dsh-plugin-firewall
Manifest validOffline-first static admission scanner for DeepSeek Harness community plugins: inspect a plugin package before you trust it.
dsh-plugin-firewall
Offline-first static admission scanner for DeepSeek Harness community plugins.
/plugin-firewall <path> inspects a local plugin package before you trust it. v0.1 looks for package install scripts, git/URL dependencies, native addons, Cordis/profile patches, tool registration, process/network/filesystem/environment access indicators, and emits a deterministic risk receipt with a SHA-256 digest.
v0.1 goals
- no network calls or vulnerability database;
- deterministic local analysis;
- explicit LOW / MEDIUM / HIGH findings;
- JSON-safe receipt with digest;
- never executes the scanned plugin;
- does not claim malware detection or complete supply-chain safety.
Development
npm install
npm test
License
MIT
Compatibility
Versions
| Latest version | Published | Size |
|---|---|---|
| 0.2.0 | — | — |
| 0.2.1 | — | — |
Comments
Loading…
Similar plugins
by TonyWang-hub
Evidence-first inspection, compatibility verification, and quarantine tooling for DeepSeek Harness plugins.
★ 0
Apache-2.0
TypeScript
Sep 5, 2026
dsh plugin --profile web add dsh-plugin-trust-centerby Mengshang-spec
Read-only DSH plugin auditor with static scanning, current-session model review, and confirmation gates.
★ 1
MIT
JavaScript
Aug 27, 2026
dsh plugin --profile web add dsh-plugin-trustlensby coderdailyone
Security-first browser automation plugin for DeepSeek Harness (dsh) — 15 tools, policy re-checked on every action, no model-controlled paths
★ 0
MIT
TypeScript
Aug 15, 2026
dsh plugin --profile web add dsh-plugin-browser-useby shaoshi20
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence
★ 8
↓ 234/wk
MIT
TypeScript
Aug 21, 2026
dsh plugin --profile agent add @shaoshi/dshscanby Web0926
DeepSeek Harness plugin that validates and ranks 3/5 independent coding-agent patches before approval-gated apply.
★ 3
↓ 860/wk
MIT
TypeScript
Aug 25, 2026
dsh plugin --profile web add dsh-llm-verifierby Qingzhou-Joshua
DeepSeek Harness plugin—a simple toolkit for developers.
★ 0
MIT
TypeScript
Aug 14, 2026
dsh plugin --profile web add dsh-dev-toolbox