2026-W45
Published 2026-11-01 · dynamic audit merged
Dynamic audit merged into this report
audit data 2026-10-31Tier rule: where a dynamic audit conclusion exists, that conclusion sets the tier (it may raise or lower it); only plugins without one (not queued / audit failed / withdrawn by human review) fall back to the static scan tier. The static tier = vet as primary judge with dsh as backstop — it is the fallback and the left column of the comparison below.
| Caliber | critical | high | medium | low |
|---|---|---|---|---|
| Effective (this report) | 18 | 294 | 1,095 | 22,383 |
| Static scan (reference) | 0 | 170 | 0 | 23,628 |
| Dynamic (in force) | 0 | 0 | 0 | 0 |
The three rows use different calibers: row 1 is the published tier, row 2 is where the same plugins land under the static scan alone (no dsh scan record = pending, not shown), row 3 counts only dynamic conclusions in force.
This week
Against the previous archive, in effective-tier terms. If the previous archive predates the dynamic merge, this diff mixes a caliber change with real movement.
Critical-risk plugins
18 plugins with an effective critical tier (the dynamic conclusion is authoritative where one exists).
| Plugin | What it is | Static → dynamic | Tier |
|---|---|---|---|
| dsh-cloud-connector★ 0 | — | low → criticalraised | critical |
| @wonaren/dsh-upgrade★ 1 | DeepSeek Harness (DSH) 版本检测、多通道一键平滑升级与服务守护插件 | low → criticalraised | critical |
| dsh-agnes-studio★ 25 | 🎬 泡泡猫的影视工具 — AI 影视创作工作站：文生图、图生图、文生视频、图生视频、短剧剧本拆解与提示词专家。支持 Agnes / DeepSeek / Qwen / 豆包 / MiniMax / Ollama 六大厂商，全局浮层不堵对话框。 | low → criticalraised | critical |
| dsh-tmwebdriver★ 0 | One tool, infinite reach: arbitrary JS in your real logged-in browser. Unlike fixed-action plugins, browser_execute_js does anything DevTools can — read, click, type, fill, navigate, screenshot, CDP. Plus list_tabs/snapshot/type. Zero-setup, self-healing. | high → criticalraised | critical |
| dsh-lark-all★ 0 | Feishu/Lark all-in-one channel plugin for DeepSeek Harness (Cordis): WebSocket bridge, parallel task sessions with streaming cards, media in/out, cloud docs, restart recovery notification. | low → criticalraised | critical |
| @LQH-A-A-O/cad-ppt-skills★ 0 | DSH 整合包：AutoCAD 出图（autocad-draw）+ PPT 制作（pptx-editor）两个 Windows 原生技能 | low → criticalraised | critical |
| phone-tunnel-pool★ 7 | Refreshable Cloudflare quick-tunnel pool for the dsh web GUI — phone access with QR + embedded login | low → criticalraised | critical |
| DSH-Desktop-Huacai★ 1 | deepseek harness一键启动+无需node+内置丰富插件+编辑器模式 | low → criticalraised | critical |
| dsh-plugin-manager★ 2 | DSH 插件管理器：桌面 GUI + CLI，管理 dsh 的 profile、插件与一键启动 dsh web (Tauri 2 + Node CLI) | low → criticalraised | critical |
| @Mzy123l/dsh-plugin-remote-access★ 5 | 为 DeepSeek Harness 桌面版提供「限网段 + 可选数字密码」的远程访问入口 | low → criticalraised | critical |
| dsh-lan-access★ 2 | DeepSeek Harness web plugin that adds a LAN access | low → criticalraised | critical |
| @likhonmain/voice-input★ 1 | 🎙️ Voice Input plugin for DeepSeek Harness — record, pause, playback review, and transcribe speech directly into message drafts with custom OpenAI-compatible models. | low → criticalraised | critical |
| DeepSeekHarnessRemoteGateway★ 26 | 一个轻量级 DeepSeek Harness 远程网关，让你通过 Web 或移动设备远程访问和控制本地 AI Agent | low → criticalraised | critical |
| dsh-tts-player★ 0 | — | low → criticalraised | critical |
| @mvalentsev/dsh-wsl-projects★ 0 | One DeepSeek Harness web server per project, inside WSL2 — started, stopped and opened from a panel in the Windows app. | low → criticalraised | critical |
| @Guuu16/dsh-remote★ 0 | 把本机的 DeepSeek Harness 接到任何地方：在 dsh 设置里配置中继服务器，手机就能访问同一份工作区和聊天记录。A dsh plugin for remote access — same runtime, not a second view of it. | low → criticalraised | critical |
| @AlannerFranklin/dsh-relay-isolation★ 0 | Provision a separate DSH_HOME for a model relay, so relay traffic never shares your main Harness sessions or credentials. | low → criticalraised | critical |
| @dpskk2/dsh-chatsync★ 20 | DSH 接着聊：换台电脑，聊天和项目一起接着做。通过自己的 GitHub 私有仓库同步会话、附件、工作区文件和设置。 | low → criticalraised | critical |
High-risk plugins
294 plugins with an effective high tier (the dynamic conclusion is authoritative where one exists).
