Daily security scan
Date · 2026-08-16 (UTC — plugins first indexed that day)
40
added
0
critical
9
high
6
medium
25
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| reactive-resume A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today! | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| EchoBird One-click install + model switch:Claude Code,Codex CLI (OpenAI), Grok Build (xAI), DeepSeek Harness, Kimi Code (Moonshot) ,Qwen Code,Aider,OpenCode,MiMo Code (Xiaomi),ZCode (Z.AI),OpenClaw,Pi,OpenScience,Vibe-Trading,Claude Desktop (3P profile),ChatGPT desktop,OpenCode Desktop, | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| BitFun BitFun combines a high-performance agent runtime written in Rust with a polished desktop application. It pairs the depth of a Code Agent with open, general-purpose capabilities for work beyond software development. | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| opc-nexus 开源的企业版的数字员工工作台 (原内部项目AiBoxDash) | high | warn | 2/0/1 | 0/0 | 2026-08-16 01:57 |
| caliper Know if your agent skill actually works. A lightweight evaluation harness that tracks a success rate across Claude Code, Codex, Pi, and Hermes. | high | warn | 1/0/0 | 0/0 | 2026-08-16 01:57 |
| dsh-plugin-dev-skills An Agent Skills skill for developing DeepSeek Harness (DSH) plugins(开发 DSH 插件的 Agent Skill)——插件/服务/事件/工具/LLM 适配器/打包安装的标准。Works with Claude Code, Codex, DSH, VS Code Copilot & any compatible agent. | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| deepseek-harness-workbench-plugin Deepseek-harness-workbench-plugin | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| dockyard-dsh A macOS-only native account-pool and provider plugin for DeepSeek Harness. | low | pass | 0/0/1 | 0/0 | 2026-08-16 01:57 |
| dsh-permgate 为 DeepSeek Harness(DSH)提供的细粒度权限控制插件 | high | warn | 1/0/1 | 0/0 | 2026-08-16 01:57 |
| write-chinese-long-screenplay 中文电影与剧集长剧本写作 skill | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| dsh-gui Deepseek Harness GUI图形化界面,兼容mac和windows 开箱即用 | high | warn | 1/4/12 | 0/0 | 2026-08-16 01:57 |
| dsh-plugin-msg-nav DeepSeek Harness 对话节点导航条插件:在对话区右缘渲染一列短横线节点串(每条真实用户消息一个节点),跟随阅读位置;鼠标靠近节点串时,节点条「变形弹出」为单行消息预览面板(覆盖原位置,移开复原),点击任意预览平滑跳转 + 高亮横线,节点过多时可在悬停区域内用滚轮滑动浏览 | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| plugin-switch DSH web plugin: toggle plugins on/off from the GUI without restarting the server | high | warn | 3/0/5 | 0/0 | 2026-08-16 01:57 |
| dsh-image-inline DSH plugin: show_image tool that renders an image inline into the web chat flow (QQ/WeChat style) — path text in the message, image bytes never enter model context. | low | pass | 0/0/1 | 0/0 | 2026-08-16 01:57 |
| dsh-mcp DeepSeek Harness 的 MCP 服务器管理插件:可视化界面管理 + 按需 tool search 热注入,省 token。 | high | warn | 1/1/2 | 0/0 | 2026-08-16 01:57 |
| dsh-unread-dot DSH plugin: macOS Dock badge (dot = running, number = results) + bubble chime, built on the Badging API | low | pass | 0/0/4 | 0/0 | 2026-08-16 01:57 |
| infographic A Claude Code skill that turns a document or a topic into a designed visual explainer. 52 block forms, an enforced word budget, and guards that fail the build. | low | pass | 0/0/0 | 0/0 | 2026-08-16 01:57 |
| deepseek-harness-box Portable one-click Windows launcher for DeepSeek Harness (DSH). No Node.js, npm, pnpm or setup required. DeepSeek Harness 免安装 Windows 一键启动器。 | low | pass | 0/0/3 | 0/0 | 2026-08-16 01:57 |
| dsh-notifier Unified notification push plugin for DeepSeek Harness (DSH): one minimal notify() API, 8 channel adapters (telegram/dingtalk/feishu/wxpusher/pushplus/serverchan/bark/webhook), dual trigger (auto session events + agent tool). | medium | warn | 0/1/6 | 0/0 | 2026-08-16 03:12 |
| dsh-im 通过扫码把IM机器人接入DeepSeek Harness(支持飞书、微信、钉钉、QQ、企业微信等) | low | pass | 0/0/0 | 0/0 | 2026-08-16 03:12 |
| dsh-plugin-writing-guard DSH 论文写作守卫(去 AI 味 / AI 痕迹检测与修改残留检查)— DeepSeek Harness academic writing guard: detects AI-writing style, revision residue & defensive writing in manuscripts; humanize guidance included. writing_audit + writing_rules with auto-audit on paper file writes. | high | warn | 4/2/0 | 0/0 | 2026-08-16 03:12 |
