Daily security scan
Date · 2026-08-16 (UTC — plugins first indexed that day)
189
added
0
critical
80
medium
109
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| reactive-resume A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today! | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| EchoBird One-click install + model switch:Claude Code,Codex CLI (OpenAI), Grok Build (xAI), DSH, Kimi Code (Moonshot) ,Qwen Code,Aider,OpenCode,MiMo Code (Xiaomi),ZCode (Z.AI),OpenClaw,Pi,OpenScience,Vibe-Trading,Claude Desktop (3P profile),ChatGPT desktop,OpenCode Desktop, | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| BitFun BitFun combines a high-performance agent runtime written in Rust with a polished desktop application. It pairs the depth of a Code Agent with open, general-purpose capabilities for work beyond software development. | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| opc-nexus 开源的企业版的数字员工工作台 （原内部项目AiBoxDash） | medium | warn | 2/0/1 | 0/0 | 2026-08-16 01:57 |
| caliper Know if your agent skill actually works. A lightweight evaluation harness that tracks a success rate across Claude Code, Codex, Pi, and Hermes. | medium | warn | 1/0/0 | 0/0 | 2026-08-16 01:57 |
| dsh-plugin-dev-skills An Agent Skills skill for developing DSH plugins（开发 DSH 插件的 Agent Skill）——插件/服务/事件/工具/LLM 适配器/打包安装的标准。Works with Claude Code, Codex, DSH, VS Code Copilot & any compatible agent. | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| deepseek-harness-workbench-plugin Deepseek-harness-workbench-plugin | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| dockyard-dsh A macOS-only native account-pool and provider plugin for DSH. | low | pass | 0/0/1 | 0/0 | 2026-08-16 01:57 |
| dsh-permgate 为 DSH提供的细粒度权限控制插件 | medium | warn | 1/0/1 | 0/0 | 2026-08-16 01:57 |
| write-chinese-long-screenplay 中文电影与剧集长剧本写作 skill | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| dsh-gui DSH GUI图形化界面，兼容mac和windows 开箱即用 | medium | warn | 1/4/12 | 0/0 | 2026-08-16 01:57 |
| dsh-plugin-msg-nav DSH 对话节点导航条插件：在对话区右缘渲染一列短横线节点串（每条真实用户消息一个节点），跟随阅读位置；鼠标靠近节点串时，节点条「变形弹出」为单行消息预览面板（覆盖原位置，移开复原），点击任意预览平滑跳转 + 高亮横线，节点过多时可在悬停区域内用滚轮滑动浏览 | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| plugin-switch DSH web plugin: toggle plugins on/off from the GUI without restarting the server | medium | warn | 3/0/5 | 0/0 | 2026-08-16 01:57 |
| dsh-image-inline DSH plugin: show_image tool that renders an image inline into the web chat flow (QQ/WeChat style) — path text in the message, image bytes never enter model context. | low | pass | 0/0/1 | 0/0 | 2026-08-16 01:57 |
| dsh-mcp DSH 的 MCP 服务器管理插件：可视化界面管理 + 按需 tool search 热注入，省 token。 | medium | warn | 1/1/2 | 0/0 | 2026-08-16 01:57 |
| dsh-unread-dot DSH plugin: macOS Dock badge (dot = running, number = results) + bubble chime, built on the Badging API | low | pass | 0/0/4 | 0/0 | 2026-08-16 01:57 |
| infographic A Claude Code skill that turns a document or a topic into a designed visual explainer. 52 block forms, an enforced word budget, and guards that fail the build. | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| deepseek-harness-box Portable one-click Windows launcher for DSH. No Node.js, npm, pnpm or setup required. DSH 免安装 Windows 一键启动器。 | low | pass | 0/0/3 | 0/0 | 2026-08-16 01:57 |
| dsh-notifier Unified notification push plugin for DSH: one minimal notify() API, 8 channel adapters (telegram/dingtalk/feishu/wxpusher/pushplus/serverchan/bark/webhook), dual trigger (auto session events + agent tool). | medium | warn | 0/1/6 | 0/0 | 2026-08-16 03:12 |
| dsh-im 通过扫码把IM机器人接入DSH（支持飞书、微信、钉钉、QQ、企业微信等） | low | pass | 0/0/0 | 0/0 | 2026-08-16 03:12 |
| dsh-plugin-writing-guard DSH 论文写作守卫（去 AI 味 / AI 痕迹检测与修改残留检查）— DSH academic writing guard: detects AI-writing style, revision residue & defensive writing in manuscripts; humanize guidance included. writing_audit + writing_rules with auto-audit on paper file writes. | medium | warn | 4/2/0 | 0/0 | 2026-08-16 03:12 |
| anime-find DSH 搜番插件：对话内多源搜索番剧，卡片展示 Bangumi 评分与详情，支持复制磁力。 | medium | warn | 0/2/6 | 0/0 | 2026-08-16 03:12 |