| Plugin | What it is | Static → dynamic | Tier |
|---|---|---|---|
| @qftuftfutg/apk-devkit★ 0 | This is a Dsh plugin toolkit that supports unpacking, repacking, signing, DEX processing, file handling, archive management, image processing and hash calculation, which can reduce token consumption under certain circumstances. | low → highraised | high |
| @Dingpenghui-good/dsh-obsidian-sync★ 1 | — | low → highraised | high |
| dsh-4-role-workflow★ 1 | 4-agent workflow (PM + Browser + Programmer + DataEng) for complex DSH tasks. Real run in docs/run-example.md. | low → highraised | high |
| dsh-testsuite★ 2 | testsuite of dsh plugins | low → highraised | high |
| see_the_screen★ 0 | Windows desktop automation plugin for DeepSeek Harness (DSH) agents. Part of DSH Plugin Ecosystem. | low → highraised | high |
| dsh-pentester★ 88 | 基于 DeepSeek Harness 的多 Agent PTES 渗透测试编排插件，支持自动化侦察、漏洞分析、验证与报告，使用 Docker/Kali 隔离工具箱 | Multi-agent PTES penetration testing plugin for DeepSeek Harness with automated recon, vulnerability analysis, validation, reporting, and Docker/Kali toolbox | low → highraised | high |
| vpshub★ 1 | VPS Hub for DeepSeek Harness: SSH ledger plugin — agents discover, test, execute on, and transfer files to your cloud servers. Keys stay local as path references. | low → highraised | high |
| dsh-memory-eternal★ 18 | 记忆核心（Memory Eternal）：自研的 DeepSeek Harness 记忆插件——对话结束自动沉淀知识卡到本地 Markdown Vault（自研去重 / 自研 CJK 检索 / 知识图谱 + 审核中心 / 回收中心），Agent 通过 memory_recall 按需召回历史上下文，零人工干预。 | low → highraised | high |
| @zp2921060653/dsh-plugins★ 2 | DeepSeek Harness (DSH) plugins: agent bridge (Claude Code/Codex/Marvis) + Ghidra reverse engineering bridge | low → highraised | high |
| chromex-browser★ 1 | A complete, hardware-accelerated Web Browser inside VS Code with Widevine DRM video playback, native audio, and zero iframe restrictions. | low → highraised | high |
| @Fourteenth-Night/dsh-aoci★ 0 | AOCI-CODE cognition layer for DeepSeek Harness (DSH): one-shot /aoci <path> gives agents governed, Git-versioned repository/database cognition via a dynamic MCP bridge (aoci_rules/overview/maintain), with auto-maintenance and compaction-contract recovery. MIT; AOCI-CODE binary not bundled. | low → highraised | high |
| dsh-plugin-offline-packager★ 6 | DeepSeek Harness 离线打包插件 — 在联网环境下将 DSH 插件打包为离线安装包（.tgz），传输到离线 DSH 环境中加载安装。 | low → highraised | high |
| dsh-ide-panels★ 1 | DSH 客户端布局插件：仿 VS Code 的 IDE 外壳——中间标签工具区/右侧栏/底部面板，真实 PowerShell 终端 + 本地代码变更对比 + Git 源码管理 + SSH/WSL 远程 | low → highraised | high |
| dsh-profile-port★ 0 | — | low → highraised | high |
| dsh-sandbox-permissions-not-strictly-wider-justification-empty-fix★ 0 | 修复 sandbox_permissions 和 justification 字段在 pwsh/bash/fs/dsh-sandbox 中的 no-op 升级报错。当会话已是 danger-full-access 模式时，模型携带空 justification 或重申同一模式被拒的问题。 | low → highraised | high |
| dsh-change-review★ 14 | DeepSeek Harness 会话修改审查插件：追踪会话内 write/edit，diff 对比展示，会话隔离/子代理聚合/SSE 实时推送/颜色自定义 | low → highraised | high |
| @pn1024/dsh-skill-market★ 9 | dsh plugin - skill marketplace (SkillHub + ClawHub) with sidebar entry, overlay panel, and chat input quick-pick | low → highraised | high |
