{"schemaVersion":2,"dataVersion":"20260822T105549Z-0a0b366f","generatedAt":"2026-08-22T10:55:49.138Z","source":{"id":"wm-coder-custom-first-control-prompt","slug":"wm-coder-custom-first-control-prompt","rank":248,"url":"https://github.com/WM-CODER/custom-first-control-prompt","name":"WM-CODER/custom-first-control-prompt","category":"dev","description":{"zh":"通过流拦截将部署级系统提示词段落与参考对话注入每次对话请求，附带 Web 设置面板。","en":"Inject deployment-configured system-prompt sections and reference exchanges into every conversation request via stream interception, with a web settings panel."},"stars":12,"starsCheckedAt":"2026-08-21","repository":{"owner":"WM-CODER","repo":"custom-first-control-prompt","requestedRef":null,"subpath":""},"npm":"@wm-coders/dsh-custom-first-control-prompt","downloads":0,"installMode":"npm","upstreamInstall":"dsh plugin --profile web add @wm-coders/dsh-custom-first-control-prompt","tarball":null,"added":"2026-08-21","page":"https://awesome-dsh-plugin.com/p/WM-CODER/custom-first-control-prompt/","screenshots":[],"discovery":{"provider":"awesome-dsh-plugin","channel":"plugins.json","indexUrl":"https://github.com/awesome-dsh-plugin/awesome-dsh-plugin","selection":"all curated entries"}},"report":{"sourceId":"wm-coder-custom-first-control-prompt","slug":"wm-coder-custom-first-control-prompt","policyVersion":"HT-DSH-0.2.2","scannedAt":"2026-08-22T08:22:46.532Z","scanStatus":"static-complete","verdict":"pass","score":100,"commit":"d2c9a0535c452a9eb1928b76e6b21da5337f9eb2","commitDate":"2026-08-21T20:04:15+08:00","artifactDigest":"sha256:df3225e38d35d9dbd23b22f802fbe01e3dba3d4d8976d923c7d94cdecea174e8","downloadUrl":"https://github.com/WM-CODER/custom-first-control-prompt/archive/d2c9a0535c452a9eb1928b76e6b21da5337f9eb2.tar.gz","installMode":"npm","installCommand":"dsh plugin --profile web add @wm-coders/dsh-custom-first-control-prompt","manifest":{"found":true,"path":"package.json","parseError":null,"packageName":"@wm-coders/dsh-custom-first-control-prompt","packageVersion":"0.2.3","bundle":{"patch":"./cordis.patch.yml"},"client":{"inject":["@deepseek-ai/dsh-client-runtime","@deepseek-ai/dsh-api-remotes","@deepseek-ai/dsh-client-locale","@deepseek-ai/dsh-client-ui-settings","@deepseek-ai/dsh-client-ui-conversation"],"platform":"web"},"lifecycleScripts":{},"peerDependencies":["@deepseek-ai/dsh-llm","@deepseek-ai/dsh-system-prompt","@deepseek-ai/dsh-typert-protocol","@deepseek-ai/cordis","@deepseek-ai/dsh-api-remotes","@deepseek-ai/dsh-client-locale","@deepseek-ai/dsh-client-runtime","@deepseek-ai/dsh-client-ui-conversation","@deepseek-ai/dsh-client-ui-settings","@deepseek-ai/dsh-client-ui-slots"]},"identity":{"status":"found","installMode":"npm","upstreamNpm":"@wm-coders/dsh-custom-first-control-prompt","manifestName":"@wm-coders/dsh-custom-first-control-prompt","nameMatch":true,"npm":{"name":"@wm-coders/dsh-custom-first-control-prompt","latestVersion":"0.2.1","publishedAt":"2026-08-20T08:47:25.236Z","createdAt":"2026-08-20T07:34:28.272Z","versionCount":2,"maintainers":1,"repository":"git+https://github