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:20:52.538Z","scanStatus":"static-complete","verdict":"review","score":83,"commit":"33ea0e62f767dd21a67af0849d8af42d5e42dedb","commitDate":"2026-08-22T14:39:32+08:00","artifactDigest":"sha256:0b76f4493b0113982439c8613d97320e8f0d6feb8a1418cc359606182bd52e65","downloadUrl":"https://github.com/liguobao/deepseek-harness-remote/archive/33ea0e62f767dd21a67af0849d8af42d5e42dedb.tar.gz","installMode":"github-source","installCommand":"dsh plugin --profile web add github:liguobao/deepseek-harness-remote","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"dsh-remote","packageVersion":"0.3.28","bundle":{"patch":"./cordis.patch.yml"},"client":{"inject":["@deepseek-ai/dsh-client-connection","@deepseek-ai/dsh-client-locale","@deepseek-ai/dsh-client-ui-sidebar","@deepseek-ai/dsh-client-ui-slots","@deepseek-ai/dsh-client-ui-settings","@deepseek-ai/dsh-client-ui-settings-plugins"],"platform":"web"},"lifecycleScripts":{},"peerDependencies":["@deepseek-ai/cordis","@deepseek-ai/dsh-client-connection","@deepseek-ai/dsh-client-locale","@deepseek-ai/dsh-client-ui-sidebar","@deepseek-ai/dsh-client-ui-slots","@deepseek-ai/dsh-client-ui-settings","@deepseek-ai/dsh-client-ui-settings-plugins","@deepseek-ai/dsh-host-apiproxy","@deepseek-ai/dsh-settings"]},"identity":{"status":"found","installMode":"github-source","upstreamNpm":null,"manifestName":"dsh-remote","nameMatch":null,"npm":{"name":"dsh-remote","latestVersion":"0.8.6","publishedAt":"2026-08-21T04:22:05.846Z","createdAt":"2026-08-14T04:29:35.533Z","versionCount":44,"maintainers":1,"repository":"git+https://github.com/flymysql/dsh-remote.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"mismatch","provenance":"none","tarballHost":null,"versionMatch":"differs"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"dsh-remote","name":"dsh-remote","path":"cordis.patch.yml","disabled":false},{"id":"dsh-remote","name":"ds-harness-remote","path":"packages/plugin/cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["agent-control","browser-ui","credentials","environment","filesystem","host-bundle","network","session","subprocess"],"outboundHosts":[{"host":"dsh.r2049.cn","count":7},{"host":"remote.example.com","count":2},{"host":"api.github.com","count":1},{"host":"www.zhihu.com","count":1},{"host":"www.npmjs.com","count":1}],"findings":[{"id":"HT-IDENTITY-001","title":"npm 上存在同名包但指向其他仓库","severity":"low","confidence":"medium","path":"package.json","pathClass":"manifest","line":1,"evidence":"npm repository=git+https://github.com/flymysql/dsh-remote.git ≠ liguobao/deepseek-harness-remote","remediation":"npm 上存在同名包但指向其它仓库；从源码安装时请使用 github: 引用并锁定 commit。","layer":"identity","hash":"65b17f85e9703bbd5a2a6d68"},{"id":"HT-VULN-001","title":"依赖存在已知漏洞","severity":"high","confidence":"medium","path":"pnpm-lock.yaml","pathClass":"manifest","line":1,"evidence":"image-size@1.2.1 GHSA-5p2g-fcmc-qvqq (CVE-2025-71329)","remediation":"关注 GHSA-5p2g-fcmc-qvqq 的修复进展，并评估该依赖是否可移除。","layer":"vulnerability","hash":"0974f77c8f7fd6a396abc592","review":{"verdict":"unclear","reason":"lockfile被截断未显示image-size@1.2.1具体挂靠于哪个上层依赖及是否被插件运行时代码实际调用，无法判断CVE-2025-71329是否可达。","model":"sonnet","reviewedAt":"2026-08-21T10:48:05.925Z"}},{"id":"HT-VULN-001","title":"依赖存在已知漏洞","severity":"high","confidence":"medium","path":"pnpm-lock.yaml","pathClass":"manifest","line":1,"evidence":"image-size@1.2.1 