DSH Plugins

dshscan

by shaoshi20 · shaoshi20/dshscan

Manifest valid

9 Stars

0 Forks

1 Open issues

Updated: Aug 21, 2026

Install

dsh plugin --profile web add @shaoshi/dshscan
GitHubnpm

MIT

TypeScript

Original language: English

hasBundlePatch

About

Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.

Compatibility

DSH 0.1.5-rc.2: failedDSH 0.1.5-rc.1: errorDSH 0.1.5-alpha.2: errorDSH 0.1.5-alpha.1: errorDSH 0.1.3-alpha.2: errorDSH 0.1.2-rc.1: errorDSH 0.1.2-alpha.5: errorDSH 0.1.2-alpha.4: errorDSH 0.1.2-alpha.3: errorDSH 0.1.2-alpha.2: error

Versions

Latest versionPublishedSize
0.2.0
0.2.1
0.2.2
0.2.3
0.2.4
0.2.5
0.2.6
0.2.7
0.2.8
0.2.9
0.3.0
0.3.1
0.3.2
0.3.3
0.4.0
0.4.1
0.5.0

Similar plugins

dsh-plugin-audit

by jkrandom-sudo

Security audit for DeepSeek Harness plugins: static permission profile with file/line evidence + a runtime sentinel gating credential access and unknown-host egress · DSH 插件安全审计:静态权限画像(附文件/行号证据)+ 运行时哨

Manifest valid

4

143/wk

MIT

TypeScript

Sep 11, 2026

dsh plugin --profile web add dsh-plugin-audit

Static and runtime security guard for dsh: rule-based scans for malicious code, prompt injection and token waste, runtime interception of dangerous tool calls, /scan command, plugin_scan tool, web pan

Security & AuditManifest valid

0

dsh plugin --profile web add dsh-security-guard

by MkaliezZ

Offline-first static admission scanner for DeepSeek Harness community plugins: inspect a plugin package before you trust it.

Manifest valid

0

TypeScript

Aug 29, 2026

dsh plugin --profile web add @mkaliezz/dsh-plugin-firewall

by wulun811

Trust pipeline for deepseek-harness plugins: deterministic static scan (11 rules) + LLM-driven audit protocol + two-part scorecard, with optional runtime guard (T1 sentinel / T2 fs & child_process hoo

Security & AuditManifest valid

3

548/wk

MIT

TypeScript

Sep 11, 2026

dsh plugin --profile web add @jieai/dsh-plugin-vet

Pre-install supply-chain poison scanner for DSH plugins: AST (JS-X-Ray) + deobfuscation + regex heuristics, exits non-zero on findings for CI gating.

Security & AuditManifest valid

0

dsh plugin --profile web add dsh-poison-guard

Pre-install static security review and runtime guard for dsh plugins: deobfuscation decoding, supply-chain checks, web one-click review/install/uninstall, and optional runtime tool-call guard.

Security & AuditManifest valid

0

dsh plugin --profile web add dsh-plugin-security-review