2026-W35
Published 2026-08-29
12371
scanned
11
critical
892
need review
11251
low risk
This week
▲ New critical risk
▲ New needing review
▼ Cleared needing review
Critical-risk plugins
11 plugins rated critical — vet-critical or blocking patterns (secrets / exfiltration / destructive / mining)
| Plugin | What it is | Risk |
|---|---|---|
| dsh-plugin-security-review ★ 2 | DSH 动态 Cordis 插件安装安全审查守卫 (DeepSeek Harness plugin install security review gate, security-first) | Critical |
| dsh-qrcode-hassle-free ★ 2 | DSH plugin bundle: scan a QR to open the deepseek-harness web UI on your phone inside the same session - cloudflared quick tunnel, no database, Windows/macOS/Linux | Critical |
| dsh-lmstudio-router ★ 0 | Local LM Studio model router for the dsh web GUI: routes token-expensive bulk tasks (text work, compaction, session titles) to a local LM Studio model over its OpenAI-compatible /v1 endpoint, auto-launches LM Studio, and fits requests into the model context window. Zero-dependency host plugin. | Critical |
| DSH-FormatForge ★ 10 | FormatForge — DeepSeek Harness plugin: drag any file (PDF/DOCX/XLSX/EML…, 30+ formats) into dsh and it becomes AI-readable structured data. npm: @tianbuyu-wwx/dsh-formatforge | Critical |
| dsh-prompt-templates ★ 2 | Quick prompt templates for DeepSeek Harness: global and per-session templates, a right-side panel, and Python-backed SQLite persistence | Critical |
| DSH_VsCodeMode ★ 16 | VSCode-style coding for DeepSeek Harness: Monaco editor (tabs/QuickOpen), agent edit-diff review (keep/reject/archive/rollback), LSP intelligence with VSIX installs | Critical |
| dsh-report-studio ★ 2 | Turn a DeepSeek Harness session into deliverable work reports (daily/weekly/handoff/article) with verifiable receipts | Critical |
| dsh-themes ★ 1 | — | Critical |
| plugin-manager ★ 1 | — | Critical |
| dsh-tool-plus ★ 8 | DeepSeek Harness 基础工具增强：持久 bash、结构化 read、多模式 edit、原子 write、双引擎 grep/glob、图像直读，一个插件全覆盖 | Critical |
| meww ★ 1 | pokemon ai pet🐣电子宠物 | Critical |
Needs review (medium)
892 plugins rated medium — vet suspicious, or retired "high" hits like code execution / shell
| Plugin | What it is | Risk |
|---|---|---|
| dsh-web-open ★ 0 | DSH Desktop embedded browser: open_url tool opens webpages in an in-window browser (tabs, favicons, smart zoom, search engine settings). One-click installer. | Medium |
| dsh-doctor ★ 6 | DeepSeek Harness environment diagnostic tool: dsh_doctor checks env, profile, config, bundles, mount, port, health, and disk | Medium |
| DeepSeek-Harness-Desktop ★ 6 | 一个 Electron 桌面壳，内嵌官方 DeepSeek Harness Web UI。启动时让用户选择安装模式，自动完成环境检测、安装、服务拉起，以百分比进度条展示各阶段，服务就绪后打开主界面。 | Medium |
| dsh-deepseek-web-adapter ★ 15 | 免费的 DeepSeek 网页版（chat.deepseek.com）LLM 服务提供方，用于 DeepSeek Harness——无需 API 密钥。自动启动网关，支持工具调用和连续对话。Free DeepSeek Web (chat.deepseek.com) LLM provider for DeepSeek Harness — no API key. Auto-launches gateway, tool calling, continuous chat. | Medium |
| dsh-flowglass ★ 24 | 流镜 Flowglass — DeepSeek Harness session flowgraph，实时可视化消息、工具组、子代理分支与步骤详情。 | Medium |
| dsh-wallpaper-bridge ★ 2 | Wallpaper Engine bridge for DeepSeek Harness (DSH) on Windows | Medium |
| dsh-plugin-gate ★ 0 | Installation safety gate & data-protection guard for DeepSeek Harness: 60 static signature rules (31 high/24 medium/5 low) scan plugin sources before dsh plugin add; 12 destructive-command patterns + workspace-boundary checks block accidental deletion. | 安装安全闸门与数据保护闸：60 条静态签名规则，12 种危险命令模式拦截误删。 | Medium |
| MakoCode ★ 155 | MakoCode — 茉子版 Agent | Galgame 风格桌面 AI Agent，零门槛体验 Agent 的乐趣 | Medium |
| dsh-vscode ★ 4 | DeepSeek Harness for VS Code: right-side chat agent that reads, edits, and runs your project — like Claude Code / Codex / Copilot. | Medium |
| dsh-remote-access ★ 0 | — | Medium |
| dsh-witness ★ 0 | — | Medium |
| dsh-pet-remielle ★ 51 | — | Medium |
| dsh-desktop-electron ★ 4 | Cross-platform Electron desktop shell for the DSH Web GUI: tray-resident standalone window over your own dsh web, no bundled Node runtime | Medium |
| dsh-vision ★ 7 | Vision for DeepSeek Harness: Doubao Web by default (zero-cost, no API key), Antigravity IDE quota (flash/pro), any IDE CLI, Gemini — auto detail escalation, evidence memory | Medium |
| crossplug ★ 1 | crossplug — AI coding-agent plugin bridge: convert plugins between DSH / MiniMax Code (mcode) / pi, agent-plugins.org 1.0.0 packages, pi extensions; dual-side installers | Medium |
| dsh-reasonix-desktop ★ 1 | — | Medium |
| dsh-shield ★ 1 | Security, Trust & Policy Layer for DeepSeek Harness. Don't trust your agent's tools. Verify them. | Medium |
| dsh-sim-restart ★ 0 | Simulated-restart testing for DeepSeek Harness plugins: verifies plugins survive restart (module eval → apply → smoke → dispose) in isolated subprocesses, with a resident auto-watcher and agent feedback loop | Medium |
| DeepSeek-Harness-Desktop ★ 2 | dsh-desktop: DeepSeek Harness 桌面插件 - click-to-launch Codex-like native window over the live dsh web UI. Everything is a plugin - this one is the window. | Medium |
| dsh-raw-html ★ 76 | VCP visual-synesthesia protocol plugin for DeepSeek Harness: render agent HTML output as real UI (cards / KaTeX math / Mermaid diagrams / built-in calligraphy fonts / zero-JS interactions), plug-and-play on any DSH environment | Medium |
Showing the 20 most severe.
Automated heuristic scan (static analysis) — a scalable first line of defense; may produce false positives. Not a manual review.
Weekly report archive
9 reports2026-W412026-10-090 crit112 medium2026-W402026-10-030 crit110 medium2026-W392026-09-260 crit105 medium2026-W382026-09-180 crit108 medium2026-W372026-09-121249 crit2083 medium2026-W362026-09-0512 crit944 medium2026-W352026-08-29current11 crit892 medium2026-W342026-08-228 crit778 medium2026-W332026-08-1621 crit105 medium
What does this weekly report measure?
This report measures the automated static scan state of the dsh.so plugin registry during 2026-W35: the number of scanned plugins, the distribution across three tiers (low, medium, critical), and the plugins whose risk tier changed since the previous archive.
Why isn't this report an endorsement?
A report row reflects public repository metadata and heuristic rule matches, not a manual audit or runtime verification. False positives and false negatives are possible, so risk flags are a reason to inspect a plugin before install rather than a substitute for that inspection.
Source: dsh.so security standards · Maintained by dsh.so · Published