Security audit
deepseek-harness-desktop-shell
Security checks for vulnerabilities and agentic risk
Overview
This skill is a coherent guide for packaging a local DeepSeek Harness web UI into an Electron desktop app, with the main risks disclosed and tied to that purpose.
Install this skill only if you want an agent to help create an Electron wrapper for a local DeepSeek Harness instance. Before proceeding, review any npm install, packaging, or auto-launch steps, and be aware that preserving Harness plugins means the resulting app will allow the local Harness instance and its plugins to operate normally.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.