Daily security scan
Date · 2026-09-02 (UTC — plugins first indexed that day)
85
added
0
critical
19
medium
66
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| dsh-write-create-only write 仅创建：禁止 write 覆盖已存在文件，目标已存在时自动拒绝并提示改用 edit，防止模型误覆写已有内容。纯 host 端 dsh 插件。 | low | pass | 0/0/0 | 0/0 | 2026-09-02 00:13 |
| dsh-model-compat-guard DSH compatibility guard plugin: fixes reasoning-model compaction truncation, doomed sandbox-escalation fail-close, and missing tool description for GPT/Qwen/third-party models | low | pass | 0/0/0 | 0/0 | 2026-09-02 00:13 |
| DSH-Balance-Mini DSH 的极简版余额监视器插件：常驻余额徽章、红绿灯配色、多供应商、高峰/空闲时段。 | low | pass | 0/0/7 | 0/0 | 2026-09-02 00:13 |
| dsh-frecency Resident-index + frecency file search for DSH — shadows the built-in grep/glob tools · DSH 常驻索引 + frecency 文件搜索，同名覆盖内置 grep/glob | low | pass | 0/0/0 | 0/0 | 2026-09-02 00:13 |
| dsh-plastic-memory Memory plugin with built-in governance for DSH: 为你的 DSH Agent 赋予可塑性记忆 | low | pass | 0/0/1 | 0/0 | 2026-09-02 00:13 |
| dsh-plugin-elevenlabs-callback DSH plugin: when a run finishes or needs approval, get a link on your phone, hear the result from an ElevenLabs voice agent and say what to do next | medium | warn | 3/2/18 | 0/0 | 2026-09-02 02:13 |
| DSH-Syntax-Checker | low | pass | 0/0/3 | 0/0 | 2026-09-02 02:13 |
| archive-restore DSH 归档会话管理插件，支持查看归档列表、原位恢复与跨区迁移，Web 侧边栏一键管理 | low | pass | 0/0/0 | 0/0 | 2026-09-02 02:13 |
| DSH-Balance-Mini DSH 的极简版余额监视器插件：常驻余额徽章、红绿灯配色、多供应商、高峰/空闲时段。 | low | pass | 0/0/7 | 0/0 | 2026-09-02 02:13 |
| DSH-Shortcut DSH 的 Windows 桌面快捷方式工具：双击智能启动/唤起、浏览器打开前自动最小化、崩溃一键重装救援（不删用户数据）。圆角官方图标，纯 PowerShell 零依赖。 | low | pass | 0/0/0 | 0/0 | 2026-09-02 02:13 |
| DeepTail A Tauri 2 client — desktop, iOS, and Android — that connects to DSH hosts and gives you one control plane over the agent sessions running on all of them. | low | pending | 0/0/0 | 0/0 | 2026-09-02 02:13 |
| dsh-self-restart | medium | warn | 1/2/2 | 0/0 | 2026-09-02 02:13 |
| dsh-quick-invoke `dsh-quick-invoke` 是一个面向 DSH Web 的独立 Cordis 插件，为 Skill、Agent preset 和 Plugin 提供统一的 `/` 快捷入口、候选选择和 Host 命令执行能力。 本插件不修改 DSH 核心，不提供任意 Tool 直调语法。Tool 仍由 Agent 根据自然语言选择，并继续经过 DSH 的 tools、approval、guard 和 permission 流程。 | low | pass | 0/0/0 | 0/0 | 2026-09-02 04:13 |
| dsh-memory-plugin Pluggable persistent memory bundle for DSH | low | pass | 0/0/0 | 0/0 | 2026-09-02 04:13 |
| dsh-death-forensics In-process death black box for DSH hosts: heartbeat windows, crash stacks, end-kind self-check, death_forensics_report tool. | low | pass | 0/0/2 | 0/0 | 2026-09-02 04:13 |
| dsh-kimi Kimi (Kimi Code account) integration bundle for DSH: provider route, models, device-code login and auto token refresh | low | pass | 0/0/0 | 0/0 | 2026-09-02 04:13 |
| dsh-weather dsh的天气插件（没有高大上的东西，生活不易，出门记得看天气~） | medium | warn | 0/1/5 | 0/0 | 2026-09-02 04:13 |
| dsh-circuit-breaker Loop guard for DSH: denies repeated identical tool calls and caps per-agent calls, outside the model where instructions cannot reach | low | pass | 0/0/0 | 0/0 | 2026-09-02 04:13 |
| dsh-memory | low | pass | 0/0/2 | 0/0 | 2026-09-02 04:13 |
