Dsh Subprocess Inherit Environment
zhangzujian/dsh-subprocess-inherit-environment · skills
DSH plugin that forwards the complete Harness environment through ctx.subprocess.
★ 2GitHub stars
0Forks
2026-08-15Last updated
JavaScriptLanguage
MITLicense
Key features
- This plugin disables DSH's subprocess credential isolation.
- Every caller that uses the wrapped subprocess service can pass the Harness process's API keys, tokens, passwords, secrets, cookies, proxy credentials, and other environment values to child processes.
- Model-generated commands, repository scripts, package installers, CLIs, MCP servers, and terminal programs may read or exfiltrate those values.
Install command
dsh plugin --profile web add github:zhangzujian/dsh-subprocess-inherit-environment