Daily security scan
Date · 2026-08-17 (UTC — plugins first indexed that day)
142
added
1
critical
49
medium
92
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| dsh-hotswap ?? Hot-swap plugin manager for DSH - install, unload, enable, disable plugins without restarting DSH | medium | warn | 4/0/3 | 0/0 | 2026-08-17 00:29 |
| dsh-mindseye Plug-in vision for text-only models in DSH, with multimodal interaction, memory cache, intent router, and structured evidence. | low | pass | 0/0/0 | 0/0 | 2026-08-17 02:24 |
| learn-harness-engineering Harness engineering beginner tutorial, from 0 to 1 | low | pass | 0/0/0 | 0/0 | 2026-08-17 03:12 |
| skills-link Sync your local skills across 41+ AI coding agents with a single command. | low | pass | 0/0/3 | 0/0 | 2026-08-17 03:12 |
| Polaris Toward Autonomous Scientific Discovery | low | pass | 0/0/0 | 0/0 | 2026-08-17 03:12 |
| ff-toolkit FFmpeg toolkit with CLI, MCP server, and AI tool schemas | low | pass | 0/0/0 | 0/0 | 2026-08-17 03:12 |
| dsh-deepread Evidence-first deep reading for AI agents — trace claims, evidence, confidence and knowledge maps across articles, books and PDFs. | low | pass | 0/0/11 | 0/0 | 2026-08-17 03:12 |
| dsh-deepseek-vision Vision-language gateway plugin for DSH - paste an image, DeepSeek sees text | medium | warn | 1/0/3 | 0/0 | 2026-08-17 03:12 |
| dsh-change-review DSH 会话修改审查插件：追踪会话内 write/edit，diff 对比展示，会话隔离/子代理聚合/SSE 实时推送/颜色自定义 | low | pass | 0/0/5 | 0/0 | 2026-08-17 03:12 |
| dsh-session-context-menu 更好的右键：DSH 应用封装端的完整原生风格上下文菜单 | low | pass | 0/0/0 | 0/0 | 2026-08-17 03:12 |
| deepddw Memory & Knowledge Base for DSH — reachable from any device on your LAN | low | pass | 0/0/0 | 0/0 | 2026-08-17 03:12 |
| dsh-github-intelligence The most comprehensive developer-intelligence integration for DSH: 195+ read-only tools across 15 developer ecosystems (GitHub, GitLab, Gitee, npm, PyPI, crates.io, Docker Hub, Hugging Face, Hacker News, Stack Overflow, Reddit, dev.to, RubyGems, NuGet, Go) with rate-limit-friendly caching. | medium | warn | 0/1/18 | 0/0 | 2026-08-17 03:12 |
| dsh-sticky-notes Sticky notes for DSH: draggable notes with text & image support, 9 skins, and AI-powered read/write. DSH 便签插件:可拖拽,支持文字与图片、9 款皮肤,AI 可读写。 | low | pass | 0/0/4 | 0/0 | 2026-08-17 03:12 |
| dsh-agent-team-room Native DSH rooms for connecting independent Sessions and provider-backed AI members—without bundled roles or scenarios. | low | pass | 0/0/0 | 0/0 | 2026-08-17 03:12 |
| dsh-learning-mode A DSH agent preset that teaches while coding — concrete scenario-grounded explanations, Socratic guidance, and TODO(你) practice blanks, modeled on Claude Code's Learning output style. 学习模式 | low | pass | 0/0/1 | 0/0 | 2026-08-17 03:12 |
| dsh-JujutsuKaisen-rainlove 听雨的声音 一滴滴清晰， 你的呼吸像雨滴渗入我的爱里， 真希望 雨能下不停， 让想念继续 让爱变透明， 我爱上 给我 勇气的 Rainie Love， 窗外的雨滴 一滴滴 累积， 屋内的湿气 像储存爱你的记忆， 真希望 雨能下不停， 雨爱的秘密 能一直延续， 我相信我将会看到彩虹的美丽。 | low | pass | 0/0/3 | 0/0 | 2026-08-17 03:12 |
| deepseek-aix Q-Q: 面向学术文献的对话式 AI 研究助手。支持多源搜索（PubMed、arXiv、Semantic Scholar、Crossref）、论文卡片去重及带文件夹功能的收藏夹——基于 DSH 构建。 | low | pass | 0/0/0 | 0/0 | 2026-08-17 03:12 |
