Canonical semantic path
One primary path; alternate capabilities remain separate.What it may solve
DeepSeek Harness(DSH)GitHub 集成Plugin:一次认证(GITHUB_TOKEN 或 OAuth Device Flow)后,模型可直接调用 45 个 github_* 工具完成建仓、推送、提 PR、管 issue、搜索代码等;常规读写直接放行,危险Action(删除/force push/合并 PR/关 issue)保留审批门;token 存于 DSH credentials 服务,不落日志。对标 opencode GitHub MCP。
Imported third-party catalog description; not a Registry verification conclusion.Sources and public signals
ChenYiming-aaa/dsh-github
2 stars · — downloads
Signals were provided by the source catalog and do not imply quality or safety. 2026-09-19What can currently be confirmed
Active analysis coverage 5/5. Historical chains are retained but do not count toward current coverage.
Analysis completeSource structure
Conclusion: The source structure check completed without finding a structural issue.
Analysis completeRepository health
Conclusion: The GitHub repository is reachable and not archived. Public data: 2 stars, 2 commits, 0 forks, and 0 watches; latest commit 2026-08-27.
Analysis completenpm release
Conclusion: This plugin has no npm package source, so this item does not apply.
Analysis completeDSH compatibility
Conclusion: Compatibility verification did not pass: the bounded compatibility check did not pass. Test environment: DSH 0.1.6-alpha.2, web profile.
Analysis completeDependency audit
Conclusion: The dependency audit did not produce a complete report.
Not analyzedFunctional verification
The plugin’s advertised feature has not been automatically verified. Passing installation and startup does not prove that feature works.
Analysis completeStatic risk scan
Conclusion: The bounded static scan found none of its predefined risk signals. This is not proof of safety.
Analysis completePackage integrity
Conclusion: Package structure or integrity validation did not pass.
Automated evidence is scoped to the named artifact, DSH target and profile. It is not a blanket safety or feature-completeness claim.