Skip to content

Remove retired dsh-fal-image-gen from editor picks #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
GooDAnDReaDY wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Remove retired dsh-fal-image-gen from editor picks #2

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 0 additions & 19 deletions data/codex-picks.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -669,25 +669,6 @@
"en": "Medium risk: the plugin intercepts request failures and transparently reroutes the current task to another configured model service, so prompts and code may reach fallback providers; role auto-match can issue one bounded model judgment, and both Web and TUI can rewrite fallback settings. Runtime code contains no direct network call, credential read, telemetry, or shell execution. The repository repair script is not run by the plugin and requires explicit --apply --backup. Keep only trusted providers in chains and constrain automatic switching."
}
},
{
"repo": "goodandready/dsh-fal-image-gen",
"pickedAt": "2026-08-20T10:36:04.694Z",
"reviewedCommit": "af40a36842ba5a13de1e384ad5686fee720a10b5",
"category": "fun",
"summary": {
"zh": "给 DSH 增加 generate_image 工具，支持 FAL 队列和 OpenAI 兼容图像 API；生成结果可在对话中显示，并保存到当前会话工作区。",
"en": "Adds a generate_image tool to DSH with support for the FAL queue and OpenAI-compatible image APIs; results render in the conversation and are saved in the active session workspace."
},
"reason": {
"zh": "v0.5.1 的 npm 包绑定已核实的 Git 提交，没有运行时依赖和安装生命周期脚本；本地 12 项 provider 测试全部通过。v0.5.0 抽出了统一 provider 层，v0.5.1 修复设置卡片因 Host 注册竞态而长期缺失的问题。",
"en": "The v0.5.1 npm package is bound to the verified Git commit and has no runtime dependencies or install lifecycle hooks; all 12 provider tests passed locally. v0.5.0 introduced a shared provider layer, and v0.5.1 fixes a Host registration race that could leave the settings card missing."
},
"safety": {
"risk": "medium",
"zh": "中风险：提示词和 API 凭据会发送给用户选择的 FAL 或自定义端点，插件还会下载 provider 返回的图片 URL，并把结果写入会话工作区或用户配置的绝对目录。静态检查未发现 Shell 执行、遥测、额外运行时依赖或安装脚本；建议只使用可信端点、保持 Web UI 监听在本机，并保留相对 outputDir。",
"en": "Medium risk: prompts and API credentials are sent to the selected FAL or custom endpoint, the plugin downloads image URLs returned by that provider, and it writes results to the session workspace or a user-configured absolute directory. Static review found no shell execution, telemetry, extra runtime dependencies, or install hooks; use trusted endpoints, keep the Web UI on loopback, and retain a relative outputDir."
}
},
{
"repo": "totoro-qaq/dsh-plugin-bridge",
"pickedAt": "2026-08-20T08:34:02.981Z",
Expand Down