| DSH-Think-zh DSH 默认的思考语言为英文，这不利于中文使用者阅读推理过程与复核结论。本插件通过在每次请求的 system prompt 中注入一条精简的强制语言指令，使: 思考过程强制简体中文，无论用户用什么语言提问。 | low | pass | 0/0/0 | 0/0 | 2026-08-16 03:12 |
| dsh-im-hub Multi-platform IM gateway for DSH: Feishu (Lark), WeCom (WeChat Work), and Telegram. One agent per chat, whitelist access, no public endpoint needed (Feishu long connection / Telegram long polling). | medium | warn | 3/3/9 | 0/0 | 2026-08-16 03:12 |
| dsh-anchored-standard Two-phase DSH preset: Minimal-aligned bootstrap (bash+read), then full Standard tools after the first tool call or reply | low | pass | 0/0/1 | 0/0 | 2026-08-16 03:12 |
| dsh-code-security OpenAI Codex Security for DSH, zero-setup — 13 audit skills + 5 scan tools in a session preset, plus an auto-audit gate for new plugins, running on your local model with no API keys. | medium | warn | 0/3/0 | 0/3 | 2026-08-16 03:19 |
| dsh-agent-memory Self-evolving memory for DSH: capture → dream consolidation → retrieval injection → evolve. User profile, project memory, correction learning, resume narrative — with provenance back to the replayable session log. 自进化记忆插件。 | medium | warn | 1/1/5 | 0/0 | 2026-08-16 03:27 |
| dsh-sandbox-audit Static sandbox-policy consistency audit for DSH presets | low | pass | 0/0/0 | 0/0 | 2026-08-16 04:08 |
| find-dsh-plugins 对话式查找 DSH 插件的增强版 skill：语义检索 × 四源聚合 × 安全审计 | low | pass | 0/0/0 | 0/0 | 2026-08-16 04:09 |
| A-share-Ai 幻银量化A股阿法狗AlphaHYQi，100%由ai自主驱动的实盘交易机器。接入自产龙虾iClaw，手机端一句话控制四大模型同时干活。获取方法：前往https://hyqibot.com/card-shop.html 购服务卡即可获得软件，详情README.md。 A股Ai炒股大赛历史排行（模拟基金）：https://hyqibot.github.io/A-share-Ai/reports/report.html A股Ai炒股大赛历史排行（全市场）：https://hyqibot.github.io/A-share-Ai/reportsall/report.html 实时播报：https://hyqibot.github.io/A-sh | low | pass | 0/0/10 | 0/0 | 2026-08-16 04:49 |
| deepseek-harness-phone-remote DSH phone remote control via Tailscale - persistent file/workspace plugin - tested on OPPO Find X8 Ultra | low | pass | 0/0/4 | 0/0 | 2026-08-16 04:49 |
| TMCRA-Agent-Memory Scope-isolated, graph-based long-term memory engine for AI agents. | medium | warn | 0/1/3 | 0/0 | 2026-08-16 04:49 |
| dsh-pentest 面向 DSH的渗透测试模式 @CloverSecLabs | low | pass | 0/0/0 | 0/0 | 2026-08-16 04:49 |
| dsh-plugin-marketplace Out-of-tree installable plugin marketplace bundle for DSH | low | pass | 0/0/5 | 0/0 | 2026-08-16 04:49 |
| dsh-sitemap 站点地图（Yakit 风格）：DSH 侧边栏树形接口地图，搜索 / 接口详情 / 一键复制 curl，数据实时同步 | low | pass | 0/0/4 | 0/0 | 2026-08-16 04:49 |
| dsh-plugin OpenTelemetry tracing for DSH: turns each agent turn into a GenAI span tree — steps, LLM calls with TTFT, tool executions, token usage — exported over standard OTLP to Jaeger, Grafana Tempo, SigNoz, Langfuse, or any compatible backend. | low | pass | 0/0/4 | 0/0 | 2026-08-16 04:49 |
| dsh-better-deepseek DSH bridge plugin for Better DeepSeek Chrome extension. | medium | warn | 0/4/5 | 0/0 | 2026-08-16 04:49 |
| dsh-mobile-gate LAN mobile gateway for DSH: first-visit approval, per-device tokens, rate limiting, mobile layout injection. 局域网手机安全访问 DSH 的即插即用网关：本机审批、设备令牌、限流、手机端适配。 | medium | warn | 0/2/6 | 0/0 | 2026-08-16 04:49 |
| dsh-md-notes The note-taking plugin for DSH allows you to save and edit content from your conversations that you want to record. | low | pass | 0/0/2 | 0/0 | 2026-08-16 04:49 |
| dsh-writing-remote Typert remote for dsh-tool-writing: exposes project, library and search data to the client writing panel. | low | pass | 0/0/1 | 0/0 | 2026-08-16 04:49 |
| dsh-wending-ssh-manager Hardened multi-account SSH manager for DSH: profile-isolated storage, host-key pinning, Windows DPAPI secrets, pooled exec/SFTP, isolated tunnels, web terminal, cluster operations, and official agent tools. | medium | warn | 1/1/0 | 0/0 | 2026-08-16 05:48 |
| dsh-wending-git-workbench Codex-style Git workbench for DSH: workspace-scoped changes, diff, stage, commit, guarded branch operations, graph history, fetch, fast-forward pull, and upstream push through official plugin APIs. | low | pass | 0/0/1 | 0/0 | 2026-08-16 05:48 |
| dsh-remote-control Remote control suite for DSH: Android companion APP, self-hosted relay server, and low-power Windows lifecycle agent. | low | pass | 0/0/11 | 0/0 | 2026-08-16 05:50 |
