{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"omdsh-dev-dsh-data-agent","slug":"omdsh-dev-dsh-data-agent","rank":60,"url":"https://github.com/omdsh-dev/dsh-data-agent","name":"omdsh-dev/dsh-data-agent","category":"tools","description":{"zh":"让 AI 帮你连数据库、写 SQL。","en":"Let the AI connect to databases and write SQL for you."},"stars":105,"starsCheckedAt":"2026-08-21","repository":{"owner":"omdsh-dev","repo":"dsh-data-agent","requestedRef":null,"subpath":""},"npm":"@yejiming/dsh-data-agent","downloads":2136,"installMode":"npm","upstreamInstall":"dsh plugin --profile web add @yejiming/dsh-data-agent","tarball":null,"added":"2026-08-13","page":"https://awesome-dsh-plugin.com/p/omdsh-dev/dsh-data-agent/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"omdsh-dev-dsh-data-agent","slug":"omdsh-dev-dsh-data-agent","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:20:17.678Z","scanStatus":"static-complete","verdict":"pass","score":99,"commit":"7caa266c1036d7e3b42d4bc710350c1406b56957","commitDate":"2026-08-20T14:19:48+08:00","artifactDigest":"sha256:341a006e61e3ac5ad9ff7cf54aefc9ed9e206ae92f0dab941890398d55c3feb5","downloadUrl":"https://github.com/omdsh-dev/dsh-data-agent/archive/7caa266c1036d7e3b42d4bc710350c1406b56957.tar.gz","installMode":"npm","installCommand":"dsh plugin --profile web add @yejiming/dsh-data-agent","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"@yejiming/dsh-data-agent","packageVersion":"0.0.13","bundle":{"patch":"./cordis.patch.yml"},"client":{"inject":["@deepseek-ai/dsh-client-locale","@deepseek-ai/dsh-client-runtime","@deepseek-ai/dsh-client-ui-tool","@deepseek-ai/dsh-client-ui-conversation"],"platform":"web"},"lifecycleScripts":{},"peerDependencies":["@deepseek-ai/cordis","@deepseek-ai/dsh-agent","@deepseek-ai/dsh-agent-presets","@deepseek-ai/dsh-client-locale","@deepseek-ai/dsh-client-runtime","@deepseek-ai/dsh-client-ui-conversation","@deepseek-ai/dsh-client-ui-primitives","@deepseek-ai/dsh-client-ui-slots","@deepseek-ai/dsh-client-ui-tool","@deepseek-ai/dsh-commands","@deepseek-ai/dsh-credentials","@deepseek-ai/dsh-host-webserver","@deepseek-ai/dsh-invariants","@deepseek-ai/dsh-scope","@deepseek-ai/dsh-storage","@deepseek-ai/dsh-storage-domain","@deepseek-ai/dsh-storage-json","@deepseek-ai/dsh-subprocess","@deepseek-ai/dsh-tools","@deepseek-ai/dsh-user-questions"]},"identity":{"status":"found","installMode":"npm","upstreamNpm":"@yejiming/dsh-data-agent","manifestName":"@yejiming/dsh-data-agent","nameMatch":true,"npm":{"name":"@yejiming/dsh-data-agent","latestVersion":"0.0.13","publishedAt":"2026-08-19T09:57:31.255Z","createdAt":"2026-08-14T07:25:19.259Z","versionCount":10,"maintainers":1,"repository":"git+https://github.com/omdsh-dev/dsh-data-agent.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"match","provenance":"none","tarballHost":null,"versionMatch":"match"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"data-agent","name":"@yejiming/dsh-data-agent","path":"cordis.patch.yml","disabled":false},{"id":"data-agent-routes","name":"@yejiming/dsh-data-agent/routes","path":"cordis.patch.yml","disabled":false}],"overrides":[{"id":"persona","tier":"normal","mode":"override","disabled":false,"replacesImplementation":true,"name":"@deepseek-ai/dsh-persona","keys":["text"],"path":"preset/data-agent/agent.cordis.yml"},{"id":"tool-str-replace-editor","tier":"normal","mode":"override","disabled":false,"replacesImplementation":true,"name":"@deepseek-ai/dsh-tool-str-replace-editor","keys":["maxOutputChars"],"path":"preset/data-agent/agent.cordis.yml"}],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["agent-control","browser-ui","credentials","environment","filesystem","host-bundle","network","subprocess"],"outboundHosts":[{"host":"dsh.internal","count":2}],"findings":[{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"scripts/dsh-ecosystem-pack-evidence.mjs","pathClass":"source","line":3,"evidence":"spawnSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"b0b58da0cdce50b011f4b65e"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"medium","layer":"static","path":"scripts/dsh-ecosystem-pack-evidence.mjs","pathClass":"source","line":3,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","hash":"f0e5b980517b5d74581ec1d2"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/ecosystem-conformance.spec.ts","pathClass":"test-example-docs","line":239,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"bb3b85637a48e9c33887b4bf"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/sqlite-smoke.spec.ts","pathClass":"test-example-docs","line":8,"evidence":"execFileSync","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"7f277bc47e97e032276ef720"},{"id":"HT-EXEC-001","title":"直接创建宿主子进程","severity":"low","confidence":"low","layer":"static","path":"tests/sqlite-smoke.spec.ts","pathClass":"test-example-docs","line":8,"evidence":"node:child_process","remediation":"通过 DSH 的受控 subprocess/shell seam 执行，并公开命令、参数及审批策略。","note":"位于测试、示例或文档目录","hash":"3c6e02ce87d07b1c2fd93263"}],"counts":{"critical":0,"high":0,"medium":0,"low":2},"rawCounts":{"critical":0,"high":0,"medium":0,"low":5},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-present","vulnerabilities":"complete","identity":"complete","artifact":"not-compared","llmReview":"not-needed","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":127,"bytesScanned":1354152,"truncated":false,"lockfiles":["pnpm-lock.yaml"],"pathClasses":{"markdown":2,"data":8,"test-example-docs":34,"cordis":2,"source":77,"manifest":1,"yaml":3}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"]},"timeline":[{"scannedAt":"2026-08-22T08:20:17.678Z","commit":"7caa266c1036d7e3b42d4bc710350c1406b56957","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:18:59.987Z","commit":"7caa266c1036d7e3b42d4bc710350c1406b56957","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:46:50.219Z","commit":"7caa266c1036d7e3b42d4bc710350c1406b56957","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"7caa266c1036d7e3b42d4bc710350c1406b56957","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:20:17.678Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"7caa266c1036d7e3b42d4bc710350c1406b56957","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:18:59.987Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"7caa266c1036d7e3b42d4bc710350c1406b56957","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:46:50.219Z"}]}