dsh-plugin-guard

Manifest valid★ 2

Static-only plugin gate and clinic for DSH: audit before install, hash-and-capability lock after install, local fingerprint peer search over GitHub topic:dsh-plugin, and mechanical detox. Never execut

hasBundlePatch

dsh-plugin-guard

One plugin, two surfaces. Static analysis only — never executes the target plugin.

Surface	Tool	Job
Gate	`plugin_audit`	Static audit before install
Gate	`plugin_verify`	Hash + capability lock after install
Clinic	`plugin_peers`	Local fingerprint peers; `query` searches GitHub `topic:dsh-plugin`
Clinic	`plugin_detox`	Mechanical amputation, not an equivalent rewrite

plugin_peers: path stays local (profile bundles). query hits GitHub topic:dsh-plugin + the curated list; argo only if those are thin. Override with remote. Remote hits are verdict=unknown — audit before install.

Install

dsh plugin --profile web add github:taxueseek/dsh-plugin-guard
# restart dsh web

Scoring

Start at 100; P0 −40, P1 −12, P2 −3. Any P0 or score < 40 → block. Any P1 or score < 75 → warn.

P0 is only auto-run + dangerous combo (curl|bash, secrets leaving the machine, eval of network content, install-script poison). exec inside a tool the model must click is P1.

Not

Not output redaction
Not general SAST
Does not prove a plugin is safe
Detox does not keep the original behavior

License

MIT

Compatibility

DSH 0.2.1-rc.4: failedDSH 0.1.7-alpha.2: failedDSH 0.2.1-alpha.4: failed

Versions

Latest version	Published	Size
0.1.0	—	—
0.1.1	—	—

Comments

Loading…

Similar plugins

dsh-plugin-precheck

by BaqiF2

该仓库暂未提供项目说明。

Security & AuditDevelopment & InfrastructureTerminal & ClientsManifest valid

★ 1

↓ 217/wk

MIT

JavaScript

Oct 4, 2026

dsh plugin --profile web add dsh-plugin-precheck

dsh-stability-audit

by chunfenxiazhi-collab

Stability audit for installed dsh plugins: static risk grading (hook surface, startup work, inject, entry, dep ranges) plus optional isolated install verification.

Security & AuditTools & CapabilitiesDevelopment & InfrastructureManifest valid

★ 1

↓ 103/wk

MIT

JavaScript

Sep 8, 2026

dsh plugin --profile web add dsh-stability-audit

DSH-Plugin-Market

by nanshan1995

Alternative plugin market for DSH: curated catalog plus live GitHub browsing, zh/en cross-language search, a fail-closed pre-install static security audit with an install-hook block, and per-plugin RE

Tools & CapabilitiesDevelopment & InfrastructureManifest valid

★ 3

↓ 496/wk

MIT

JavaScript

Aug 16, 2026

dsh plugin --profile web add dsh-plugin-market

dsh-plugin-gate

by 863683348

Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict

Security & AuditTools & CapabilitiesDevelopment & InfrastructureManifest valid

★ 0

MIT

JavaScript

Sep 11, 2026

dsh plugin --profile web add dsh-plugin-gate

dsh-plugin-safety

by RedMaple96

Install-time safety gate for the DSH plugin market: scans npm/GitHub plugins before install, passes safe ones silently, opens a review dialog for risky ones.

Manifest valid

★ 0

MIT

JavaScript

Sep 8, 2026

dsh plugin --profile web add dsh-plugin-safety

dsh-harbor

by ZSeven-W

DeepSeek Harness (DSH) plugin: a read-only ledger for the plugins you already have installed — a capability inventory with file:line evidence, declared-vs-detected reconciliation, cross-profile versio

Security & AuditManifest valid

★ 25

↓ 101/wk

MIT

JavaScript

Oct 28, 2026

dsh plugin --profile web add @zseven-w/dsh-harbor