| dsh-minecraft-theme★ 5 | Minecraft theme plugin for DeepSeek Harness: block-texture background, pixel fonts, MC-style buttons with click sounds, texture import/management, music player with local music folder support. | low → highraised | high |
| dsh-smart-reminder★ 0 | Smart calendar reminder & schedule assistant for DSH Web GUI: lunar calendar, holidays, system notifications on macOS/Windows, and WeCom/platform push integration. | high → high | high |
| odsh-bridge★ 3 | A bridge that connects Openclaw and DeepSeek Harness | low → highraised | high |
Showing the 20 with the most static findings; the remaining 274 are in the plugin list filters.
Medium-risk plugins
1095 plugins with an effective medium tier (the dynamic conclusion is authoritative where one exists).
| Plugin | What it is | Static → dynamic | Tier |
|---|---|---|---|
| dsh-flowglass★ 26 | 流镜 Flowglass — DeepSeek Harness session flowgraph，实时可视化消息、工具组、子代理分支与步骤详情。 | low → mediumraised | medium |
| @zirscard/dsh-macos-signfix★ 0 | macOS code-signing repair for DeepSeek Harness: one doc_ocr_sign_fix tool that diagnoses and fixes the condition where the bundled Python cannot load native extensions because of hardened runtime and library validation. | low → mediumraised | medium |
| @7starsseeker/dsh-jev-guard★ 1 | DeepSeek Harness (DSH) 执行前安全阀门:bash/pwsh 真正执行前先经静态规则 + TypeSafe Jev 语义判定,破坏性操作按 允许/修正/拦截/上报人工 四态处置,含额度降级与审计日志。 | low → mediumraised | medium |
| dsh-deepseek-web-adapter★ 20 | 免费的 DeepSeek 网页版（chat.deepseek.com）LLM 服务提供方，用于 DeepSeek Harness——无需 API 密钥。自动启动网关，支持工具调用和连续对话。Free DeepSeek Web (chat.deepseek.com) LLM provider for DeepSeek Harness — no API key. Auto-launches gateway, tool calling, continuous chat. | low → mediumraised | medium |
| dsh-cyber-sec★ 4 | Authorized security-assessment profile for DeepSeek Harness: scoped network tools, container-backed shell, authorization guard, durable evidence, 21 security skills, 7 specialist subagents | low → mediumraised | medium |
| dsh-dolphin-security★ 0 | DSH plugin — active-defense security patrol powered by SSH + Semgrep. 集扫描、远程执行、结构化报告于一体的 DSH 主动安全巡逻插件。 | low → mediumraised | medium |
| dsh-peekfile-everything★ 0 | DSH local file search, clickable path detection, and floating preview plugin with optional EverythingCLI integration. | low → mediumraised | medium |
| @AIcivilization/dsh-vps★ 11 | One-command DeepSeek Harness on your VPS: a zero-dependency login gateway puts the stock DSH web UI - settings, API keys, plugin market - behind HTTPS and a password, reachable from anywhere. · 一条命令把 DeepSeek Harness 装进 VPS：零依赖登录网关 + 自动 HTTPS，公网可达，设置、API Key、插件市场全都能用。 | low → mediumraised | medium |
| dsh-sim-restart★ 0 | Simulated-restart testing for DeepSeek Harness plugins: verifies plugins survive restart (module eval → apply → smoke → dispose) in isolated subprocesses, with a resident auto-watcher and agent feedback loop | low → mediumraised | medium |
| Personal_MCP★ 3 | 这是一个用来存放个人搭建的MCP服务的仓库 | low → mediumraised | medium |
| dsh-remote-vps★ 0 | Outils fichiers distants pour DeepSeek Harness : read/write/edit/glob/grep/bash sur vos VPS via SSH (Tailscale), avec gestion des connexions dans Settings | low → mediumraised | medium |