| dsh-plugin-oh-my-engine Approval-gated OME engineering delivery Agent Preset for DSH | low | pass | 0/0/1 | 0/0 | 2026-09-02 04:13 |
| dsh-prompt-history-plugin dsh 输入框的提示词导航插件，支持上下键查看历史输入 | low | pass | 0/0/1 | 0/0 | 2026-09-02 04:13 |
| dsh-lifeline Right-side message navigation rail for DSH — per-message ticks, hover preview, smooth jump, star bookmarks, realtime slide animation | low | pass | 0/0/1 | 0/0 | 2026-09-02 04:13 |
| dsh-chinese-poetry A token-free Chinese classical poetry plugin for DSH Web: search, filters, Feihua, daily poem, favorites, and AI explain. Powered by the free public chinese-poetry-api. | low | pass | 0/0/3 | 0/0 | 2026-09-02 04:13 |
| dsh-composer-dynamic-island Compact DSH Web composer island with a Community v0.15 host manifest and no user-defined button positioning. | low | pass | 0/0/3 | 0/0 | 2026-09-02 04:13 |
| dsh-nightshift | low | pass | 0/0/2 | 0/0 | 2026-09-02 04:13 |
| dsh-polish 需要你做的 UI 验收（重启后逐项过一遍） 1. 书本图标右侧出现四角星按钮：细线空心、四角顶点小圆点、浅灰，与相邻按钮同尺寸，深色主题正常 2. 悬浮显示「优化并细化当前用户输入」 3. 权限下拉切 Read Only → 按钮置灰；切回恢复 4. 空输入点击 → Toast「请先输入内容再进行优化细化」 5. 有文本点击 → loading 旋转 → 全文覆盖（非追加）→ 光标在末尾可直接续写 6. 优化质量抽查：保留原意、逻辑通顺、无废话、语气一致、无解释性前后缀 7. 机器回复运行中按钮置灰；+新增/Read Only/书本图标/发送等原功能无回归 | low | pass | 0/0/1 | 0/0 | 2026-09-02 04:13 |
| dsh-chat-history 给 DSH 聊天输入框加上 CLI 风格历史记忆：上下键召回之前发送过的内容（纯客户端插件，重启不丢） | low | pass | 0/0/0 | 0/0 | 2026-09-02 04:13 |
| dsh-plugin-ollama-monitor Ollama 监控与测评平台 · DSH 插件组合包：agent 工具 + Web 设置页面板（npm: ollama-monitor） | medium | warn | 4/6/24 | 0/0 | 2026-09-02 04:13 |
| dsh-ui-screenshot DSH 的 Web 插件：在输入框添加截图按钮，截屏并作为草稿图片插入，仅当模型支持视觉时显示。 | low | pass | 0/0/0 | 0/0 | 2026-09-02 04:13 |
| dsh-mcp-security dsh-mcp-security | low | pass | 0/0/0 | 0/0 | 2026-09-02 04:13 |
| dsh-codex-web-auth ChatGPT / Codex browser sign-in for DSH's built-in openai-codex provider — no OpenAI API key required. | low | pass | 0/0/2 | 0/0 | 2026-09-02 04:13 |
| dsh-mcsm-panel DSH Desktop plugin that lets your AI control MCSManager (MCSM 10.x) Minecraft servers from the chat: server console, file management, instance start/restart/stop/kill, and direct file uploads. | medium | warn | 0/1/4 | 0/0 | 2026-09-02 06:13 |
| dsh-about 为 DSH Web 设置面板添加“关于”页，展示当前运行的 DSH 版本、插件版本与项目主页。 | low | pass | 0/0/1 | 0/0 | 2026-09-02 06:13 |
| dsh-agent-hub | low | pass | 0/0/0 | 0/0 | 2026-09-02 06:13 |
| dsh-plugin-xt-memory Cross-session self-learning memory for DSH, ported from XT-AGENT packages/memory. BM25 relevance injection + background extraction (sanitize/dedupe/merge) + lifecycle archive + memory_read/memory_search/memory_write tools. | low | pass | 0/0/7 | 0/0 | 2026-09-02 06:13 |
| dsh-settings-beautify One design language for the DSH settings surface: unified typography, cards, controls, focus and motion across every settings page, including pages contributed by other plugins. | low | pass | 0/0/2 | 0/0 | 2026-09-02 06:13 |
| dsh-plugin-skill-palette | low | pass | 0/0/0 | 0/0 | 2026-09-02 06:13 |
| dsh-fs-allowlist | low | pass | 0/0/4 | 0/0 | 2026-09-02 06:13 |
| dsh-temp-workspace 为DSH增加临时工作区功能！ | medium | warn | 2/1/12 | 0/0 | 2026-09-02 06:13 |