| dsh-model-meta-autofill DSH plugin: auto-fill metadata (context window, output cap, display name, input modalities) for custom-provider models from the Model Metadata Registry (models.dev) | low | pass | 0/0/9 | 0/0 | 2026-08-17 03:12 |
| dsh-web-restart One-click restart button for the DSH Web UI: sidebar footer button, single click restarts the dsh web process. / DSH Web 界面一键重启按钮。 | low | pass | 0/0/2 | 0/0 | 2026-08-17 03:12 |
| dsh-live2d-companion Live2D 监控面板・看板娘桌宠 for DSH | medium | warn | 1/4/18 | 0/0 | 2026-08-17 03:12 |
| dsh-leisure-games Leisure games client plugin for DSH: Tetris, Snake, skill Gomoku and Minesweeper with a playtime limit, agent notifications, custom colors and hardened persisted state. | medium | warn | 0/2/4 | 0/0 | 2026-08-17 03:29 |
| dsh-code-checker A plugin for DSH (well it may support other AI agent IDEs but I hadn't test it out yet) that checks for error when AI had finished writing the code. | low | pass | 0/0/0 | 0/0 | 2026-08-17 04:02 |
| vox-director Turn one topic into a finished Vox-style paper-collage explainer/ad video — automated end to end on Atlas Cloud + ffmpeg. An agent skill. | low | pass | 0/0/0 | 0/0 | 2026-08-17 04:57 |
| BrowserSkill Let AI agents use your real, logged-in browser without interrupting your work. CLI + extension for browser automation across any shell-capable AI agent. | low | pass | 0/0/0 | 0/0 | 2026-08-17 04:57 |
| Awesome-AI-Pedia AI skills大全 mcp ai知识库 Agent 全维度 AI 资源百科，DSH插件 收录大模型、智能 Agent、RAG 检索增强、多模态、MLOps、AI 应用工具、AI面试集、Vibe coding 大全、零基础学习路线，持续更新前沿 AI 开源项目，开发者一站式 AI 导航库 | medium | warn | 0/2/0 | 0/0 | 2026-08-17 04:57 |
| MakoCode MakoCode — 茉子版 Agent | Galgame 风格桌面 AI Agent，零门槛体验 Agent 的乐趣 | medium | warn | 8/17/24 | 0/0 | 2026-08-17 04:57 |
| dsh-plugin-guard Install safety net for DSH: pre-install snapshots, one-click/automatic rollback, guarded boot, and incident reports that auto-trigger agent analysis. 中文: DSH 插件安装安全网（安装前自动快照、一键/自动回退、守护启动、事故报告自动触发 Agent 分析）。 | medium | warn | 1/3/8 | 0/0 | 2026-08-17 04:57 |
| dsh-qq-bridge DSH插件，连接QQ / DSH plugin for connecting QQ | medium | warn | 0/2/9 | 0/0 | 2026-08-17 04:57 |
| dsh-landscape Agent-first DSH plugin intelligence: verify existing plugins, identify missing capabilities, and generate build-ready briefs. | medium | warn | 1/0/2 | 0/0 | 2026-08-17 04:57 |
| dsh-filescope FileScope · 文件视界 — DSH 工作区文件浏览器插件（右侧抽屉 + 实时预览） | low | pass | 0/0/3 | 0/0 | 2026-08-17 04:57 |
| dsh-weneed 让dsh稳定触发We Need思维链，提高模型能力。 | low | pass | 0/0/0 | 0/0 | 2026-08-17 04:57 |
| dsh-file-upload DSH file-message plugin: Claude-style drag-and-drop / paperclip upload, content sniffing, document-to-Markdown via Microsoft MarkItDown (with built-in JS fallback), text inlining, read_document tool for agents. | medium | warn | 2/0/4 | 0/0 | 2026-08-17 04:57 |
| dsh-crew DSH plugin: dispatch work to DSH agents from Claude Code / Codex — native subagent progress, in-host worker sessions with per-tier presets, and a multimodal bridge that lends the text-only harness vision and image generation. | medium | warn | 5/1/12 | 0/0 | 2026-08-17 04:57 |
| dsh-page-preview A Cordis plugin that enables DSH to proactively preview and display web pages. | low | pass | 0/0/2 | 0/0 | 2026-08-17 04:57 |
