What it may solve
WorkBuddy 风格的 DeepSeek Harness Web Plugin:拖拽/粘贴文件与文件夹生成输入框引用气泡(附绝对路径)、@ 菜单检索缓存文件、对话区文件卡片、read_document 工具。
Imported third-party catalog description; not a Registry verification conclusion.WorkBuddy 风格的 DeepSeek Harness Web Plugin:拖拽/粘贴文件与文件夹生成输入框引用气泡(附绝对路径)、@ 菜单检索缓存文件、对话区文件卡片、read_document 工具。
Author: miaoxintechnology · Memory · Catalog snapshot: 2026-09-19Canonical semantic path
WorkBuddy 风格的 DeepSeek Harness Web Plugin:拖拽/粘贴文件与文件夹生成输入框引用气泡(附绝对路径)、@ 菜单检索缓存文件、对话区文件卡片、read_document 工具。
Imported third-party catalog description; not a Registry verification conclusion.miaoxintechnology/dsh-workbuddy-files
— stars · 696 downloads
Signals were provided by the source catalog and do not imply quality or safety. 2026-09-19Active analysis coverage 1/5. Historical chains are retained but do not count toward current coverage.
Source structure has not been analyzed.
Repository metadata has not been analyzed.
npm release metadata has not been analyzed.
Conclusion: Compatibility verification passed. Installation, profile loading, and sustained startup all completed. Test environment: DSH 0.1.6-alpha.2, web profile.
Conclusion: This bounded audit reported 0 known vulnerabilities. It covers only the locked versions and audit source; zero reports is not proof of safety.
The plugin’s advertised feature has not been automatically verified. Passing installation and startup does not prove that feature works.
Conclusion: The scan observed 2 code capabilities: may create or modify files, may access the network. No predefined elevated-risk condition was triggered; this is not proof of safety.
Conclusion: Package name, version, entrypoints, and checksum passed validation. Artifact: dsh-workbuddy-files@0.1.5; SHA-256: abe74d57d6464908ffda6b0a28e66f94af93c0c0611ce54ec1da5d5fdea7f896.
Automated evidence is scoped to the named artifact, DSH target and profile. It is not a blanket safety or feature-completeness claim.
Describe your task in a DSH conversation and mention dsh-workbuddy-files. After installing or updating the manager from npm latest, it can find this candidate through Registry, then inspect its actual source and version locally.
dsh-workbuddy-filesAnalyzed 0.1.5github:miaoxintechnology/dsh-workbuddy-filesExact version not resolved