2026-W38
Published 2026-09-18 · static snapshot, no dynamic audit
No dynamic audit in this archive
This archive predates the merge of the dynamic audit into weekly reports and records the static scan snapshot of that time (three tiers: low / medium / critical; the "high" tier was folded into medium). Published archives are frozen — today's dynamic conclusions are not backfilled into them. See the latest weekly report and each plugin page for the current caliber.
This week
Against the previous archive, in effective-tier terms. If the previous archive predates the dynamic merge, this diff mixes a caliber change with real movement.
Critical-risk plugins
0 plugins with an effective critical tier (static snapshot).
| Plugin | What it is | Tier |
|---|---|---|
| None | ||
High-risk plugins
0 plugins with an effective high tier (static snapshot).
| Plugin | What it is | Tier |
|---|---|---|
| None | ||
Medium-risk plugins
108 plugins with an effective medium tier (static snapshot).
| Plugin | What it is | Tier |
|---|---|---|
| dsh-remote★ 47 | 公网远程控制 DeepSeek Harness（dsh web）：安装即得专属加密地址，人在外面也能用手机远程访问，无需同一局域网/WiFi、无内网穿透，可选自建服务。Remote control DeepSeek Harness (dsh web) from anywhere — encrypted public URL, no LAN required. | medium |
| dsh-web-profile★ 0 | — | medium |
| dsh-smart-reminder★ 0 | Smart calendar reminder & schedule assistant for DSH Web GUI: lunar calendar, holidays, system notifications on macOS/Windows, and WeCom/platform push integration. | medium |
| dsh-upgrade-kit★ 0 | DSH 装备升级套件：看钱（dsh-cost 费用面板）、看文件（file-preview 预览）、搜外网（research-mcp）、看图片（vision-bridge）。一条命令全装。 | medium |
| dsh-tmwebdriver★ 0 | One tool, infinite reach: arbitrary JS in your real logged-in browser. Unlike fixed-action plugins, browser_execute_js does anything DevTools can — read, click, type, fill, navigate, screenshot, CDP. Plus list_tabs/snapshot/type. Zero-setup, self-healing. | medium |
| dsh-v-explorer★ 2 | right slider for deepseek-harness-plugin. | medium |
| dsh-remote★ 0 | Remote access suite for DeepSeek Harness: QR pairing, HMAC sessions, cloudflared tunnel and PWA. Zero installs on any device. | medium |
| claude-in-dsh★ 3 | 在 dsh web 里用本机 Claude Code 驱动会话：原生渲染、权限档、模型/effort、命令面板、broker 托管进程 | medium |
| cli★ 7 | Generate AI images, videos, speech, and 3D assets from your terminal, Claude Code, or Codex with Atlas Cloud CLI. | medium |
| dsh-remote★ 1 | Operate DeepSeek Harness from your phone: self-hosted relay + desktop plugin tunnel with a mobile-adapted web UI. MIT | medium |
| dsh-cordis-mcp★ 1 | DeepSeek Harness 插件：把 DSH 的动态 Cordis 工具集（inspect/define/run/stop/undefine）以 MCP 暴露给 Claude Code。端点强制身份认证，token 可在 DSH 设置页配置。 | medium |
| vision-toolkit-for-dsh-v0.1-maybe-★ 1 | Zero-dependency vision OCR/Q&A toolkit (CLI + local web GUI) for OpenAI-compatible VLMs: Zhipu GLM, Qwen, OpenAI, OpenRouter, SiliconFlow | medium |
| dsh-desktop★ 2 | DeepSeek Harness 桌面端（macOS / Windows）：双击即用的官方 dsh「瘦壳」——不内置 dsh、首次运行自动安装，无需 Node/npm 等任何环境，带版本管理与回滚、App 内更新、插件管理与干净卸载。 | medium |
| dsh-auto-classifier★ 1 | — | medium |
| dsh-launcher★ 0 | macOS 程序坞一键启动 DeepSeek Harness (DSH) 的快捷启动器 / One-click DSH launcher for macOS Dock | medium |
| dsh-balance-plugin★ 62 | deepSeek 余额监控与用量统计（DSH 动态 Cordis 插件）：余额监控 · 官方充值入口 · 用量统计 · 三方插件管理 | medium |
| dsh-convmap★ 1 | DeepSeek Harness web 插件：在主对话区左缘中部渲染「对话地图」刻度（每条 = 一轮用户提问），hover 梯度展开并预览该轮提问/回复摘要，点击跳转（未渲染的老轮次自动分页加载后再跳），滚动时当前轮次自动高亮。 | medium |
| dsh-moodball★ 0 | DeepSeek Harness Pet | medium |
| paper-workbench★ 0 | — | medium |
| dsh-balance★ 2 | DeepSeek Harness web 插件：输入框下方状态栏展示当前供应商的余额/用量 —— DeepSeek 官方余额 + 本会话花费，Kimi Coding、OpenCode Go、GLM Coding Plan 等订阅用量（支持的供应商见 README）。按 provider 判断、2 秒轮询实时切换、5 分钟缓存。 | medium |
Showing the 20 with the most static findings; the remaining 88 are in the plugin list filters.
Weekly report archive
12 reportsWhat does this weekly report measure?
This report measures the registry's current risk state during 2026-W38: how many plugins were scanned, the distribution across four tiers (low, medium, high, critical), and which plugins changed tier since the previous archive. The tier is not a single static rule: where the dynamic audit reached a conclusion, that conclusion is authoritative; the static scan tier applies only where there is none.
How the dynamic audit relates to the static scan
The static scan is deterministic rule matching over source shape, manifests and permission requests, and covers the whole registry. The dynamic audit has a model read redacted source context (plugin code is never executed) for the subset whose static tier is medium or above, and judges context — what actually loads at runtime, and whether a list is defensive or offensive. Merge rule: a dynamic conclusion wins (it may raise or lower the tier); otherwise the static tier applies. If human review finds the model wrong, recording `withdrawn` in the review table reverts the tier to the static one immediately. Exemptions are manual only; the audit script never writes the suppression list.
Why isn't this report an endorsement?
Every row comes from public repository metadata, heuristic rule matches, or a model reading source context — all of which can be wrong: rules produce false positives, and a model can be fooled by injected source comments or simply misjudge. Risk flags are therefore a reason to inspect a plugin before install, not a substitute for that inspection.
Source: dsh.so security standards · Maintained by dsh.so · Published