| dsh-plugin-quota DeepSeek account quota (balance) and session token usage for the DSH web UI | low | pass | 0/0/4 | 0/0 | 2026-08-16 06:04 |
| OpenViking Self-evolving Context Database for AI Agents. Unify Agent Memory, Knowledge RAG and Skills. | low | pass | 0/0/0 | 0/0 | 2026-08-16 06:58 |
| agent-qa Open-source self-improving QA agent for software teams. A test harness with memory. Write tests in natural language for web and mobile. agent-qa learns from every run, adapts to UI changes, and catches regressions before you ship. | low | pass | 0/0/0 | 0/0 | 2026-08-16 06:58 |
| dsh_workflow 把Claude Code的UltraCode模式带给DSH，把 DSH 的一次性多 Agent 调度，升级为可生成、可保存、可治理、可观察、可恢复的 Workflow 层 | medium | warn | 1/1/2 | 0/0 | 2026-08-16 06:58 |
| deepseek-harness-desktop DSH 原生桌面版，基于 Tauri 2，内置 Node.js 运行时，一键安装，极速启动，托盘常驻，自动更新。DSH native desktop version: built on Tauri 2 with a bundled Node.js runtime. | medium | warn | 5/10/11 | 0/0 | 2026-08-16 06:58 |
| dsh-claude-ux DSH plugin: Claude-style Chinese risk control & conversation autonomy for DSH web | medium | warn | 1/0/6 | 0/0 | 2026-08-16 06:58 |
| dsh-pocket 把 DSH 装进你的口袋：电脑上跑 dsh web，手机扫码即同步访问（局域网 + 公网，实时同屏） | medium | warn | 3/1/12 | 0/0 | 2026-08-16 06:58 |
| dsh-plugin-net-access 为 DSH 新增 Net Access 模式，用于解决 Windows 沙箱内 curl.exe 无法访问 HTTPS 的问题，文件写保护不变。 / Adds a Net Access mode to DSH: curl.exe can access HTTPS inside the Windows sandbox again, with file-write protection unchanged. | medium | warn | 1/0/3 | 0/0 | 2026-08-16 06:58 |
| dsh-message-rail Codex 风格左侧消息导航轨道：等距刻度 + 悬停预览 + 点击跳转用户消息 · DSH Web 插件 | low | pass | 0/0/0 | 0/0 | 2026-08-16 06:58 |
| jarvis-index Public distribution surface for jarvis — local-first code intelligence MCP server (SCIP navigation + Zoekt search). Installer, Claude Code / Codex / Cursor plugins, and prebuilt binaries. | medium | warn | 0/1/0 | 0/0 | 2026-08-16 06:58 |
| dsh-Remote DSH Remote · 口袋里的 DSH 控制台 会话 · 审批 · 提问 · 文件传输，局域网 / Tailscale 直连 多服务器自动选优，聊天记录离线可看 带 Token 鉴权，数据只在你的设备之间流动 | medium | warn | 4/17/56 | 0/0 | 2026-08-16 06:58 |
| dsh-plugins Independent plugins for DSH, organized as isolated packages in one monorepo. | low | pass | 0/0/0 | 0/0 | 2026-08-16 06:58 |
| dsh-anchored-flash Anchored-standard agent preset for DSH: Minimal-aligned first request, low-injection post-promotion, indirect AGENTS.md loading — anchored intelligence without the IQ drop. （DSH 的锚定标准预设：首轮 Minimal 对齐、晋升后低注入、AGENTS.md 间接按需加载——锚定智力不降智。） | low | pass | 0/0/2 | 0/0 | 2026-08-16 06:58 |
| dsh-expert-mode DSH 专家模式 agent preset — 统筹团长 + 10 位领域专家子代理 Expert-mode preset for DSH | medium | warn | 0/3/0 | 0/3 | 2026-08-16 06:58 |
| dsh-mcp-manager 在 DSH 设置页管理 MCP 服务器：运行时添加/编辑/启停/重连/删除，实时状态、自动重连，中英双语界面。MCP server manager for DSH — add, edit, enable/disable, reconnect & delete MCP servers from the web settings page, with live status and auto-reconnect. | medium | warn | 0/1/8 | 0/0 | 2026-08-16 06:58 |
| dsh-worktree Durable Git worktree isolation and delivery plugin for DSH | low | pass | 0/0/0 | 0/0 | 2026-08-16 06:58 |
| dsh-plugin-vscode-sidebar 提供vscode风格和功能的侧栏 | low | pass | 0/0/0 | 0/0 | 2026-08-16 06:58 |
| clamicro 在手机上审批 Claude Code 的操作。局域网直连，零依赖。 | medium | warn | 0/3/3 | 0/0 | 2026-08-16 06:58 |
| dsh-openviking 面向 DSH 的 OpenViking 检索、资源管理、自动召回与会话记忆插件 | low | pass | 0/0/0 | 0/0 | 2026-08-16 06:58 |
| dsh-agency-agents DSH agency agents 基于 DSH 的全行业智能体 | low | pass | 0/0/4 | 0/0 | 2026-08-16 08:26 |
| Co-Engram Self-evolving team memory | medium | warn | 3/1/10 | 0/0 | 2026-08-16 08:46 |
| ru-marketplace-mcp Девять российских маркетплейсов и китайский Taobao как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, Мегамаркет, Lamoda, DNS, Ситилинк. Плюс сравнение цен по всем сразу. Только чтение, ключи не нужны. | low | pass | 0/0/0 | 0/0 | 2026-08-16 08:46 |
| local-shell-mcp Enables LLM to use a cli environment. | medium | warn | 0/1/1 | 0/0 | 2026-08-16 08:46 |
| dsh-desktop Unofficial Windows and macOS desktop app for DSH, with bundled runtime and automatic reuse of existing DSH environments. | medium | warn | 2/11/11 | 0/0 | 2026-08-16 08:46 |
