dshbase

插件目录 / Developer / dsh-entity-dd

dsh-entity-dd

已验证 · 实测可装 sherconan

✓ 持续维护 基于 2 个官方 DSH 包

查看 GitHub ↗ ← 返回插件目录

1Stars
0Forks
0未关闭 issue
JavaScript语言
2026-08-15最近推送
跨平台平台

功能简介

出海对手尽调:确认法人,判断资料,免费数据源。

✅
我们的评价
可用 — 实测通过,早期项目

出海对手尽调:确认法人,判断资料,免费数据源。 实测能干净安装、正常启动。早期项目,但功能可用。

「已验证」表示我们的自动化 CI 在干净 profile 里实际执行了 dsh plugin add 并启动成功——仅此而已。功能描述与版本兼容性均为作者声明。这不是安全审计,也不代表对第三方代码的背书。

README

dsh-entity-dd 锟斤拷 Cross-border counterparty due diligence

English | 锟斤拷锟斤拷

A plugin for DeepSeek Harness. It answers two questions about a foreign counterparty, in this order: which legal person are you actually contracting with, and may this register record be relied on?

Free official open data only. No API key, no stored credentials.

Why not just another lookup tool

Wrapping a company register in a tool has been done. This plugin does the other half 锟斤拷 the judgement.

One trading name routinely maps to several independent legal persons. Search "Contemporary Amperex Technology" and the register returns four:

Contemporary Amperex Technology AG                        Munich, DE
Contemporary Amperex Technology Thuringia SE              Arnstadt, DE
Contemporary Amperex Technology (Hong Kong) Limited       Hong Kong
Contemporary Amperex Technology Treasury Management (HK)  Hong Kong

These carry separate liability: a contract with one cannot be enforced against another. A plain lookup tool returns one record and moves on. This plugin puts the ambiguity in front of you and refuses to resolve it on your behalf.

The second question is whether the record is fit to rely on. Raw register output looks like this:

entityStatus: ACTIVE    registrationStatus: LAPSED
lastUpdateDate: 2023-08-31    nextRenewalDate: 2023-09-01

The plugin turns that into:

The company itself is still trading, but its global entity registration has not been renewed since September 2023, and the record has gone unmaintained for three years.
Fit to rely on: not on its own, for contracting purposes.
Next step: obtain a commercial-register extract issued within the last 6 months and reconcile it field by field against the registration number on file.

Install

dsh plugin --profile web add github:sherconan/dsh-entity-dd

Plain JavaScript, no build step. It activates on install: the package declares dsh.bundle, so dsh plugin appends it to the profile's layer stack automatically.

Three tools

Tool Question it answers
entity_search Which legal persons match this name, and which one do I mean?
entity_dossier What is on file for this entity, and may I contract on it?
entity_vat_check What if the counterparty has no LEI? (live EU VAT validation)

The intended flow is entity_search 锟斤拷 user confirms the entity 锟斤拷 entity_dossier. Small and mid-sized businesses often hold no LEI but always hold a VAT number; that is what entity_vat_check is for.

What the dossier contains

  • Verdict 锟斤拷 whether the record may be relied on, why, and what to request next
  • Particulars 锟斤拷 legal name, registered address, and the national business-register number plus its issuing authority, so you can go back to the local register yourself
  • Group structure 锟斤拷 direct parent, ultimate parent, direct subsidiary count
  • Risk findings 锟斤拷 which rules fired, each with its own advice
  • Data inspection table 锟斤拷 every field with its value, as-of date, source and confidence mark

The inspection table separates data reliability from business risk. An entity registered offshore whose record was updated two days ago has fresh data 锟斤拷 being offshore is a business concern and must not contaminate the freshness judgement.

The risk rules are yours to edit

Nine rules live in rules/risk-rules.json as readable data, not code:

{
  "id": "record-lapsed",
  "level": "amber",
  "dimension": "data",
  "when": { "field": "recordStatus", "op": "in", "value": ["LAPSED", "RETIRED"] },
  "label": "锟斤拷锟斤拷锟铰撅拷",
  "finding": "锟斤拷",
  "advice": "锟斤拷"
}

Thresholds and the offshore-jurisdiction list are judgement calls, not authoritative standards. Tune them to your own risk appetite.

Data sources

Source Coverage Cost
GLEIF LEI register Legal entities holding an LEI worldwide; daily golden copy Free, no key
EU VIES EU VAT numbers, answered live by each member state's tax administration Free, no key

Coverage limits 锟斤拷 read this first

The LEI register only holds entities that obtained an LEI, which skews heavily toward businesses active in financial markets. Measured registrations: Germany 254k, United States 358k, China 107k 锟斤拷 and Vietnam 368.

In practice: good for established mid-to-large businesses in Europe, North America, Japan and Korea; largely blind to small manufacturers in Southeast Asia.

"Not found" is treated as a first-class result: the plugin states plainly that absence is not a risk signal and tells you what to do instead. EU small businesses are covered by the VAT fallback; non-EU small businesses currently are not.

Other known limits:

  • A parent relationship is only recorded when the parent itself holds an LEI, so "not recorded" does not mean "no parent".
  • Some member states (Germany among them) return VAT validity only and withhold the trader name. A withheld name is not a failed check.
  • No sanctions or export-control screening. Restricted jurisdictions, dual-use goods and material credit exposure all require separate specialist screening.

Disclaimer

This plugin performs register-record verification. Its output is intended to prompt human review and does not constitute a compliance conclusion or legal advice. The risk findings are heuristics and are no substitute for counsel, a compliance function, or a professional due-diligence provider.

License

MIT

安装

🧩 让 Agent 自动装(推荐)

装一次目录插件,之后本站所有插件都能让 DeepSeek Harness 自动找、自动装:

dsh plugin add dshbase-catalog

然后对 agent 说「帮我装 dsh-entity-dd」,它会在目录里找到并自动安装。文档:dshbase-catalog · 已验证场景包。

该插件是 GitHub 源码(未发 npm)——直接从仓库装:

Web profile:

dsh plugin --profile web add github:sherconan/dsh-entity-dd

Headless(CLI)profile:

dsh plugin --profile headless add github:sherconan/dsh-entity-dd

实测报告

验证通过:从 GitHub 源码完成 L1 安装 + L2 加载 + L3 运行(dsh 0.1.0-rc.6)。

使用场景

扩展 agent 的编码能力面——给它一个新工具、工作流或集成,让它接手以前做不了的开发任务。

适合谁

想让 dsh 在真实代码库上像队友一样干活的开发者——能改、能跑、能验证,而不只是回答问题。

二次开发建议

工具/命令面就是缝:暴露更多 SDK 能力、加更聪明的上下文接线,或收紧改代码与验证之间的循环。

安全:尚未扫描——我们的每日静态扫描将很快覆盖它。

分享徽章

Developer 里更多

浏览全部 7797 个插件 →