| dsh-opencode-go-usage★ 11 | DeepSeek Harness 插件:OpenCode Go 用量与花费悬浮仪表盘(配额、逐请求成本、模型/来源分布) | low → mediumraised | medium |
| dsh-almazom-approve-escalate★ 0 | DSH web plugin: one-click Approve & escalate on the approval card — approves the pending request and switches the live session to a permission preset | low → mediumraised | medium |
| @Han-1413141/dsh-autocompose★ 1 | Task-aware plugin composition for DeepSeek Harness, with native Web UI and isolated task execution | low → mediumraised | medium |
| dsh-plugin-photoshop★ 7 | 让 DeepSeek Harness 的 AI 直接驱动你本机的 Photoshop：批量抠图、批量处理、任意 PS 脚本。7 个工具、93 个操作、零依赖。 | low → mediumraised | medium |
| @Dalld/dsh-ssh-plugin★ 2 | SSH for DeepSeek Harness agents: run commands and move files over SSH while private keys stay inside the Host process. | low → mediumraised | medium |
| @AsakuraAOI/dsh-sidebrowser★ 2 | DSH 官方侧边栏浏览器：结构化观察、原生输入、提取与操作后复核。 | low → mediumraised | medium |
| dsh-privacy-guard★ 0 | DSH 隐私保护插件：本地凭据脱敏网关的控制面板 —— 状态与审计看板、泄密探测沙箱、豁免白名单、加密密钥管理、凭据保护模型入口与部署控制。Control panel for a local credential-redaction gateway in DeepSeek Harness. | low → mediumraised | medium |
| mv-superds★ 2 | Per-model first-turn chain-of-thought anchor presets for DeepSeek Harness (DSH) | low → mediumraised | medium |
| @smallwhitelin/dsh-feishu-bind★ 0 | 浏览器扫码绑定飞书机器人 for DeepSeek Harness(dsh) — 打开网页出二维码、扫码即绑定并自动接线，无需终端向导与 dsh web 界面 | low → mediumraised | medium |
Showing the 20 with the most static findings; the remaining 1075 are in the plugin list filters.
Weekly report archive
13 reportsWhat does this weekly report measure?
This report measures the registry's current risk state during 2026-W45: how many plugins were scanned, the distribution across four tiers (low, medium, high, critical), and which plugins changed tier since the previous archive. The tier is not a single static rule: where the dynamic audit reached a conclusion, that conclusion is authoritative; the static scan tier applies only where there is none.
How the dynamic audit relates to the static scan
The static scan is deterministic rule matching over source shape, manifests and permission requests, and covers the whole registry. The dynamic audit has a model read redacted source context (plugin code is never executed) for the subset whose static tier is medium or above, and judges context — what actually loads at runtime, and whether a list is defensive or offensive. Merge rule: a dynamic conclusion wins (it may raise or lower the tier); otherwise the static tier applies. If human review finds the model wrong, recording `withdrawn` in the review table reverts the tier to the static one immediately. Exemptions are manual only; the audit script never writes the suppression list.
Why isn't this report an endorsement?
Every row comes from public repository metadata, heuristic rule matches, or a model reading source context — all of which can be wrong: rules produce false positives, and a model can be fooled by injected source comments or simply misjudge. Risk flags are therefore a reason to inspect a plugin before install, not a substitute for that inspection.
Source: dsh.so security standards · Maintained by dsh.so · Published