| dsh-guide-dog Guide Dog for DSH — MiniMax multimodal plugin: image/video/music/speech generation & vision tools, hard-metric voice mode (host event-driven auto TTS, session-safe playback), voice input (mic → faster-whisper → composer), recorder page, two-layer settings. | medium | warn | 0/2/0 | 0/0 | 2026-08-17 04:57 |
| cleverer-dsh DSH execution-discipline plugin suite: 11 plugins + 6 skills, zero dependencies, 426 tests. 让 DSH 变聪明的插件套件。 | medium | warn | 3/1/4 | 0/0 | 2026-08-17 04:57 |
| dsh-browser4 Browser4 — an AI-native browser engine for autonomous agents, intelligent extraction, and large-scale web automation. | low | pass | 0/0/0 | 0/0 | 2026-08-17 04:57 |
| dsh-vision-plugin Image understanding for text-only models via OpenRouter free vision models | low | pass | 0/0/8 | 0/0 | 2026-08-17 04:57 |
| dsh-particle-whale 🐳 DeepSeek official 3D particle whale plugin for DSH / DSH Desktop (Three.js WebGL) | low | pass | 0/0/2 | 0/0 | 2026-08-17 06:39 |
| awesome-deepseek-harness Curated guide to DSH and its best community plugins | low | pending | 0/0/0 | 0/0 | 2026-08-17 07:15 |
| memtrace-public Structural memory for AI coding agents. Bi-temporal graph, MCP-native, zero LLM calls. Cursor · Claude Code · Codex · DSH · Hermes · VS Code · Windsurf. | low | pass | 0/0/0 | 0/0 | 2026-08-17 07:15 |
| geml One format, two readers. People and AI agents now co-write the same document. Legible for people; addressable, verifiable, and versioned for machines. GEML is plain text — organized by one typed block for everything, remembered by a .gemlhistory sidecar. | low | pass | 0/0/3 | 0/0 | 2026-08-17 07:15 |
| Jnpz 改配置+重启才能加 MCP？DSH 插件「技能配置」解决：设置页粘贴 JSON 即连 MCP 服务器、热加载免重启；上传 zip/.skill 自动识别 SKILL.md，创建/编辑/启停技能，即点即用 | low | pass | 0/0/0 | 0/0 | 2026-08-17 07:15 |
| dsh-fate-spectrum DSH plugin for Bazi & Zi Wei Dou Shu — deterministic, offline fate-chart calculation for AI agents. | low | pass | 0/0/0 | 0/0 | 2026-08-17 07:15 |
| dsh-whale-musume DSH 桌宠插件：元气鲸鱼娘陪你写代码 🐋 | medium | warn | 0/3/10 | 0/0 | 2026-08-17 07:15 |
| dsh-media-skills Free vision & image generation for DSH — paste an image into any chat, even text-only sessions. GLM-4V-Flash / Qwen3-VL / Gemini failover chain, ModLens-style structured evidence, Kolors generation. 免费读图·生图 · 三引擎容错 · 无 Key 入库 | low | pass | 0/0/0 | 0/0 | 2026-08-17 07:15 |
| backchat Local-first desktop workspace for ACP agents—DSH, Claude Code, Codex, Gemini CLI, OpenCode, Hermes, and OpenClaw—with projects, tools, files, browser, and sessions. | low | pass | 0/0/0 | 0/0 | 2026-08-17 07:15 |
| dsh-desktop Turn the official DSH WebUI into a natural desktop experience. | low | pass | 0/0/5 | 0/0 | 2026-08-17 07:15 |
| dsh-desktop 基于官方 DSH 打包的桌面客户端，方便直接安装使用 | low | pass | 0/0/20 | 0/0 | 2026-08-17 07:15 |
| dsh-client-ui-obsidian-memory DSH plugin obsidian memory | low | pass | 0/0/5 | 0/0 | 2026-08-17 07:15 |
| dsh-thinking-notifier A simple popup that can quickly show when Deepseek has finished thinking or is requesting permission during split-screen. | medium | warn | 1/3/6 | 0/0 | 2026-08-17 07:15 |
