DSH Plugins Marketplace

DSH Plugins

Plugins

/

dsh-plugin-doctor

s

dsh-plugin-doctor

Discovered

Static pre-install vetting for DSH plugins: scans a directory or installed package for exfiltration, credential access, obfuscation, persistence and lifecycle-script red flags (own-built, replacing th

dsh-plugin-doctor

Static vetting for DSH plugins — an own-built replacement for third-party vetting plugins. Scans a plugin directory (a checkout, or an installed package under ~/.dsh/profiles/*/node_modules) for red flags, scores them SAFE / LOW / MEDIUM / HIGH, and reports evidence with file:line. It never executes the scanned code — purely read-only static analysis.

Checked patterns

  • Exfiltration: fetch/http(s) to non-localhost hosts, curl/wget/nc in child processes, sockets
  • Credential access: reads of .ssh, .aws, .env, credentials files, wholesale process.env harvest
  • Obfuscation: long base64/hex blobs, eval/Function/vm, hidden Unicode (zero-width / bidi controls)
  • Persistence: registry Run keys, startup folders, scheduled tasks, shell-rc appends
  • Destructive: rm -rf /-style deletes, force pushes
  • Lifecycle hooks: preinstall / install / postinstall scripts (always worth a human look — they run with the installer's privileges)

Tools

  • doctor_scan — scan a path (directory or single file), defaulting to the current profile's node_modules plugin packages
  • doctor_scan_path — alias with an explicit path parameter

License

MIT

Comments

Loading…

Similar plugins

dsh-sentinel-scanner

Static security scanner for DSH plugins: read-only audit (exec, credentials, exfiltration, obfuscation, install scripts, bundle manifest) with a 0-100 risk score.

Security & AuditTools & CapabilitiesDevelopment & InfrastructureManifest valid

★ 0

dsh plugin --profile web add deepseek-harness-sentinel

dsh-plugin-firewall

by MkaliezZ

Offline-first static admission scanner for DeepSeek Harness community plugins: inspect a plugin package before you trust it.

Manifest valid

★ 0

TypeScript

Aug 29, 2026

dsh plugin --profile web add @mkaliezz/dsh-plugin-firewall

dsh-plugin-sentinel

Static pre-install security auditor for plugin bundles: lifecycle scripts, dynamic execution, credential-exfiltration combos, and patch-layer hazards, with zero dependencies and in-memory tar parsing.

Security & AuditTools & CapabilitiesDevelopment & InfrastructureManifest valid

★ 0

dsh plugin --profile web add dsh-plugin-sentinel

dsh-plugin-precheck

by BaqiF2

该仓库暂未提供项目说明。

Security & AuditDevelopment & InfrastructureTerminal & ClientsManifest valid

★ 1

↓ 217/wk

MIT

JavaScript

Oct 4, 2026

dsh plugin --profile web add dsh-plugin-precheck

dsh-plugin-guard

by taxueseek

Static-only plugin gate and clinic for DSH: audit before install, hash-and-capability lock after install, local fingerprint peer search over GitHub topic:dsh-plugin, and mechanical detox. Never execut

Security & AuditDevelopment & InfrastructureManifest valid

★ 2

↓ 128/wk

MIT

TypeScript

Aug 23, 2026

dsh plugin --profile web add dsh-plugin-guard

dsh-plugin-gate

by 863683348

Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict

Security & AuditTools & CapabilitiesDevelopment & InfrastructureManifest valid

★ 0

MIT

JavaScript

Sep 11, 2026

dsh plugin --profile web add dsh-plugin-gate