| dsh-read-url DSH URL reader: fetch any page and return clean main-content text/Markdown. Auto charset (GBK/GB2312/UTF-8/Big5), token-efficient (6000-char cap, cache, offset), zero deps, no API key. 网页一键读全文 → 干净正文 / 结构化 Markdown | low | pass | 0/0/1 | 0/0 | 2026-08-16 08:46 |
| dsh-lark DSH Plugin for Lark Integration | low | pass | 0/0/0 | 0/0 | 2026-08-16 08:46 |
| dsh_plugin_swift_cycle Swift Cycle governance skill adapter for DSH; user-invoked, version-pinned, and offline-verifiable. | low | pass | 0/0/0 | 0/0 | 2026-08-16 08:46 |
| dsh-notifacation-frame dsh通知消息统一管理框架 | medium | warn | 1/0/3 | 0/0 | 2026-08-16 08:46 |
| dsh-full-remote dsh-plugin: Fix DSH 403s over tunnels. Token-gated reverse proxy restores settings.* / credentials.* / host.listDirectory remotely. Per-device sessions, WebSocket/SSE, mobile control panel. | medium | warn | 1/0/1 | 0/0 | 2026-08-16 08:46 |
| dsh-memory AGI 的长期记忆基础设施。让 AI Agent 拥有不可遗忘的自我。跨会话记忆 · 持续学习 · 可审计信任（智能论 v3.2） | medium | warn | 4/4/3 | 0/0 | 2026-08-16 08:46 |
| dsh-prompt-rail Prompt Rail 是 DSH Web 会话页的紧凑纵向提示词快速跳转条。每一条横杠对应一条当前已加载的普通用户提示词。悬停或键盘聚焦会展示预览；点击会滚动跳转到对应提示词。 | low | pass | 0/0/0 | 0/0 | 2026-08-16 08:46 |
| dsh-routing-suite Lightweight, localized task routing for DSH | medium | warn | 3/0/2 | 0/0 | 2026-08-16 08:46 |
| dsh-ocgo-lite OpenCode Go 用量常驻条：套餐余量圆环 + token/花费实时统计（本次会话/全部范围 + 按模型联动，官方实时定价），一键复制 API Key。OpenCode Go usage bar for DSH. | low | pass | 0/0/6 | 0/0 | 2026-08-16 08:46 |
| dsh-session-link DSH 的 Codex 式会话深度链接插件：dsh:// 深链，跨对话读取上下文 | low | pass | 0/0/0 | 0/0 | 2026-08-16 08:46 |
| Better_Deepseek_Harness Better DSH, with some functional extensions to webui and DSH·更好的DSH，对webui和DSH进行了一些功能扩展 | low | pass | 0/0/1 | 0/0 | 2026-08-16 08:46 |
| deepseek-harness-remote 基于 DSH 插件机制的多端远程访问方案，让桌面端与 Android 端安全连接并操作远程 Harness。（A multi-device remote access solution built on the DSH plugin system, enabling desktop and Android clients to securely connect to and operate a remote Harness.） | low | pass | 0/0/1 | 0/0 | 2026-08-16 08:46 |
| dsh-pref-kit 缓解部分dsh性能问题的插件 | low | pass | 0/0/0 | 0/0 | 2026-08-16 08:46 |
| knowlp-rag KnowLP-RAG: dual knowledge-graph RAG for Markdown notes — dsh plugin add @eqman00003/knowlp-rag · MCP + native Cordis plugin for DSH & Claude Code | medium | warn | 1/0/3 | 0/0 | 2026-08-16 08:46 |
| MistyMoon-DSH Local-first long-term companion plugin suite for DSH | medium | warn | 3/0/5 | 0/0 | 2026-08-16 08:46 |
| dsh-explorer DSH plugin: VS Code-style file-tree explorer (git decorations, preview, diff, drag-to-reference); install via dsh plugin --profile web add. | medium | warn | 3/0/1 | 0/0 | 2026-08-16 08:46 |
| MemOS Self-evolving memory OS for LLM & AI Agents: ultra-persistent memory, hybrid-retrieval, and cross-task skill reuse, with 35.24% token savings | low | pass | 0/0/0 | 0/0 | 2026-08-16 08:46 |
| engram Evidence-based learning engine for Claude Code — first-principles curricula, free-recall verification with receipts, FSRS-scheduled memory, and explorable artifacts. Learn anything; keep it. | medium | warn | 1/1/8 | 0/0 | 2026-08-16 08:46 |
| dsh-minecraft-skin DSH Minecraft 风格皮肤插件：草绿/泥土棕/天空蓝/深灰四色体系，全量覆盖 162 个主题令牌，像素字体/云朵/Creeper/漂浮方块 | low | pass | 0/0/0 | 0/0 | 2026-08-16 08:46 |
| dsh-codex-oauth Use your OpenAI subscription with DSH to access GPT models, image generation, and web search. | medium | warn | 0/7/13 | 0/0 | 2026-08-16 10:38 |
| harness-ai-kit Package manager for AI agent assets (skills / CLIs / MCPs / loops) across Codex, Claude Code, Cursor and Kiro. | low | pass | 0/0/0 | 0/0 | 2026-08-16 10:38 |
| dsh-plugin-market Verified plugin marketplace for DSH — discover, inspect, install, and remove DSH plugins from the Web UI. | low | pass | 0/0/3 | 0/0 | 2026-08-16 10:38 |
| amadeus-for-dsh Amadeus (AI assistant from Steins;Gate 0) for DSH | medium | warn | 0/7/20 | 0/0 | 2026-08-16 10:38 |
| dsh-agent-compact DSH plugin for agent-driven span compaction: compress chosen conversation spans into self-written checkpoints instead of the official head-anchored full-context sweep. | low | pass | 0/0/0 | 0/0 | 2026-08-16 10:38 |