GHSA-w3rx-r6r6-pgpr (CVE-2025-71330)","remediation":"关注 GHSA-w3rx-r6r6-pgpr 的修复进展，并评估该依赖是否可移除。","layer":"vulnerability","hash":"0ede662304adbbf23ce6cb74","review":{"verdict":"unclear","reason":"同一image-size@1.2.1，命中内容仅为pnpm-lock.yaml顶部截断片段，未见其具体依赖路径或使用位置，无法确认CVE-2025-71330是否被实际触发。","model":"sonnet","reviewedAt":"2026-08-21T10:48:05.925Z"}},{"id":"HT-VULN-001","title":"依赖存在已知漏洞","severity":"medium","confidence":"medium","path":"pnpm-lock.yaml","pathClass":"manifest","line":1,"evidence":"uuid@7.0.3 GHSA-w5hq-g745-h8pq (CVE-2026-41907) fixed in 11.1.1","remediation":"升级 uuid 至 11.1.1 或更高版本。","layer":"vulnerability","hash":"85cbe6a01d7aa813c51778a7"}],"counts":{"critical":0,"high":2,"medium":1,"low":1},"rawCounts":{"critical":0,"high":2,"medium":1,"low":1},"vulnerabilities":[{"id":"GHSA-5p2g-fcmc-qvqq","aliases":["CVE-2025-71329"],"package":"image-size","version":"1.2.1","severity":"high","fixed":null,"summary":"image-size: JXL and HEIF parsers allow denial of service through infinite loops"},{"id":"GHSA-w3rx-r6r6-pgpr","aliases":["CVE-2025-71330"],"package":"image-size","version":"1.2.1","severity":"high","fixed":null,"summary":"image-size: ICNS parser allows denial of service through an infinite loop"},{"id":"GHSA-w5hq-g745-h8pq","aliases":["CVE-2026-41907","CVE-2026-41988"],"package":"uuid","version":"7.0.3","severity":"medium","fixed":"11.1.1","summary":"uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided"}],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-present","vulnerabilities":"complete","identity":"complete","artifact":"not-compared","llmReview":"complete","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":173,"bytesScanned":1740884,"truncated":false,"lockfiles":["pnpm-lock.yaml"],"pathClasses":{"test-example-docs":44,"markdown":20,"source":79,"data":14,"manifest":8,"i18n":4,"cordis":2,"yaml":2}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"],"review":{"model":"sonnet","reviewedAt":"2026-08-22T08:20:52.538Z","summary":null,"intentMatch":null,"findingsReviewed":2,"findingsCandidates":2,"fromCache":2,"usage":null}},"timeline":[{"scannedAt":"2026-08-22T08:20:52.538Z","commit":"33ea0e62f767dd21a67af0849d8af42d5e42dedb","policyVersion":"HT-DSH-0.2.2","verdict":"review","status":"static-complete"},{"scannedAt":"2026-08-21T11:20:11.956Z","commit":"9df2052098ee264edc0d0b9245367a063458c81e","policyVersion":"HT-DSH-0.2.1","verdict":"review","status":"static-complete"},{"scannedAt":"2026-08-21T10:48:05.925Z","commit":"9df2052098ee264edc0d0b9245367a063458c81e","policyVersion":"HT-DSH-0.2.0","verdict":"review","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"33ea0e62f767dd21a67af0849d8af42d5e42dedb","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:20:52.538Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"9df2052098ee264edc0d0b9245367a063458c81e","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:20:11.956Z"},{"kind":"first-scan","from":null,"to":"review","commit":"9df2052098ee264edc0d0b9245367a063458c81e","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:48:05.925Z"}]}