.com/WM-CODER/custom-first-control-prompt.git","hasInstallScripts":false,"deprecated":false},"repositoryMatch":"match","provenance":"none","tarballHost":null,"versionMatch":"differs"},"permissions":{"bundlePatch":"cordis.patch.yml","inserts":[{"id":"custom-first-control-prompt","name":"@wm-coders/dsh-custom-first-control-prompt","path":"cordis.patch.yml","disabled":false}],"overrides":[],"jsExpressions":0,"clientPlatform":"web","parseErrors":[]},"capabilities":["agent-control","browser-ui","filesystem","host-bundle","session"],"outboundHosts":[],"findings":[{"id":"HT-RUNTIME-001","title":"动态代码执行","severity":"high","confidence":"low","layer":"static","path":"lib/client.js","pathClass":"source","line":147,"evidence":"new Function(","remediation":"使用静态模块和受约束的配置解析器，避免在宿主权限下执行动态字符串。","hash":"86761fdb9c6cdb64004c5325","review":{"verdict":"sanitized","reason":"new Function(\"\") 仅用固定空字符串做 eval/Function 可用性探测（allowsEval，zod 库内部逻辑），未传入任何用户或远程输入，不构成动态代码执行风险。","model":"sonnet","reviewedAt":"2026-08-21T10:51:49.670Z"}}],"counts":{"critical":0,"high":0,"medium":0,"low":0},"rawCounts":{"critical":0,"high":1,"medium":0,"low":0},"vulnerabilities":[],"coverage":{"source":"complete","manifest":"complete","bundleConfig":"complete","dependencies":"lockfile-missing","vulnerabilities":"lockfile-missing","identity":"complete","artifact":"not-compared","llmReview":"complete","dynamicRuntime":"not-run","humanReview":"not-run"},"inventory":{"filesScanned":68,"bytesScanned":568317,"truncated":false,"lockfiles":[],"pathClasses":{"markdown":7,"test-example-docs":6,"cordis":1,"script":11,"source":41,"manifest":1,"data":1}},"limitations":["此结果为源码静态检测，不等同于无漏洞证明。","尚未比对 npm 发布包与源码的一致性，也未执行隔离运行和人工复核。","危险能力可能是插件功能所需，需结合用途与证据人工判断。"],"limitationKeys":["static-analysis-only","no-artifact-runtime-human-review","capability-needs-context"],"review":{"model":"sonnet","reviewedAt":"2026-08-22T08:22:46.532Z","summary":null,"intentMatch":null,"findingsReviewed":1,"findingsCandidates":1,"fromCache":1,"usage":null}},"timeline":[{"scannedAt":"2026-08-22T08:22:46.532Z","commit":"d2c9a0535c452a9eb1928b76e6b21da5337f9eb2","policyVersion":"HT-DSH-0.2.2","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T11:23:04.310Z","commit":"c9c98359854fcf99ec2be417fc70b4bef623e802","policyVersion":"HT-DSH-0.2.1","verdict":"pass","status":"static-complete"},{"scannedAt":"2026-08-21T10:51:47.845Z","commit":"c9c98359854fcf99ec2be417fc70b4bef623e802","policyVersion":"HT-DSH-0.2.0","verdict":"pass","status":"static-complete"}],"events":[{"kind":"policy-change","from":"HT-DSH-0.2.1","to":"HT-DSH-0.2.2","commit":"d2c9a0535c452a9eb1928b76e6b21da5337f9eb2","policyVersion":"HT-DSH-0.2.2","at":"2026-08-22T08:22:46.532Z"},{"kind":"policy-change","from":"HT-DSH-0.2.0","to":"HT-DSH-0.2.1","commit":"c9c98359854fcf99ec2be417fc70b4bef623e802","policyVersion":"HT-DSH-0.2.1","at":"2026-08-21T11:23:04.310Z"},{"kind":"first-scan","from":null,"to":"pass","commit":"c9c98359854fcf99ec2be417fc70b4bef623e802","policyVersion":"HT-DSH-0.2.0","at":"2026-08-21T10:51:47.845Z"}]}