2026-W33
Published 2026-08-16 · static snapshot, no dynamic audit
No dynamic audit in this archive
This archive predates the merge of the dynamic audit into weekly reports and records the static scan snapshot of that time (three tiers: low / medium / critical; the "high" tier was folded into medium). Published archives are frozen — today's dynamic conclusions are not backfilled into them. See the latest weekly report and each plugin page for the current caliber.
This week
Against the previous archive, in effective-tier terms. If the previous archive predates the dynamic merge, this diff mixes a caliber change with real movement.
Critical-risk plugins
21 plugins with an effective critical tier (static snapshot).
| Plugin | What it is | Tier |
|---|---|---|
| dsh-cyber-sec★ 5 | Authorized security-assessment profile for DeepSeek Harness: scoped network tools, container-backed shell, authorization guard, durable evidence, 21 security skills, 7 specialist subagents | critical |
| dsh-auto-approve★ 22 | 为 DeepSeek Harness 增加介于 Workspace Write 与 Full access 之间的自动批准权限档，危险或不确定操作仍转人工审批。An auto-approval permission preset between workspace-write and full access for DeepSeek Harness. | critical |
| dsh-clawrouter★ 18 | A safety gate for DeepSeek Harness: a stronger model reviews dangerous tool calls before they run. Plus vision and BlockRun's full model catalog from one wallet, paid per request over x402. | critical |
| dsh-remote-ide★ 5 | Remote Linux workspaces over SSH for DeepSeek Harness — the agent's bash/read/write/edit/glob/grep tools transparently run on your server. Zero remote install. | critical |
| dsh-remote★ 278 | Remote-work assistant for DeepSeek Harness (DSH): SSH into any machine, pick a remote workspace, and work on it with 22 rw_* tools, conflict-aware SFTP mirror, embedded PTY terminal, port forwarding, and multi-hop jumps - under the same sandbox policy as a local session. | critical |
| dsh-terminal-panel★ 2 | A manual Terminal tab for the DeepSeek Harness (dsh) web UI — run commands on the host machine, persistent cwd, sudo password prompt, command history.现在可以在web界面内直接执行命令行了 | critical |
| dsh-security-scan★ 0 | No description provided. | critical |
| openguardrails★ 364 | AI agent guardrails for every builder. Local rules, a sandbox and a firewall for your agents, open source. | critical |
| dsh-file-upload★ 9 | DSH 拖拽文件转路径插件：Codex 式拖拽，路径自动插入输入框（Drop File to Path for DeepSeek Harness） | critical |
| dsh-desktop★ 2 | Desktop shell for DeepSeek Harness Web GUI — auto-installs dsh, native macOS tray, packaged for macOS & Windows. | critical |
| DeepSeek-harness-wecom★ 5 | WeCom AI Bot text and image bridge for DeepSeek Harness | critical |
| dsh-drop-file-to-path★ 9 | DSH 拖拽文件转路径插件：Codex 式拖拽，路径自动插入输入框（Drop File to Path for DeepSeek Harness） | critical |
| DeepSeek-harness-lark★ 4 | Feishu and Lark text and image channel plugin for DeepSeek Harness | critical |
| hesi-dsh-plugins★ 3 | DeepSeek Harness (DSH) 插件 —— 圆桌讨论（Roundtable）与 一键执行流（Plan） Hesi 出品 · 同源实现 | critical |
| dsh-openclaw-acp★ 1 | DeepSeek Harness bundle for OpenClaw and WeChat over ACP | critical |
| dsh-image-to-path★ 2 | DSH 插件:让纯文本模型对话也能拖图/贴图——图片自动保存到会话工作区,以文件路径交给模型(多模态模型不受影响) | critical |
| zeromd★ 35 | Obsidian 零成本同步：iPhone ↔ Mac，GitHub 自动备份。本地优先 + 长期积累。｜Local First. Zero-cost Obsidian sync across iPhone, Mac & GitHub. Let knowledge grow over time. | critical |
| dsh-design-skills★ 26 | Design aesthetics skill pack for DeepSeek Harness (DSH) - keeps vibe-coded websites away from the AI look. 6 styles: dark-saas, apple-minimal, neo-neumorphism, brutalism, glassmorphism, japanese-minimal. | critical |
| DeepSeek-harness-qqbot★ 8 | QQ Bot text and image channel plugin for DeepSeek Harness | critical |
| DeepSeek-Harness-linux-★ 3 | 一个基于官方WebUI二改的Linux桌面端，内置了一个外挂视觉插件(需手动接入API Key)，已经迭代了四个版本，可能还是有些小毛病，不过目前用下来暂时没有什么大问题。 | critical |
Showing the 20 with the most static findings; the remaining 1 are in the plugin list filters.