| picturereader DSH plugin: pixel-to-text image reading for text-only models. image_scan/image_ocr/image_sample tools + image-reading skill (34-image trained methodology). Pure local, optional PaddleOCR. | medium | warn | 2/0/4 | 0/0 | 2026-08-17 07:15 |
| dsh-macos-desktop dsh-macos-desktop 把 DSH 的 Web 界面变成一个 macOS 桌面：左侧桌面（多窗口/文件/回收站/便签/Spotlight/天气/深色模式）+ 右侧原生对话（主题化），内置终端、文档(Word/PDF/PPT)、浏览器、知识库、番茄钟、截图、AI 生图与「用 AI 看图」，通过官方 shell.overlay 挂载、卸载即恢复 | medium | warn | 3/0/15 | 0/0 | 2026-08-17 07:15 |
| dsh-desktop DSH 桌面客户端：双击即用，跨平台（macOS / Windows / Linux） | medium | warn | 2/6/8 | 0/0 | 2026-08-17 07:15 |
| dsh-joi-channel-theme 轴伊 Joi 双衣装主题 for DSH — unofficial, non-commercial fan theme plugin 🍊 | medium | warn | 2/2/1 | 0/0 | 2026-08-17 07:15 |
| dsh-plugin-market DSH plugins market｜DSH 插件市场 | medium | warn | 0/1/23 | 0/0 | 2026-08-17 07:15 |
| dsh-agent-skills Discover and manage Agent Skills inside DSH | low | pass | 0/0/1 | 0/0 | 2026-08-17 07:15 |
| dsh-plugin-mcp-manager MCP 服务器管理面板：GUI 增删改 MCP 服务器配置（写入 cordis.patch.yml + HMR 实时挂载）+ 工具浏览 + agent 面 mcp_* 管理工具 | MCP server management panel: GUI add/edit/delete MCP server configs (writes cordis.patch.yml + HMR hot-mount) + tool browsing + agent-side mcp_* management tools | low | pass | 0/0/10 | 0/0 | 2026-08-17 07:15 |
| dsh-plugin-terminal Bottom terminal panel plugin for DSH (DSH Web GUI) | medium | warn | 2/0/7 | 0/0 | 2026-08-17 07:15 |
| dsh-hub-plugin Native DSH Hub marketplace plugin for DSH | low | pass | 0/0/2 | 0/0 | 2026-08-17 07:15 |
| dsh-openai-oauth Use ChatGPT OAuth and OpenAI Codex models in DSH—no API key or Codex CLI required. | low | pass | 0/0/6 | 0/0 | 2026-08-17 07:15 |
| dsh-proxy HTTP + WebSocket 反向代理：把局域网端口转发到本地 DSH 服务 | low | pass | 0/0/3 | 0/0 | 2026-08-17 07:15 |
| dsh-session-pause A Cordis plugin for DSH that suspends the entire conversation state and resumes it after restart. | low | pass | 0/0/0 | 0/0 | 2026-08-17 07:15 |
| dsh-island 把 DSH agent 实时状态桥接到 CodeIsland 刘海面板 — sessions/tools/approvals on the Dynamic Island | medium | warn | 8/4/12 | 0/0 | 2026-08-17 07:15 |
| dsh-plugin-vetting DSH plugin: heuristic malware vetting for installed third-party plugins | medium | warn | 4/0/1 | 0/0 | 2026-08-17 07:15 |
| dsh-quant dsh plugin: quantitative tools for agents — market data (Binance public API), technical indicators (SMA/EMA/RSI/MACD/Bollinger/ATR) and MA-crossover backtest | low | pass | 0/0/7 | 0/0 | 2026-08-17 07:15 |
| dsh-ocr-local Local OCR plugin for DSH — paste an image, get its text via PP-OCRv5 + ONNX Runtime, fully offline. Supports TUI (cc-tui) and Web. ｜ DSH 本地 OCR 插件：粘贴图片，PP-OCRv5 + ONNX Runtime 识别文字，完全离线，支持 TUI 与 Web | medium | warn | 3/0/2 | 0/0 | 2026-08-17 07:15 |
| dsh-web-launcher | low | pending | 0/0/0 | 0/0 | 2026-08-17 07:39 |
| dsh-login-gateway dsh 登录门卫插件：让只监听本机的 dsh Web UI 安全地对外开放——登录墙 + 全量反代，零依赖、零侵入。 | low | pass | 0/0/5 | 0/0 | 2026-08-17 07:50 |
| dsh-top System monitoring tool for the dsh web GUI: live CPU, RAM, disk, network, and top processes in a floating, collapsible panel. | medium | warn | 1/3/1 | 0/0 | 2026-08-17 08:34 |
| whaletv-workbench | medium | warn | 2/0/7 | 0/0 | 2026-08-17 08:35 |
