dsh-plugin-studio

为了开发插件，开发了一个开发插件的插件。通过可视化的事件流、插件管理、工具管理、技能管理、预设管理，简化插件的开发流程，方便开发者理解插件的作用。

PluginDeveloper

Verification

L2 · Structured

Risk

Low

Health

Active

Trust

Silver

What it doesAI

A visual plugin development tool for DSH, with event flow and management for plugins, tools, skills, and presets.

Visual event flow design
Plugin, tool, skill, and preset management
Simplifies the plugin development process

AI-generated from the repo README — for reference only.

Installation

dsh plugin --profile web add github:Tsqurt/dsh-plugin-studio

security scan passed · default branch source

Install method: GitHub · no verification record (L1-L5)

Compatibility

DSH Version	Status
not stated	no verification record

Requirements

• Node.js: not stated
• DSH: not stated
• External credentials: none detected

Author badges

Embed the official badges in your README to showcase security & install-test status:

Security Report

Automated static scan, not manual review.

DSH.SO VETMEDIUMb9d538

Security reviewAutomated review · daily

MEDIUM

Vet verdict is suspicious: findings need human review (exfiltration endpoints, file deletion, etc.).

0 critical·11 high·2 medium·0 score

Version binding

plugin version0.1.3-alphadsh manifest

scanned commitb9d53830326a2026-08-28

latest commitb9d53830326a

vet verdictsuspicious · npmscore 0

Vet is an AST static scan (npm artifact or git source).

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

Risk	Rule	Location	Description
high	R2	bootstrap-client.js:61	new Function / new AsyncFunction 动态执行
high	R2	bootstrap-host.js:16	new Function / new AsyncFunction 动态执行
high	R2	host.js:1990	new Function / new AsyncFunction 动态执行
high	R2	host.js:2084	new Function / new AsyncFunction 动态执行
high	R2	host.js:2125	new Function / new AsyncFunction 动态执行

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-27 · activity: Active

• Repo created: 2026-08-28

• Stars: ★ 1 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/Tsqurt/dsh-plugin-studio

Plugin notes

What is the dsh-plugin-studio DeepSeek Harness plugin?

dsh-plugin-studio is a DeepSeek Harness plugin maintained by @Tsqurt. It is cataloged on dsh.so as a Developer plugin, with a public GitHub source, declared install command, and automated static security scan.

How do I install dsh-plugin-studio?

Run dsh plugin --profile web add github:Tsqurt/dsh-plugin-studio in a DeepSeek Harness (dsh) environment. The command is parsed from the plugin manifest, but it has not yet been tested in an isolated sandbox at the L3+ level.

Is the security scan on this page a manual audit?

No. The scan is an automated heuristic review of the repository source and can produce false positives. It is not a manual security audit and never an endorsement; review the repository and installed permissions before using the plugin.

"DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture where everything is a plugin, and is powered by Cordis."
— DeepSeek Harness README

Sources: GitHub repository · DeepSeek Harness README · security scan data · Maintained by dsh.so · Last updated 2026-08-28