
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
dsh-web-search-zhihu
Advanced tools
DSH 插件:注册 zhihu-global web search provider,使内置 web_search 工具改走知乎开放平台全网搜索(免费)。Registers a zhihu-global provider into ctx.web so the built-in web_search tool routes through Zhihu's free global search API.
DSH(DeepSeek Harness)插件:向 ctx.web 注册 zhihu-global search provider,使内置 web_search 工具改走知乎开放平台全网搜索(免费,5000 次/日),替代默认的 DeepSeek 官方搜索。
dsh plugin --profile web add dsh-web-search-zhihu
dsh web # 重启生效
安装后包内 patch 自动注册插件行并把 web 行的 searchProvider 切换为 zhihu-global(config 整体替换语义;你的用户层 cordis.patch.yml 若已配置该行,以你后应用的层为准)。
先在知乎开放平台个人中心获取 Access Secret,然后三选一(优先级从高到低):
apiKey~/.dsh/.credentials.yaml 写入 ZHIHU_API_KEY: <secret>(推荐,0600 权限)ZHIHU_API_KEY逐请求解析,改密钥即刻生效,不缓存不落日志。
- id: web-search-zhihu
name: dsh-web-search-zhihu
config:
apiKeyEnv: ZHIHU_API_KEY # 凭据引用名,默认即此
attribution: true # 结果归属标识行,默认开启
# apiKey: <literal> # 字面密钥(不推荐,优先用凭据存储)
知乎全网搜索索引全网,可能返回非知乎域名的结果,不能靠 URL 域名辨认。开启 attribution(默认)时,每次搜索结果首行带:
[via zhihu-global · 知乎全网搜索]
模型可见,且渲染在搜索卡片的 answer 区域(展开 web_search 工具卡片即可见)。attribution: false 可关闭。
| 知乎字段 | 工具字段 | 处理 |
|---|---|---|
Url | sources[].url | 去除 utm_* 追踪参数 |
Title | sources[].title | 原样 |
ContentText | sources[].snippet | 去 HTML 标签、压空白、截 300 字符 |
EditTime | sources[].publishedAt | 秒级时间戳 → ISO 8601 |
错误:HTTP 非 200 / 知乎业务码(20001 鉴权、30001 限频、30002 配额等带码入消息)→ WEB_PROVIDER_ERROR;密钥缺失 → WEB_PROVIDER_CREDENTIAL_MISSING;取消 → WEB_ABORTED。不重试。
searchProvider 改回 deepseek-official 并重启;或 dsh plugin --profile web remove dsh-web-search-zhihu。
ctx.web provider 注册表)DSH 宿主组合($DSH_HOME/profiles/web/)
├─ cordis.patch.yml ──────────── ① web 行: searchProvider=zhihu-global(切换点)
│ ② insert: web-search-zhihu 插件行
└─ plugins/dsh-web-search-zhihu ─→ 本包(npm 安装或 symlink 两种部署)
│
▼ registerSearchProvider({ id: 'zhihu-global', ... })
ctx.web 服务(dsh-web,provider 注册表,配置 id 优先于注册顺序)
│
▼ search({query, maxResults})
web_search 工具(dsh-tool-web,完全不感知 provider:schema/提示词/UI 不变)
ln -s <本仓库> ~/.dsh/profiles/web/plugins/dsh-web-search-zhihu,再在 profile 的 cordis.patch.yml 写入与包内 patch 相同的两段。node test/probe.mjs # 离线映射断言(无网络)
node test/probe.mjs --live # 在线实测(读 ~/.dsh/.credentials.yaml),产物落盘 test/artifacts/
MIT
FAQs
DSH 插件:注册 zhihu-global web search provider,使内置 web_search 工具改走知乎开放平台全网搜索(免费)。Registers a zhihu-global provider into ctx.web so the built-in web_search tool routes through Zhihu's free global search API.
The npm package dsh-web-search-zhihu receives a total of 19 weekly downloads. As such, dsh-web-search-zhihu popularity was classified as not popular.
We found that dsh-web-search-zhihu demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.