| anolisa ANOLISA (Agentic Nexus Operating Layer & Interface System Architecture) | low | pass | 0/0/0 | 0/0 | 2026-08-17 09:00 |
| infra-skills A collection of specialized agent skills for AI infrastructure development, enabling Claude Code to write, optimize, and debug high-performance systems. | low | pass | 0/0/0 | 0/0 | 2026-08-17 09:00 |
| dsh-client-ui-skin-denia DSH Web GUI 皮肤 · 鸣潮·达妮娅(Denia)主题「虚无之泡」。双形态亮/暗、侧边立绘、可修改的玻璃卡片、浮动泡泡粒子、锁链边框。 | low | pass | 0/0/0 | 0/0 | 2026-08-17 09:00 |
| dsh-damage-pulse DSH token balance monitor with game-style damage pulse animations | low | pass | 0/0/1 | 0/0 | 2026-08-17 09:00 |
| dsh-plugin-codegraph Structural code intelligence for DSH — gives the agent codegraph and codegraph_index tools to find where a symbol is declared, what calls it, and what a change reaches, from a tree-sitter index it builds itself. Compatible with the codegraph CLI's on-disk format. | low | pass | 0/0/0 | 0/0 | 2026-08-17 09:00 |
| dsh-animation-optimization DSH 动画优化：输出流式动画与 Claude Code 风格外观插件 | low | pass | 0/0/4 | 0/0 | 2026-08-17 09:00 |
| dsh-lark-bridge Feishu (Lark) entry point for DSH: drive dsh agents from a Feishu bot with streaming cards, ask/approval buttons and attachments. | medium | warn | 0/1/5 | 0/0 | 2026-08-17 09:00 |
| dsh-codex-shim 让 GPT 在 DSH 中宾至如归 Make GPT feel at home in DSH. | low | pass | 0/0/0 | 0/0 | 2026-08-17 09:00 |
| dsh-imagegen DSH Web GUI AI image generation plugin: text-to-image & image-to-image via OpenAI-compatible endpoints (gpt-image-2), with shared cross-device history. | medium | warn | 0/2/7 | 0/0 | 2026-08-17 09:00 |
| dsh-ha-orchestrator DSH动态 Cordis 插件：模型高可用回退 + 子智能体编排（HA failover + orchestrate subagents） | low | pass | 0/0/0 | 0/0 | 2026-08-17 09:00 |
| DeepSeek-Harness-Pet Codex-style desktop pet plugin for DSH | low | pass | 0/0/5 | 0/0 | 2026-08-17 09:00 |
| last30days-skill-cn last30days-cn 是一个 AI Agent 技能（Skill），能够自动搜索中国互联网 8 大主流平台最近 30 天的内容，综合分析后生成有据可查的研究报告。 | low | pass | 0/0/0 | 0/0 | 2026-08-17 10:48 |
| OpenStory An LLM-powered multi-agent framework for simulating interactive, evolving story worlds. | low | pass | 0/0/0 | 0/0 | 2026-08-17 10:48 |
| dsh-skin-universe Themes and web GUI plugins for DSH: task board, Git graph, file panel, SSH, mobile remote, companion, live stats, and five installable themes. | low | pass | 0/0/0 | 0/0 | 2026-08-17 10:48 |
| dsh-multi-tenant-projects Multi-tenant projects & users plugin for DSH: per-user symlinked workspaces, login gate, session isolation, workspace-write lock and system-prompt guard | low | pass | 0/0/0 | 0/0 | 2026-08-17 10:48 |
| dsh-remote Remote access for DSH: account/password auth + MFA (TOTP) login gate, signed session cookies, role-based access, in-browser directory picker, and a Settings page for account management. | low | pass | 0/0/5 | 0/0 | 2026-08-17 10:48 |
| dsh-btw DSH版btw插件 | medium | warn | 1/0/0 | 0/0 | 2026-08-17 10:48 |
| dsh-chat-imagine 在 DSH 聊天窗口自动调用生图工具（API 渠道，或本机 CLI：已支持mmx / codex / agy）并展示图片。 | medium | warn | 0/1/5 | 0/0 | 2026-08-17 10:48 |
| dsh-desktop DSH desktop client — custom glassmorphism UI, official interactions, Windows & macOS | medium | warn | 3/1/10 | 0/0 | 2026-08-17 10:48 |