| anime-find DeepSeek Harness 搜番插件:对话内多源搜索番剧,卡片展示 Bangumi 评分与详情,支持复制磁力。 | medium | warn | 0/2/6 | 0/0 | 2026-08-16 03:12 |
| DSH-Think-zh DeepSeek Harness 默认的思考语言为英文,这不利于中文使用者阅读推理过程与复核结论。本插件通过在每次请求的 system prompt 中注入一条精简的强制语言指令,使: 思考过程强制简体中文,无论用户用什么语言提问。 | low | pass | 0/0/0 | 0/0 | 2026-08-16 03:12 |
| dsh-im-hub Multi-platform IM gateway for DeepSeek Harness: Feishu (Lark), WeCom (WeChat Work), and Telegram. One agent per chat, whitelist access, no public endpoint needed (Feishu long connection / Telegram long polling). | high | warn | 3/3/9 | 0/0 | 2026-08-16 03:12 |
| dsh-anchored-standard Two-phase DeepSeek Harness preset: Minimal-aligned bootstrap (bash+read), then full Standard tools after the first tool call or reply | low | pass | 0/0/1 | 0/0 | 2026-08-16 03:12 |
| dsh-code-security OpenAI Codex Security for DSH, zero-setup — 13 audit skills + 5 scan tools in a session preset, plus an auto-audit gate for new plugins, running on your local model with no API keys. | medium | warn | 0/3/0 | 0/3 | 2026-08-16 03:19 |
| dsh-agent-memory Self-evolving memory for DeepSeek Harness: capture → dream consolidation → retrieval injection → evolve. User profile, project memory, correction learning, resume narrative — with provenance back to the replayable session log. 自进化记忆插件。 | high | warn | 1/1/5 | 0/0 | 2026-08-16 03:27 |
| dsh-sandbox-audit Static sandbox-policy consistency audit for DeepSeek Harness presets | low | pass | 0/0/0 | 0/0 | 2026-08-16 04:08 |
| find-dsh-plugins 对话式查找 DSH 插件的增强版 skill:语义检索 × 四源聚合 × 安全审计 | low | pass | 0/0/0 | 0/0 | 2026-08-16 04:09 |
| A-share-Ai 幻银量化A股阿法狗AlphaHYQi,100%由ai自主驱动的实盘交易机器。接入自产龙虾iClaw,手机端一句话控制四大模型同时干活。获取方法:前往https://hyqibot.com/card-shop.html 购服务卡即可获得软件,详情README.md。 A股Ai炒股大赛历史排行(模拟基金):https://hyqibot.github.io/A-share-Ai/reports/report.html A股Ai炒股大赛历史排行(全市场):https://hyqibot.github.io/A-share-Ai/reportsall/report.html 实时播报:https://hyqibot.github.io/A-sh | low | pass | 0/0/10 | 0/0 | 2026-08-16 04:49 |
| deepseek-harness-phone-remote DeepSeek Harness phone remote control via Tailscale - persistent file/workspace plugin - tested on OPPO Find X8 Ultra | low | pass | 0/0/4 | 0/0 | 2026-08-16 04:49 |
| TMCRA-Agent-Memory Scope-isolated, graph-based long-term memory engine for AI agents. | medium | warn | 0/1/3 | 0/0 | 2026-08-16 04:49 |
| dsh-pentest 面向 DeepSeek Harness(dsh)的渗透测试模式 @CloverSecLabs | low | pass | 0/0/0 | 0/0 | 2026-08-16 04:49 |
| dsh-plugin-marketplace Out-of-tree installable plugin marketplace bundle for DeepSeek Harness | low | pass | 0/0/5 | 0/0 | 2026-08-16 04:49 |
| dsh-sitemap 站点地图(Yakit 风格):DeepSeek Harness 侧边栏树形接口地图,搜索 / 接口详情 / 一键复制 curl,数据实时同步 | low | pass | 0/0/4 | 0/0 | 2026-08-16 04:49 |
| dsh-plugin OpenTelemetry tracing for DeepSeek Harness (dsh): turns each agent turn into a GenAI span tree — steps, LLM calls with TTFT, tool executions, token usage — exported over standard OTLP to Jaeger, Grafana Tempo, SigNoz, Langfuse, or any compatible backend. | low | pass | 0/0/4 | 0/0 | 2026-08-16 04:49 |
| dsh-better-deepseek DeepSeek Harness bridge plugin for Better DeepSeek Chrome extension. | medium | warn | 0/4/5 | 0/0 | 2026-08-16 04:49 |
| dsh-mobile-gate LAN mobile gateway for DeepSeek Harness (DSH): first-visit approval, per-device tokens, rate limiting, mobile layout injection. 局域网手机安全访问 DSH 的即插即用网关:本机审批、设备令牌、限流、手机端适配。 | medium | warn | 0/2/6 | 0/0 | 2026-08-16 04:49 |
| dsh-md-notes The note-taking plugin for DeepSeek Harness allows you to save and edit content from your conversations that you want to record. | low | pass | 0/0/2 | 0/0 | 2026-08-16 04:49 |
| dsh-writing-remote Typert remote for dsh-tool-writing: exposes project, library and search data to the client writing panel. | low | pass | 0/0/1 | 0/0 | 2026-08-16 04:49 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/obfuscation is "critical"; other criticals are "high".