| dsh-self-improved DSH long-term memory & self-evolving plugin: L0 capture -> L1 memory extraction -> L2 scene grouping -> L3 user persona, auto recall injection + skill synthesis, fully local. | low | pass | 0/0/3 | 0/0 | 2026-08-16 10:38 |
| dsh-apex-standard DeepSeek V4 Pro/Flash unified anchored agent preset for DSH (official API & opencode-go): two-stage RL-aligned bootstrap, model-aware path routing, epoch-aware long-session stability | low | pass | 0/0/5 | 0/0 | 2026-08-16 10:38 |
| dsh-all-warmup Global frictionless warm-up layer plugin for DSH | DSH 全局无感热身层插件：任何会话首轮自动热身，第二轮起恢复完整模式 | low | pass | 0/0/0 | 0/0 | 2026-08-16 10:38 |
| lx_music-for-dsh This is a plugin that allows DSH own the ability of lx music. | low | pass | 0/0/0 | 0/0 | 2026-08-16 10:38 |
| dsh-web-enhanced [building……] DSH's web enhancement plugin—brings task dashboards, Git graphs, workspace file panels, balance displays, and graph recognition into the DSH web interface. | low | pass | 0/0/0 | 0/0 | 2026-08-16 10:38 |
| dsh-bottom-info-bar Bottom Info Bar — an information bar plugin for DSH: provider/model, live balance, peak/off-peak pricing with countdown, and real persisted per-session spend in a single line. | low | pass | 0/0/7 | 0/0 | 2026-08-16 10:38 |
| dsh-download-progress DSH web plugin: 下载进度面板（AI 产物） | low | pass | 0/0/0 | 0/0 | 2026-08-16 10:38 |
| skillhub skillhub of deepseek-harness | medium | warn | 1/2/6 | 0/0 | 2026-08-16 11:29 |
| dsh-plugins-finder Natural-language plugin search for DSH — ask what you need, get matching dsh.so plugins with install commands. | low | pass | 0/0/2 | 0/0 | 2026-08-16 11:39 |
| dsh-client-ui-filesystem-manager A customized DSH filetree manager UI plugin. | medium | warn | 0/1/2 | 0/0 | 2026-08-16 11:46 |
| dsh-client-ui-settings-skills A customized DSH skill setting UI plugin. | low | pass | 0/0/2 | 0/0 | 2026-08-16 11:49 |
| dsh-client-ui-filesystem A customized DSH filesystem UI plugin. | medium | warn | 0/1/6 | 0/0 | 2026-08-16 11:49 |
| dsh-client-ui-git-branch A customized DSH git branch UI plugin. | medium | warn | 2/0/3 | 0/0 | 2026-08-16 11:50 |
| dsh-client-ui-settings-mcp 在 DSH 设置页管理 MCP 服务器：运行时添加/编辑/启停/重连/删除，实时状态、自动重连，中英双语界面。MCP server manager for DSH — add, edit, enable/disable, reconnect & delete MCP servers from the web settings page, with live status and auto-reconnect. | medium | warn | 0/1/6 | 0/0 | 2026-08-16 11:53 |
| dsh-voice-input-plugin | low | pass | 0/0/0 | 0/0 | 2026-08-16 12:38 |
| dsh-board DSH 侧栏用量与成本面板：官方峰谷计价 · 1M 上下文 · 词勋段位 · 成就与热力图 | low | pass | 0/0/5 | 0/0 | 2026-08-16 13:31 |
| dsh-traffic-light Multi-session agent status monitor for DSH. | low | pass | 0/0/1 | 0/0 | 2026-08-16 14:03 |
| k8e k8e.sh - OpenSource Agentic AI Sandbox Matrix | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| J-Space-Cognition-Suite-V3.6 J-Space Cognition Suite V3.5Turbo - AI cognitive-enhancement Skills based on Anthropic's J-space global workspace research. | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| deepseek-harness-desktop DSH Tauri 桌面版 | Only 5mb installer, zero environment setup. Windows / macOS / Linux. | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| everything-kiro The complete collection of Kiro IDE configs, agents, skills, hooks, and MCP integrations for maximum productivity. | low | pending | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| DeepSeek-V4-J-Space-Capability-Realization-Report DeepSeek V4 × J-Space capability realization report — benchmark evidence that J-Space reduces capability-realization loss on DeepSeek V4 (Flash/Pro). | low | pending | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| deepseek-harness-desktop Desktop version of DSH. 由tauri构建的DSH 桌面端，高效简洁。 | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| dsh-catppuccin-theme DSH Web GUI 的 Catppuccin 主题插件：Latte / Frappé / Macchiato / Mocha 四种主题一键切换，内置可开关的玻璃质感（Glassmorphism） | medium | warn | 0/1/7 | 0/0 | 2026-08-16 14:37 |