| dsh-ui-font DSH老花眼插件，对眼睛不好看不了小字的朋友相当有善。 | low | pass | 0/0/7 | 0/0 | 2026-08-17 10:48 |
| dsh-deepseek-usage DeepSeek API 用量监测 DSH 插件：悬浮球 + 展开面板，展示开放平台真实余额、累计消费、今日消费、请求次数、Tokens 与分模型用量，支持手动登录获取 userToken。 | low | pass | 0/0/1 | 0/0 | 2026-08-17 10:48 |
| dsh-deliberation-presets Keep DeepSeek V4 Pro deliberating deeply while its tools keep working — three DSH presets: wire-level A4 think/execute split, eternal two-tool gateway, and a combination package. | medium | warn | 1/0/3 | 0/0 | 2026-08-17 10:48 |
| dsh-status-bar Know what your agent is doing at a glance — 17-segment configurable status bar for DSH: status/model/context/tokens/TPS/cost/jobs. 一眼看清你的 agent 正在做什么：17 段可配置 DSH 会话状态栏。 | low | pass | 0/0/1 | 0/0 | 2026-08-17 10:48 |
| DeepSeek-Reasonix DeepSeek-native AI coding agent for your terminal. Engineered around prefix-cache stability — leave it running. | low | pass | 0/0/0 | 0/0 | 2026-08-17 13:05 |
| EverOS One portable memory layer for every AI agent: local-first, Markdown-native, user-owned, and self-evolving across apps, tools, and workflows. | low | pass | 0/0/0 | 0/0 | 2026-08-17 13:05 |
| openpets Local first, desktop companion platform with animated pets, plugin SDK and coding-agent integrations. | low | pass | 0/0/0 | 0/0 | 2026-08-17 13:05 |
| memmy-agent 🍙 A personal AI agent & local memory hub for all AI agents, gives every AI one shared, fully controlled memory and persistent context — all AI remember the same you. Now supports Claude Code, Codex, OpenClaw and Hermes Agent etc. | low | pass | 0/0/0 | 0/0 | 2026-08-17 13:05 |
| dsh-oomol OOMOL Connector for DSH—discover connected apps and execute Actions through progressive MCP discovery without exposing provider credentials. | medium | warn | 1/0/8 | 0/0 | 2026-08-17 13:05 |
| dsh-directorx DirectorX as a DSH plugin: AI video/image/audio skills, knowledge corpus, and configurable vision/image/video/audio model tools. | medium | warn | 0/1/0 | 0/0 | 2026-08-17 13:05 |
| my_better-dsh for better dsh | medium | warn | 1/0/10 | 0/0 | 2026-08-17 13:05 |
| dsh-plugin-directory Community DeekSeek Harness Plugin Directory | low | pending | 0/0/0 | 0/0 | 2026-08-17 13:05 |
| dsh-desktop Cross-platform desktop client for DSH (dsh web), built with Tauri — the CLI's web UI in a native window, sharing the same session data. | medium | warn | 5/7/8 | 0/0 | 2026-08-17 13:05 |
| dsh-client-ui-custom Configurable DSH web-surface plugin: wallpaper & frosted-glass themes, accent colors, custom keyboard shortcuts, app-usage panel, history strip, message Markdown — zero shell edits. | low | pass | 0/0/0 | 0/0 | 2026-08-17 13:05 |
| dsh-chinese-mode DSH global Chinese-mode toggle: a 中 switch in the input box; when on, a Simplified-Chinese requirement is injected into every session system prompt. | low | pass | 0/0/1 | 0/0 | 2026-08-17 13:05 |
| dsh-skill-manager DSH 技能管理器（host + client 一体包） | low | pass | 0/0/5 | 0/0 | 2026-08-17 13:05 |
| dsh-skin-manager 一个可以管理皮肤的dsh插件 | low | pass | 0/0/4 | 0/0 | 2026-08-17 13:05 |
| dsh-reminder 🔔 Cross-window completion & approval notifications for DSH — popup reminders that bring you back to DSH, Codex/WorkBuddy style. | low | pass | 0/0/0 | 0/0 | 2026-08-17 14:44 |