High-risk plugins
0 plugins with an effective high tier (static snapshot).
| Plugin | What it is | Tier |
|---|---|---|
| None | ||
Medium-risk plugins
648 plugins with an effective medium tier (static snapshot).
| Plugin | What it is | Tier |
|---|---|---|
| dsh-hdc-bridge★ 22 | DSH 原生鸿蒙开发助手：hdc 设备闭环调试 + 设备面板（官方 client 插件形态）+ 离线官方知识层（Tier-1 随包）+ DevEco CLI 构建/签名/模拟器控制 / DSH-native HarmonyOS dev assistant: hdc device loop, live device panel, offline official knowledge, DevEco CLI build/sign/emulator | medium |
| DeepSeek-Harness-Desktop★ 2 | dsh-desktop: DeepSeek Harness 桌面插件 - click-to-launch Codex-like native window over the live dsh web UI. Everything is a plugin - this one is the window. | medium |
| DSH-Desktop★ 22 | DSH-Desktop | medium |
| dsh-wsl-workspace★ 117 | WSL workspace support for DeepSeek Harness——无缝的 WSL 工作区使用体验，无需在 WSL 之中再安装一个dsh，安装该插件后在 GUI 里直接添加 WSL 工作区即可。WSL workspace support for DeepSeek Harness — Enjoy a seamless WSL workspace experience without needing to install dsh inside WSL. Once this plugin is installed, you can directly add a WSL workspace right from the GUI. | medium |
| DSH-Plugin-Market★ 3 | DeepSeek Harness 插件市场：精选目录 + GitHub 实时浏览、中英翻译搜索、安装前静态安全审计闸门。Plugin market for DeepSeek Harness with a pre-install security audit gate. | medium |
| whale-notify★ 6 | 鲸鱼通知——基于DeepSeek Harness的通知和鲸鱼娘人设插件 | medium |
| deepseek-harness-desktop★ 130 | DeepSeek Harness Codex Desktop — 无需预装环境、开箱即用的跨平台桌面客户端 · A ready-to-use cross-platform DeepSeek Harness desktop client with no environment setup | medium |
| dsh-search-boost★ 20 | The plunge for dsh to boost model's search ability. | medium |
| DSH-Plugins-Marketplace★ 204 | DSH插件市场 / DSH Plugin Marketplace: 在 DeepSeek Harness Web GUI 中一键浏览、安装与更新 GitHub topic:dsh-plugin 的全部插件 | browse, install & update all GitHub dsh-plugin plugins in the DSH Web GUI | medium |
| dsh-remote-tunnel★ 6 | Remote Host Tunnel Manager for dsh: remote port allocation + registry + resilient SSH tunnel | medium |
| dsh-prompt-enhancer★ 125 | DeepSeek-Harness (DSH) 插件：✨ 提示词一键增强（5 模式·模型链·记忆链）+ 💬 语音输入增强（热键·说完自动停·口水词清理·语音纠错） | medium |
| dsh-toy★ 76 | Toy Control Protocol for DSH | medium |
| dsh-side-panel★ 15 | DSH 侧边栏，集成文件浏览器、终端和 Git 审查，方便预览文件。 | medium |
| DSH_plugins_4U★ 1 | DSH 自建插件集合：微信桥接器 + GUI 微信入口补丁，一键安装 | medium |
| dsh-desktop★ 98 | 一款主打安全且更尊重开发者的开源 DeepSeek Harness 桌面客户端。官方 Web UI ，长任务常驻托盘，支持通知推送；内置安全市场，600+精选插件支持安装审查。 | medium |
| dsh-sentinel★ 23 | Condition-driven wakeup for DeepSeek Harness: durable file/command/http/process/webhook watches that wake the agent, with dock, sidebar branch, and a global dashboard. | medium |
| dsh-ankh-guard★ 6 | dsh 自托管运维守护：agent 改完代码先验证构建测试再重启，起不来自动回滚。镜像仓，与 Khorsheed/dsh-plugins 的 packages/ankh-guard 自动同步。 | medium |
| dsh-plugin-workshop★ 25 | Steam Workshop-style plugin browser for the DeepSeek Harness (DSH) Web UI - zero-server: GitHub-powered search, trending windows, Chinese search & bilingual translation, plugin-signature filtering, and smart one-click install/update/uninstall with an installed-plugins manager. | medium |
| dsh-desktop-tools★ 1 | DeepSeek Harness 工具集导航:Web 插件集(dsh-web-plugins)/ Windows 桌面端(dsh-desktop-app)/ AI 知识库模板(ai-knowledge-base) | medium |
| dsh-plugin-verify★ 1 | 验证 DSH 插件的 CLI：一条命令跑 mock-llm 完整 agent 循环，检查 waterfall 链与零副作用，产出验证报告 | medium |
Showing the 20 with the most static findings; the remaining 628 are in the plugin list filters.
Weekly report archive
14 reportsWhat does this weekly report measure?
This report measures the registry's current risk state during 2026-W33: how many plugins were scanned, the distribution across four tiers (low, medium, high, critical), and which plugins changed tier since the previous archive. The tier is not a single static rule: where the dynamic audit reached a conclusion, that conclusion is authoritative; the static scan tier applies only where there is none.
How the dynamic audit relates to the static scan
The static scan is deterministic rule matching over source shape, manifests and permission requests, and covers the whole registry. The dynamic audit has a model read redacted source context (plugin code is never executed) for the subset whose static tier is medium or above, and judges context — what actually loads at runtime, and whether a list is defensive or offensive. Merge rule: a dynamic conclusion wins (it may raise or lower the tier); otherwise the static tier applies. If human review finds the model wrong, recording `withdrawn` in the review table reverts the tier to the static one immediately. Exemptions are manual only; the audit script never writes the suppression list.
Why isn't this report an endorsement?
Every row comes from public repository metadata, heuristic rule matches, or a model reading source context — all of which can be wrong: rules produce false positives, and a model can be fooled by injected source comments or simply misjudge. Risk flags are therefore a reason to inspect a plugin before install, not a substitute for that inspection.
Source: dsh.so security standards · Maintained by dsh.so · Published