dsh-plugin-update-audit

Read-only update auditing for DeepSeek Harness profile plugins

PluginSecurityGitHub integrationFile

Verification

L3 · Install spec

Risk

Pending

Health

Active

Trust

Bronze

What it doesAI

Read-only audit that inventories a DeepSeek Harness Profile's direct plugin dependencies and checks npm, GitHub, and local sources for updates.

Inventories the selected Profile and audits each direct plugin dependency
Compares npm registry latest and GitHub HEAD via official APIs
Reports local tarballs/dirs with SHA-256; never installs or rewrites

AI-generated from the repo README — for reference only.

Installation

dsh plugin --profile web add github:wcnm8888/dsh-plugin-update-audit#v0.1.0

verified v0.1.0

Install method: GitHub · install spec verified (L3)

Verification & Compatibility

Grouped by plugin version: each card lists the dsh versions actually tested against that artifact version and their install verdicts (L5 wins). Untested combinations are omitted — absence means untested, never assumed compatible. L1–L3 are a plugin-level static archive (independent of the dsh version — the same verdict on every dsh row): they sit in each row's level grid next to L4/L5, marked "static", while their evidence is stored once per plugin inside that row's "checks & evidence" instead of being duplicated per version.

External credentials (plugin-level): none detected

Install compatibility (by plugin version, dsh versions within)

Legend:✓ L5 runtime verified◐ L4 testing · install passed○ no plugin features✗ failed

v0.1.0github2026-09-10

https://github.com/wcnm8888/dsh-plugin-update-audit

No runtime install test for this version (static scan only) — compatibility unknown, never assumed.

Author badges

Embed the official badges in your README to showcase security & install-test status:

Security Report

Automated static scan, not manual review.

DSH.SO AUDITNOT SCANNED4c782e

Security reviewAutomated review · daily

NOT SCANNED

No security scan record for this plugin yet. Newly indexed plugins are scanned by the daily pipeline.

0 critical·0 warning·0 info·— files scanned

Version binding

plugin version—

scanned version—

current versionv0.1.0

The scan result is valid for the scanned commit. New commits within 7 days are tolerated (the rating still counts); after 7 days without a rescan the badge shows outdated.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk details

• Static heuristic scan: pending

• Dependency vulnerabilities: —

• Hardcoded secrets: —

• Supply chain risks: —

⚠ Static scan not run yet — results will appear here.

Activity

Last commit 2026-09-10 · activity: Active

• Repo created: 2026-09-10

• Stars: ★ 0 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/wcnm8888/dsh-plugin-update-audit

Plugin notes

What is the dsh-plugin-update-audit DeepSeek Harness plugin?

dsh-plugin-update-audit is a DeepSeek Harness plugin maintained by @wcnm8888. It is cataloged on dsh.so as a Security plugin for GitHub integration tasks, with a public GitHub source, declared install command, and automated static security scan.

How do I install dsh-plugin-update-audit?

Run dsh plugin --profile web add github:wcnm8888/dsh-plugin-update-audit in a DeepSeek Harness (dsh) environment. The command is parsed from the plugin manifest and its install spec is verified (L3); runtime sandbox install testing may not have run yet.

How does the security scan relate to a manual audit?

The scan is automated static analysis of the repository source — a scalable first line of defense that can produce false positives and miss context; it is not a manual security audit. Before using a plugin, review the repository and installed permissions, and combine the scan with the verification level (L4/L5) and health signals.

"DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture where everything is a plugin, and is powered by Cordis."
— DeepSeek Harness README

Sources: GitHub repository · DeepSeek Harness README · security scan data · Maintained by dsh.so · Last updated 2026-09-10