| dsh-miraculous-standard DeepSeek V4 Pro/Flash unified anchored agent preset for DSH (official API & opencode-go): two-stage RL-aligned bootstrap, model-aware path routing, epoch-aware long-session stability | low | pass | 0/0/2 | 0/0 | 2026-08-17 14:44 |
| toolshrink Cut large agent tool output by what it means, not by where it was cut. 9 content-aware reducers + DSH plugin. | low | pass | 0/0/0 | 0/0 | 2026-08-17 14:44 |
| dsh-tui-vscode VS Code companion extension for dsh-TUI — an experience almost identical to the official Claude Code VS Code extension | low | pass | 0/0/1 | 0/0 | 2026-08-17 14:44 |
| dsh-rust-sdk Rust SDK for DSH | low | pass | 0/0/0 | 0/0 | 2026-08-17 14:44 |
| dsh-whale-pet Cute whale-girl pet plugin for the DSH Web UI | medium | warn | 1/2/4 | 0/0 | 2026-08-17 14:44 |
| dsh-pilot Give your DSH agent hands: drive a real browser (Edge/Chrome over CDP) from the chat — ref-driven clicking, per-session browsers, and a live cockpit panel. Zero runtime deps, no API key. | medium | warn | 2/7/13 | 0/0 | 2026-08-17 14:44 |
| dsh-trading Trading research workbench for DSH: typed market-data seam, deterministic indicators, interactive chart cards, hard no-execution boundary — research only ｜ 只读交易研究工作台插件：数据接缝 · 确定性指标 · 交互式K线卡 · 结构性禁下单 | low | pass | 0/0/0 | 0/0 | 2026-08-17 14:44 |
| dsh-hub-DSH dsh-hub — DSH 插件中枢 | medium | warn | 1/0/6 | 0/0 | 2026-08-17 14:44 |
| dsh-mobile DSH 移动端适配与安全局域网访问插件，支持 Android App 和手机浏览器。 | medium | warn | 1/2/2 | 0/0 | 2026-08-17 14:44 |
| deepseek-harness-provider use glm/minimax/openai/claude api in your DSH | medium | warn | 0/2/11 | 0/0 | 2026-08-17 14:44 |
| dsh-ai4scholar AI4Scholar for DSH: 38 native academic tools — Semantic Scholar, PubMed, Google Scholar, arXiv, bioRxiv/medRxiv, DOI, full text, auto-cite, figures, unified search. Powered by ai4scholar.net | low | pass | 0/0/1 | 0/0 | 2026-08-17 14:44 |
| DeepSeek-Harness-Token-Free A token-free desktop client for the DSH，enjoy！为 DSH 生态打造的全免Token费的桌面端 ，极简极易 | medium | warn | 1/0/3 | 0/0 | 2026-08-17 14:44 |
| awesome-dsh-plugin A curated list of plugins for DSH - DSH plugin ecosystem | low | pending | 0/0/0 | 0/0 | 2026-08-17 16:45 |
| Flowboard 运行在 DSH 中的开源办公协作与团队管理插件，让目标、会议、Agent 执行、进度和资料在同一套办公逻辑中持续流动。 | medium | warn | 1/1/7 | 0/0 | 2026-08-17 16:45 |
| webdsh Running DSH on web | low | pass | 0/0/0 | 0/0 | 2026-08-17 16:45 |
| dsh-endfield-ui Endfield-inspired industrial UI shell for DSH — non-official fan theme. Install: dsh plugin --profile web add @rison/dsh-endfield-ui | medium | warn | 4/2/14 | 0/0 | 2026-08-17 16:45 |
| dsh-studio 现代化 DSH 全栈增强工作台 · 多源 MCP 可视化调试中枢 · 视觉思考引擎 · 灵动极客伴侣 | low | pass | 0/0/0 | 0/0 | 2026-08-17 16:45 |
| dsh-skill-mcp-panel DSH Web UI plugin: Skills settings section with hot enable/disable, delete and add（Web界面的skill管理工具） | low | pass | 0/0/4 | 0/0 | 2026-08-17 18:57 |
| opencues Turn any text field into a two-way LLM channel: it reads what you write and fills what you ask. Flags a slip as you type, answers anything you end with _. Claude Code, OpenCode, Gemini CLI, shell, Chrome, DSH. Model-agnostic, open standard, no chat window. | low | pass | 0/0/6 | 0/0 | 2026-08-17 18:57 |
