JeremyWangCY/dsh-rea ↗★ 0

dsh-rea

Reverse engineering tools (REA) for the DeepSeek Harness, with a curated tool surface instead of REA's full 170-tool catalog 适合需要利用精简版REA工具进行导航和分析任务的逆向安全人员。

パッケージ
dsh-rea
互換性
未検証
Harness ピア範囲
>=0.0.1-rc.1 <0.1.0 || >=0.1.0-rc.1 <0.2.0-0
Cordis ピア範囲
4.0.2
バージョン
0.1.0
ライセンス
NOASSERTION
最終更新
2026/10/12

同名パッケージの別リポジトリ

インストール

$npx -p @deepseek-ai/dsh dsh plugin --profile web add github:JeremyWangCY/dsh-rea

ドキュメント

README 全文を読む ↗

Configuration

Defaults require nothing. Override through your profile's cordis.patch.yml:

- id: dsh-rea
  name: dsh-rea
  config:
    tools: navigate        # entry (default) | navigate | analyze | all, or an explicit name list
    version: '6.4.0'       # exact rea-agents version, pinned for stable schemas
    toolCallTimeoutMs: 300000
    env:
      REA_MCP_INPUT_SCHEMA_PROFILE: compact   # trim parameter descriptions
FieldDefaultMeaning
enabledtrueSet false to keep the plugin installed but inert
tools'entry'Tier name (entry/navigate/analyze/all), an explicit array of REA tool names, or null for everything
version'6.4.0'Exact rea-agents version; pinning keeps tool schemas stable across restarts
runner'npx'Package runner used to launch REA
env{}Extra child environment, merged over the inherited env
toolCallTimeoutMs300000Per-call timeout; native analysis can run long
failOnStartupErrorfalseReject activation when REA fails to start, instead of degrading to no tools

Usage

Registered tools use the rea__ prefix and route by target:

TargetFirst tool
ASAR or extracted JavaScript/Electron treerea__analyze_javascript_application
Native executablerea__open_binary, then rea__binary_overview
Archive, ZIP/APK/IPA/MSIX, or DMGrea__open_binary, then rea__inspect_artifact
Managed PE/CLI assemblyrea__inspect_managed_artifact
Browser page already openrea__list_browser_targets
Electron runtime already openrea__list_electron_targets

REA reports each result as an evidence_id. When a response is too large for the stdio budget, REA says so and points at rea__export_evidence_bundle (in the default tier) to retrieve the retained records.