| dsh-vscode A Claude Code/Codex-style VS Code sidebar for DSH. 像 Claude Code 和 Codex 一样，在 VS Code 侧边栏中使用 DSH。 | medium | warn | 1/0/5 | 0/0 | 2026-08-16 14:37 |
| deepseek-peak Live DeepSeek V4 API peak/off-peak status widget — drop-in dsh-plugin for deepseek-ai/deepseek-harness, plus a standalone browser widget. | medium | warn | 3/0/5 | 0/0 | 2026-08-16 14:37 |
| dsh-session-manager DSH 会话管理插件：删除（回收站恢复/彻底清除）、统计、继续/暂停、打开日志目录、对话顶部抽屉、工作区分组与排序、上下文压缩阈值设置。DSH session manager: delete with trash/restore/purge, stats, continue/pause, log folder, header drawer, workspace grouping, context compaction threshold. | medium | warn | 2/0/12 | 0/0 | 2026-08-16 14:37 |
| Minke 🐳 DSH Desktop | low | pending | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| deepseek-harness-auth DSH auth插件 | medium | warn | 0/1/15 | 0/0 | 2026-08-16 14:37 |
| dsh-ikun-pet 🐤 DSH永久插件：Deep diving 回答期间用坤宠动图填满深潜状态行下方区块——进度条 0%→100%，每 20% 切换动作与文案，完成时系统级播放「你干嘛~哎哟」 | low | pass | 0/0/1 | 0/0 | 2026-08-16 14:37 |
| dsh-better-markdown DSH Web plugin powered by markstream-react for resilient streaming Markdown, Mermaid diagrams, KaTeX math, and safe renderer fallback. | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| model-usage-plugin 统计各模型 tokens 消耗并估算费用，显示账户余额 | Model token usage stats and cost estimation with account balance for DSH | low | pass | 0/0/8 | 0/0 | 2026-08-16 14:37 |
| dsh-desktop-safe-market 唯一主打安全，提倡先审查再安装的 DSH 市场 (review-before-install DSH marketplace) | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| dsh-composer-expand Composer expand/collapse toggle for DSH: a ⬆/⬇ button in the composer tool row grows the input to a tall 70vh writing view for long drafts. | low | pass | 0/0/7 | 0/0 | 2026-08-16 14:37 |
| dsh-client-ui-skins DSH Web skin plugin with built-in themes and custom image skins | medium | warn | 0/2/4 | 0/0 | 2026-08-16 14:37 |
| deepseek-harness-android-app DSH 安卓通用控制端：Termux 引导、一键部署、内置浏览器与存储管理（dsh-plugin 生态） | medium | warn | 4/3/4 | 0/0 | 2026-08-16 14:37 |
| DSH-AUX Auxiliary model system for DSH: unified aux-LLM routing (per-task model, timeout, concurrency, failure cooldown, main-model fallback) + vision_analyze / web_extract / compress_text tools, settings page, and session image lifecycle cleanup. | medium | warn | 4/0/3 | 0/0 | 2026-08-16 14:37 |
| dsh-navigation-bar Piano-key style conversation navigation bar for the DSH web GUI | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| raphael-loop Loop Engineering | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| session-seed-plugin 对话自动注入，可用于高概率破甲模型，放开限制 | low | pass | 0/0/2 | 0/0 | 2026-08-16 14:37 |
| dsh-plugin-subhub Bring third-party subscription accounts into DSH - 为 DSH 接入第三方订阅账户(当前支持 OpenAI / ChatGPT 订阅,更多订阅服务规划中) | medium | warn | 1/1/14 | 0/0 | 2026-08-16 14:37 |
| dsh-plugin-tts Edge TTS voice plugin for DSH: read assistant replies aloud, auto-read toggle, voice settings panel (free, no API key) | medium | warn | 2/5/17 | 0/0 | 2026-08-16 14:37 |
| deepseek-harness-Install DSH 一键安装，双击DSHsetup.exe就可以一键安装，适合小白！ | low | pending | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| Dsh-FileExplorer 给 DSH Web 界面加一个 VS Code 风格的工作区文件浏览器：右侧文件树 + 可编辑标签页 + Markdown 阅读/编辑/分屏 + 悬浮大纲 + Quick Open 搜索。 | medium | warn | 0/3/6 | 0/0 | 2026-08-16 14:37 |
| dsh-vision Vision for DSH: Doubao Web by default (zero-cost, no API key), Antigravity IDE quota (flash/pro), any IDE CLI, Gemini — auto detail escalation, evidence memory | medium | warn | 6/7/18 | 0/0 | 2026-08-16 14:37 |
| dsh-loop-dock A loop dock for DSH: one harness, multiple agent loops. | medium | warn | 1/0/0 | 0/0 | 2026-08-16 14:37 |
| dsh-skill-picker DSH 实现 workbuddy 同款选择 skill 功能 | WorkBuddy-style skill picker for DSH: pick a skill in the composer, insert the official /skill-name gesture, and DSH loads it with your message. | low | pass | 0/0/8 | 0/0 | 2026-08-16 14:37 |
| dsh-web-remote DSH 手机/外网远程访问插件：Cloudflare Quick Tunnel 公网隧道 + token 鉴权 + gzip 压缩 + 局域网 HTTPS 直连 + 手机图标面板 + QQ 机器人取链接 | medium | warn | 0/4/8 | 0/0 | 2026-08-16 14:37 |
| dsh-trajectory-governor 专为 pro 模型使用 Closed-loop trajectory policy plane for DSH | low | pass | 0/0/2 | 0/0 | 2026-08-16 14:37 |