| harness-ui-enhancer Web UI polish layer for DSH: normalizes unfinished or self-contradictory official UI, reconciles style conflicts between installed plugins, and unifies the visual language via official design tokens. | low | pass | 0/0/13 | 0/0 | 2026-08-17 18:57 |
| mellos-mapping A live layered dependency map for bottom-up development — MCP server + terminal pane for Claude Code, Codex CLI and any MCP client. Ghost the design first, light nodes up as they are built and verified. | low | pass | 0/0/0 | 0/0 | 2026-08-17 20:43 |
| dsh-remote DSH Remote 手机遥控端：把电脑上的 DSH 装进口袋。手机连上就能给 AI 派活、看实时回复、批审批；支持局域网/内网穿透、扫码连接、审批通知、会话管理、多主题换装，还能解锁加密保险库。第三方社区作品，开源免费。 | low | pass | 0/0/4 | 0/0 | 2026-08-17 20:43 |
| Succinix Succinix — browser-native Linux (real Node + Unix userland inside WebContainer) | low | pass | 0/0/3 | 0/0 | 2026-08-17 20:43 |
| dsh-wallpaper-engine 一个插件让你的dsh可以自由切换你的wallpaper engine里面的壁纸资源，还可以通过多个滑动条来控制透壁纸的模糊程度，亮度，边框，以及对话框的液态玻璃效果，让你的dsh更加美观 | medium | warn | 3/0/10 | 0/0 | 2026-08-17 22:40 |
| dsh-ventus-whale 🐳 蓝色大肥鱼 · DeepSeek 虎鲸 3D 桌宠插件 — 由 DeepSeek 虎鲸 logo 轮廓重建，悬浮于 Web GUI 角落：拖拽旋转、360° 转圈、爱心互动、悬停工具栏、大小/灵敏度/文字设置，配置本地持久化 / A 3D whale desktop pet rebuilt from the DeepSeek whale logo for DSH — drag to rotate, 360° spin, heart bursts, hover toolbar, size/sensitivity/caption settings, and local persistence. | medium | warn | 0/3/5 | 0/0 | 2026-08-17 22:40 |
| dsh-native-playbook Task-aware native capability manager for DSH — use, prepare, and verify built-in DSH tools before adding another plugin. | medium | warn | 2/0/2 | 0/0 | 2026-08-17 22:40 |
| dsh-tavily 为 DSH 新增 Tavily 搜索 API，作为其网页搜索服务提供商。Adds Tavily Search API as a web search provider for DSH. | low | pass | 0/0/2 | 0/0 | 2026-08-17 22:40 |
| causal-memory Causal memory layer for AI agents — MCP server that records decision→outcome relationships. Survives compaction. | low | pass | 0/0/0 | 0/0 | 2026-08-17 22:40 |
| DEEPHARNESS DSH Windows desktop app - 换肤桌面快捷方式一键打开 AI 工作台应用 界面美化 功能集合 | low | pass | 0/0/0 | 0/0 | 2026-08-17 22:40 |
| DSH-desktop-for-Linux Desktop shell for DSH — Electron wrapper with tray, settings, dsh npm auto-update, and deb self-packaging (Linux) | medium | warn | 1/4/7 | 0/0 | 2026-08-17 22:40 |
| clipforge Fast local clipboard workbench built with Tauri, React, TypeScript, and SQLite | low | pass | 0/0/0 | 0/0 | 2026-08-17 22:40 |
| e-Mate e-Mate 2.0.7 browser-first local agent harness built on DSH | low | pass | 0/0/0 | 0/0 | 2026-08-17 22:40 |
| deepseek-harness-desktop DSH 原生 Windows 桌面客户端（基于 Tauri 2 + Rust，MIT） | critical | fail | 5/7/20 | 0/0 | 2026-08-17 22:40 |
| dsh-skills-manager DSH plugin for installing and managing Agent Skills | low | pass | 0/0/0 | 0/0 | 2026-08-17 22:40 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
46 reports2026-10-010 added0 crit0 medium2026-09-30182 added3 crit51 medium2026-09-2969 added0 crit22 medium2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17current142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-08-17. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published