2026-w44
Published 2026-10-25
Critical-risk plugins
0 plugins rated critical — vet-critical or blocking patterns (secrets / exfiltration / destructive / mining)
| Plugin | What it is | Risk |
|---|---|---|
| None |
Needs review (medium)
149 plugins rated medium — vet suspicious, or retired "high" hits like code execution / shell
| Plugin | What it is | Risk |
|---|---|---|
| @lyc0110/dsh-agent-guard ★ 0 | DSH pre-execute gate: ask before a tool call leaks a credential, stops a service, or rewrites host network/registry state. | Medium |
| dsh-web-profile ★ 0 | — | Medium |
| @dgagf111/dsh-hydrasearch ★ 0 | TinyFish + AnySearch web search and fetch provider for DeepSeek Harness: one failover-chain provider with an operator-controlled backend priority and a settings card. | Medium |
| @Justin-Mai/dsh-stock-view ★ 1 | DeepSeek Harness 右上角行情盯盘插件：A 股 / ETF / 港股 / 美股 自选股 + 加密货币实时行情 | Medium |
| dsh-smart-reminder ★ 0 | Smart calendar reminder & schedule assistant for DSH Web GUI: lunar calendar, holidays, system notifications on macOS/Windows, and WeCom/platform push integration. | Medium |
| dsh-upgrade-kit ★ 0 | DSH 装备升级套件：看钱（dsh-cost 费用面板）、看文件（file-preview 预览）、搜外网（research-mcp）、看图片（vision-bridge）。一条命令全装。 | Medium |
| dsh-tmwebdriver ★ 0 | One tool, infinite reach: arbitrary JS in your real logged-in browser. Unlike fixed-action plugins, browser_execute_js does anything DevTools can — read, click, type, fill, navigate, screenshot, CDP. Plus list_tabs/snapshot/type. Zero-setup, self-healing. | Medium |
| @hunyu-feng/dsh-vision ★ 0 | Vision for DSH agents and MCP clients: analyze_image over local files or URLs using Doubao models on Volcano Ark, with model fallback. | Medium |
| dsh-passwords ★ 78 | Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log. | Medium |
| @fancyui/dsh-openrouter-imagen-v2 ★ 0 | dsh plugin: use openrouter models to generate images | Medium |
| dsh-remote ★ 0 | Remote access suite for DeepSeek Harness: QR pairing, HMAC sessions, cloudflared tunnel and PWA. Zero installs on any device. | Medium |
| claude-in-dsh ★ 3 | 在 dsh web 里用本机 Claude Code 驱动会话：原生渲染、权限档、模型/effort、命令面板、broker 托管进程 | Medium |
| @derkinL/dsh-remembers ★ 0 | Long-term memory for DeepSeek Harness, built for companion AI. It says it does not remember instead of making things up. 情感陪伴向记忆插件：向量 + 中文 BM25 + 分层衰减。 | Medium |
| dsh-remote ★ 1 | Operate DeepSeek Harness from your phone: self-hosted relay + desktop plugin tunnel with a mobile-adapted web UI. MIT | Medium |
| dsh-desktop ★ 2 | DeepSeek Harness 桌面端（macOS / Windows）：双击即用的官方 dsh「瘦壳」——不内置 dsh、首次运行自动安装，无需 Node/npm 等任何环境，带版本管理与回滚、App 内更新、插件管理与干净卸载。 | Medium |
| dsh-cordis-mcp ★ 1 | DeepSeek Harness 插件：把 DSH 的动态 Cordis 工具集（inspect/define/run/stop/undefine）以 MCP 暴露给 Claude Code。端点强制身份认证，token 可在 DSH 设置页配置。 | Medium |
| vision-toolkit-for-dsh-v0.1-maybe- ★ 1 | Zero-dependency vision OCR/Q&A toolkit (CLI + local web GUI) for OpenAI-compatible VLMs: Zhipu GLM, Qwen, OpenAI, OpenRouter, SiliconFlow | Medium |
| dsh-auto-classifier ★ 1 | — | Medium |
| dsh-launcher ★ 0 | macOS 程序坞一键启动 DeepSeek Harness (DSH) 的快捷启动器 / One-click DSH launcher for macOS Dock | Medium |
| @AhYi8/dsh-agent-recycle-guard ★ 0 | DSH 删除防护插件：拦截 Agent 的 rm/del/Remove-Item 等删除命令，强制转入 Windows 回收站，fail-closed 无永久删除退路，安装即用零配置。 | Medium |
Showing the 20 most severe.
Automated heuristic scan (static analysis) — a scalable first line of defense; may produce false positives. Not a manual review.
Weekly report archive
12 reportsWhat does this weekly report measure?
This report measures the automated static scan state of the dsh.so plugin registry during 2026-w44: the number of scanned plugins, the distribution across three tiers (low, medium, critical), and the plugins whose risk tier changed since the previous archive.
Why isn't this report an endorsement?
A report row reflects public repository metadata and heuristic rule matches, not a manual audit or runtime verification. False positives and false negatives are possible, so risk flags are a reason to inspect a plugin before install rather than a substitute for that inspection.
The static scan is only one layer. A second, model-driven dynamic security audit reads the source context of entries the static scan already flags as needing review: it covers that subset only, and its conclusion is authoritative when there is one — it can raise a verdict or lower it; the static/vet fused tier applies only when there is no dynamic conclusion. Exemptions stay manual and the audit script never writes the suppression list; human review can record `withdrawn` to fall back to the static/vet tier. As of the latest run: 2864 dynamic audit records, 2289 with a model conclusion, 321 stricter than the static verdict and 789 softer.
Source: dsh.so security standards · Maintained by dsh.so · Published