| dsh-devquest 把开发变成 RPG 的 DSH 插件：回合/工具/待办积累 XP、47 枚成就+稀有度、每日/每周挑战、每日抽奖、赛季商店、7 款主题皮肤、多称号、活跃日历+荣誉墙。事件流驱动，装好自动计分。 | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| dsh-plugin-workbench VS Code-style workspace file explorer with editable preview for the DSH web GUI | low | pass | 0/0/5 | 0/0 | 2026-08-16 14:37 |
| dsh-mobile Use DSH from your iPhone / iPad: LAN reverse proxy, iOS PWA (add-to-home-screen) chrome, and touch/mobile CSS for the web GUI | medium | warn | 0/6/9 | 0/0 | 2026-08-16 14:37 |
| deepseek-harness-forge-plugins Forge-plus: math/logic/regex/eprover/system/repair gates + TCM diagnosis + memory recall plugins for DSH | medium | warn | 1/1/5 | 0/0 | 2026-08-16 14:37 |
| dsh-client-ui-mobile DSH Web UI 手机端适配插件：抽屉式布局、聊天背景+毛玻璃、AI 聊天气泡、消息头像、中英双语（桌面端与原版一致） | low | pass | 0/0/6 | 0/0 | 2026-08-16 14:37 |
| deepagent The agent that gets your work done and into the self-evolution. Built on DSH: Everything is a Plugin. 帮你完成工作的智能体，同时探索自进化。基于 DSH 构建：一切皆插件。 | medium | warn | 1/0/1 | 0/0 | 2026-08-16 14:37 |
| awesome-codex-plugins A curated list of awesome OpenAI Codex / ChatGPT plugins, skills, and resources. The #1 Codex Marketplace. See live plugins at: https://hol.org/registry/plugins | low | pass | 0/0/0 | 0/0 | 2026-08-16 14:37 |
| oardsh Bring DSH to your desktop. | medium | warn | 4/3/6 | 0/0 | 2026-08-16 14:37 |
| dsh-self-harness-tools Two self-contained DSH plugins: dsh-prior-probe (frozen probe-battery tools, official bundle) and dsh-evidence-dashboard (archive dashboard). | medium | warn | 3/1/3 | 0/0 | 2026-08-16 14:37 |
| deepseek-harness-desktop-linux DSH Desktop — Linux 社区维护版 / community-maintained Linux build, syncing with darven-cs/deepseek-harness-desktop | medium | warn | 1/0/3 | 0/0 | 2026-08-16 14:37 |
| dsh-docs-panel | low | pass | 0/0/1 | 0/0 | 2026-08-16 15:23 |
| dsh-plugin-vet Trust pipeline for deepseek-harness plugins: deterministic static scan (11 rules) + LLM-driven audit protocol + two-part scorecard, with optional runtime guard (T1 sentinel / T2 fs & child_process hooks) and honeypot decoys. Monitor-and-alert only — vet never blocks or kills on its own. | medium | warn | 1/0/0 | 0/0 | 2026-08-16 15:54 |
| hol-guard Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime. | low | pass | 0/0/0 | 0/0 | 2026-08-16 16:41 |
| dsh-usage 🌊 Persistent dock & fully-customizable balance/usage panel for DSH — activity heatmap, dual-channel comparison, local-only & privacy-first | low | pass | 0/0/8 | 0/0 | 2026-08-16 16:41 |
| dsh-plugin-smooth-stream Better streaming text animation for DSH 给DSH加入更好文字动画 | low | pass | 0/0/0 | 0/0 | 2026-08-16 16:41 |
| weshop-dsh-plugin Native WeShop Cordis plugin for DSH. Allow you to use infinite canvas with infinite creative skills. | medium | warn | 2/13/28 | 0/0 | 2026-08-16 16:41 |
| dsh-desktop-hub DSH Desktop Hub — DSH 桌面管理控制台（Electron + TypeScript）。多 Tab 管理 Harness / Plugin / MCP / Skills，双击即用。 | medium | warn | 7/5/20 | 0/0 | 2026-08-16 16:41 |
| dsh-file-mentions Clickable file paths in DSH replies: Codex-style inline open, 📂 reveal in file manager, mentioned-files chip list. DSH web plugin (zero-dependency). | medium | warn | 2/0/2 | 0/0 | 2026-08-16 16:41 |
| dsh-mcp-manager 用于 DSH 的 MCP 可视化管理插件：在「设置 → MCP」中查看已安装/启用的 MCP 服务器，支持增删、启用/停用，并实时查看连接状态。 | low | pass | 0/0/1 | 0/0 | 2026-08-16 16:41 |
| dsh-codex-pet 将 Codex 桌宠皮肤自动迁移到 DSH，在 DSH Web 界面渲染功能一致的桌宠：动画、多会话对话框、设置面板，一键迁移即插即用。 | medium | warn | 3/6/11 | 0/0 | 2026-08-16 16:41 |
| dsh-plugin-integration DSH 插件整合中心：动态发现、打标分类、重叠/兼容检测、一键启停与失效检测 | medium | warn | 2/1/14 | 0/0 | 2026-08-16 16:41 |
| dsh-chinese-traditional-wisdom-skill 中华传统智慧（玄枢）AI Agent 技能包的 DSHCordis 插件：八字/紫微/六爻/梅花/奇门/风水/五运六气/体质全融合，本地确定性引擎 + 可视化 Dashboard，一行 dsh plugin add 安装。 | low | pass | 0/0/0 | 0/0 | 2026-08-16 16:41 |
| dsh-mermaid 在 DSH Web 会话中把 Mermaid 代码围栏渲染为 SVG 图表 | Render Mermaid code fences as SVG diagrams in DSH Web messages | medium | warn | 0/1/2 | 0/0 | 2026-08-16 16:41 |
| helm-d DSH 破甲一体化安全分析插件：Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合（9 bundle + 1 preset） | low | pass | 0/0/0 | 0/0 | 2026-08-16 16:41 |
