Skills/ClawHub/fore-vip-ds-harness

fore-vip-ds-harness@1.0.0

VERIFIED· install only

Publisher claims: "DeepSeek Harness（dsh）傻瓜式本地启动助手。一句话讲清 DSH 是什么，引导在 DeepSeek 开放平台获取 API Key，按本机系统（macOS/Windows/Linux）实时装好 Node、配置 npm 国内镜像、安装并启动 dsh，并就地生成桌面快捷方式（启动服务并打开 http://localhost:3080）。运行脚本由 Agent 按系统环境实时写出，不依赖任何随包文件。触发词：DSH、DeepSeek Harness、dsh、本地部署 DeepSeek、DeepSeek Agent 框架、傻瓜式启动。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher onsoul · publishing for 84 daysInstalls 406Last detonated 23 h ago
$clawhub install fore-vip-ds-harness
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 85/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:145 · npx invocation of non-well-known package — may execute untrusted code| `npx -y @deepseek-ai/dsh web` | 免安装直接体验 |Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File permission modification commandSKILL.md:113 · File permission modification command — agent changes file ownership/permissions写完后执行：`chmod +x ~/Desktop/DeepSeekHarness.desktop`Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Privileged sudo commandSKILL.md:72 · Privileged sudo command — agent may execute with elevated privileges# sudo dnf install -y nodejs npm # FedoraFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File permission modification commandSKILL.md:101 · File permission modification command — agent changes file ownership/permissions写完后执行：`chmod +x ~/Desktop/DeepSeek\ Harness.command`Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Privileged sudo commandSKILL.md:71 · Privileged sudo command — agent may execute with elevated privilegessudo apt update && sudo apt install -y nodejs npm # Debian/UbuntuFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packageSKILL.md:87 · npx invocation of non-well-known package — may execute untrusted code> 不想全局装可改用 `npx -y @deepseek-ai/dsh web`（无需 install）。Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈1,130 tok
1 file · 2 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.