dsh-plugin-vet
Trust pipeline for deepseek-harness plugins: deterministic static scan (11 rules) + LLM-driven audit protocol + two-part scorecard, with optional runtime guard (T1 sentinel / T2 fs & child_process hooks) and honeypot decoys. Monitor-and-alert only — vet never blocks or kills on its own.
This plugin is a GitHub repository with the dsh-plugin topic — the repository README is the authoritative install source. Use the template below, adapting the package name / path from the README:
dsh plugin --profile web add $dsh-plugin-vetLocal development? dsh --profile web --patch ./cordis.yml with an absolute plugin path — see Plugin Development.GitHub source? dsh plugin --profile web add github:$wulun811/$dsh-plugin-vet — needs a prepare script in the repo (see packaging).
Critical findings in non-blocking categories (dynamic code execution, shell execution, install scripts, obfuscation). Common in CLI/terminal plugins but worth reviewing.
code-exec ×1690bcf9d17752026-08-16—The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.
Disclaimer: automated static analysis, not a security guarantee. Always review what you install.
| Repository | wulun811/dsh-plugin-vet |
| License | MIT |
| Category | Tool |
| Status | Unverified |
| Last commit | 2026-08-16 |
| Indexed | 2026-08-16 |
Questions or feedback? Official Discussions is the project’s canonical support channel; Discord has an active community. dsh.so itself improves via plugin submissions and your feedback.