| dsh-message-preview Right-side user-message navigator for the DSH Web UI. | low | pass | 0/0/0 | 0/0 | 2026-08-16 16:41 |
| dsh-agent-memory Cross-session long-term memory plugin for DSH | medium | warn | 2/0/4 | 0/0 | 2026-08-16 16:41 |
| dsh-movein Move your whole Claude Code setup into DSH with one command. Skills, MCP, hooks, instructions. 从 Claude Code 拎包入住 DSH | medium | warn | 1/3/8 | 0/0 | 2026-08-16 16:41 |
| dsh-vault DSH 数据保险箱插件（dsh-vault）—— 自动备份、清空检测、一键恢复，保护聊天记录与工作区数据；可经桌面端一键安装或命令行 dsh plugin add 安装。 | low | pass | 0/0/1 | 0/0 | 2026-08-16 16:41 |
| dsh-plugin-codex Codex App Server model provider for DSH using your local Codex login. | low | pass | 0/0/0 | 0/0 | 2026-08-16 16:41 |
| dsh-plugin-uisfx DSH plugin: semantic UI sound effects powered by uisfx dsh 语义化音效插件：任务开始/成功/失败、按钮反馈，设置页即时试听，12 种音色包，支持其他插件调用。 | low | pass | 0/0/3 | 0/0 | 2026-08-16 16:41 |
| dsh-auto-approval-plugin Trusted Auto: a middle permission tier for DSH between workspace-write and danger-full-access, auto-approving harmless commands and trusted-area targets | low | pass | 0/0/3 | 0/0 | 2026-08-16 16:41 |
| kb-rag | low | pass | 0/0/0 | 0/0 | 2026-08-16 17:27 |
| dsh-scope Context visibility + GitHub-style usage heatmap for DSH — Codex-style /context lens + 53-week contribution graph | low | pass | 0/0/7 | 0/0 | 2026-08-16 18:30 |
| SpecFusion 在 DSH / Claude Code / Cursor / Codex / Gemini CLI 里直接搜索 20 个中国开放平台的 65,600+ 篇 API 文档；零配置，支持 Skill 与 DSH 原生插件。 | medium | warn | 0/1/6 | 0/0 | 2026-08-16 18:46 |
| deepseek-harness-control-center DSH account monitoring, usage accounting, completion alerts, official recharge, flexible layout, and agent-assisted session controls. / 账户监控、提醒、充值与会话控制中心 | medium | warn | 3/1/7 | 0/0 | 2026-08-16 18:46 |
| dsh-voice-ai-girlfriend 语音 AI 女友（Voice AI girlfriend for DSH）：Whisper 语音输入 + Qwen3-TTS 声音克隆 + 句子级流式朗读 + 数字人动画窗。插话/排队双模式，说话即打断。 | medium | warn | 0/2/10 | 0/0 | 2026-08-16 18:46 |
| deepseek-harness-desktop-Install DSH桌面客户端 一键安装包，双击DSHSetup-desktop.exe就可以一键安装，适合小白！ | low | pending | 0/0/0 | 0/0 | 2026-08-16 18:46 |
| dsh-remotion DSH 视频创作技能插件：注册 Remotion 官方移植技能（React 编程式视频，38 个规则文件），安装即用。· Remotion skill plugin for DSH. | low | pass | 0/0/0 | 0/0 | 2026-08-16 18:46 |
| adhdgofly-dsh-ext ADHDGoFly POS highlighting plugin for DSH Web: nouns green, verbs red, adjectives/adverbs purple, others gray in rendered Markdown | low | pass | 0/0/2 | 0/0 | 2026-08-16 18:46 |
| dsh-tool-autoexpand dsh·工具结果自动展开插件 | low | pass | 0/0/0 | 0/0 | 2026-08-16 18:46 |
| ax-feishu-bridge 飞书/Lark 机器人桥接，同时支持 Pi 和 DSH双平台，随时随地远程与你的编程助手对话 | low | pass | 0/0/0 | 0/0 | 2026-08-16 20:36 |
| dsh-web-file-uploader A file-upload plugin for the DSH web UI. | medium | warn | 0/4/7 | 0/0 | 2026-08-16 20:36 |
| dsh-wechat DSH插件，将微信私聊消息桥接到DSH，支持文本、图片、文件、音视频的双向传输。目标是在微信端还原DSH的原生体验 | medium | warn | 0/4/2 | 0/0 | 2026-08-16 20:36 |
| kimi-tide 月汐 — Kimi Code (Moonshot) 接入 DSH 的完整方案：标准 DSH 插件 + Kimi CLI 桥接维护 fork + Agent 协作闭环方法论 | low | pass | 0/0/5 | 0/0 | 2026-08-16 20:36 |
| dsh-coding-companion 编程陪伴 · deepseek-harness Node-host 插件：AI 工作时弹独立窗口播放，等待时挂起进程冻结播放，多站点持久化，仅 Windows | medium | warn | 1/3/5 | 0/0 | 2026-08-16 20:36 |
| dsh-conversation-outline Codex-style conversation outline for DSH Web: a right-edge rail with hover preview and click-to-jump | medium | warn | 3/0/2 | 0/0 | 2026-08-16 22:36 |
| DSH-taskboard Native local Taskboard plugin for DSH. SQLite-backed projects, Agent claim/review, and a native Web UI — no iframe, no second chat runtime. | low | pass | 0/0/0 | 0/0 | 2026-08-16 22:36 |
| dsh-engram-relay dsh-engram-relay 公开镜像（上游：dsh-external/dsh-engram-relay）：跨会话分层记忆 + 哈希×语义×因果超稀疏唤醒，13 个 engram_* 工具，BSD-3-Clause | low | pass | 0/0/0 | 0/0 | 2026-08-16 22:36 |
| oh-my-deepseek-harness Multi-agent orchestration for DSH | low | pass | 0/0/0 | 0/0 | 2026-08-16 22:36 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
43 reports2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16current189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-08-16. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published