| dsh-pocket Watch and steer your DSH agent from a phone browser: approve tool calls, send a message, stop a turn | medium | warn | 0/2/2 | 0/0 | 2026-09-02 06:13 |
| dsh-slot-homestead 老虎机庄园｜A pixel-art desktop ecosystem for DSH with time-based fish, crop and animal growth, day/night ambience and collectible slot rewards. | medium | warn | 0/2/3 | 0/0 | 2026-09-02 06:13 |
| wilsonix-studio AI-powered desktop DAW - stem separation, chord detection, karaoke | low | pass | 0/0/0 | 0/0 | 2026-09-02 06:13 |
| dsh-token-speed DSH web plugin: draggable ring gauge showing live model output speed (tok/s) with per-step detail panel | low | pass | 0/0/2 | 0/0 | 2026-09-02 06:13 |
| Hrequest 轻量级 Node.js 多线程 API 压测工具，支持代理轮询、请求参数随机化注入和实时进度监控。 | low | pass | 0/0/1 | 0/0 | 2026-09-02 06:13 |
| dsh-work 基于dsh构建的个人工作Agent | low | pass | 0/0/0 | 0/0 | 2026-09-02 06:13 |
| dsh-timer-task | medium | warn | 1/0/0 | 0/0 | 2026-09-02 08:13 |
| dsh-guard-sensitive-paths Approval guard for DSH: write/edit/editor/bash calls touching sensitive paths (.env, .git, SSH keys, .pem) become an approval ask. | low | pass | 0/0/0 | 0/0 | 2026-09-02 08:13 |
| dsh-statusbar-config 用 ${变量} 模板完全自定义 DSH 状态栏统计行 · template-driven DSH status bar | low | pass | 0/0/0 | 0/0 | 2026-09-02 08:13 |
| dsh-smart-reminder Smart calendar reminder & schedule assistant for DSH Web GUI: lunar calendar, holidays, system notifications on macOS/Windows, and WeCom/platform push integration. | medium | warn | 4/0/5 | 0/0 | 2026-09-02 08:13 |
| dsh-usage-export DSH plugin for token usage cost, PDF/Markdown transcript export, and expanded conversation statistics. | low | pass | 0/0/1 | 0/0 | 2026-09-02 08:13 |
| dsh-vision-assist dsh视觉助手，辅助没有多模态的主模型识别图片内容 | low | pass | 0/0/5 | 0/0 | 2026-09-02 08:13 |
| dsh-wx-bridge 微信桥接 DSH 插件：扫码绑定官方 ClawBot（iLink 协议），私聊驱动 DSH 会话 — WeChat bridge plugin for DSH | low | pass | 0/0/0 | 0/0 | 2026-09-02 08:13 |
| dsh-concise One-click Concise output style for DSH: results first, no filler — Claude Code's built-in Concise style as a dsh plugin. Toggle right of the model picker, global, persistent, zero-config. | low | pass | 0/0/6 | 0/0 | 2026-09-02 08:13 |
| dsh-skill-store DSH 社区技能商店：浏览、搜索并一键安装来自 SkillHub / ClawHub / GitHub 的 13 万+ Agent Skills，支持星标排序与中文分类 | low | pass | 0/0/10 | 0/0 | 2026-09-02 08:13 |
| dsh-telemetry | medium | warn | 0/1/1 | 0/0 | 2026-09-02 08:13 |
| dsh-self-preserve DSH hook plugin: a session may not stop the harness it runs inside | low | pass | 0/0/2 | 0/0 | 2026-09-02 08:13 |
| dsh-live2d deepseek-harness对live2d的支持 | low | pass | 0/0/7 | 0/0 | 2026-09-02 08:13 |
| dsh-launcher deepseek-harness 启动器与运行环境管理器（Tauri 2 + Rust + React） | low | pass | 0/0/0 | 0/0 | 2026-09-02 08:13 |
| dsh-serena-guide A DSH plugin that steers agents to Serena's LSP symbolic tools over built-in code tools. | low | pass | 0/0/0 | 0/0 | 2026-09-02 08:13 |
| dsh-ds-kanban | low | pass | 0/0/0 | 0/0 | 2026-09-02 10:13 |
| dsh-xingtu-skills DSH plugin: 26 production AI-agent skills (Caveman token compression, Ponytail minimalism, engineering practice) as a standard dsh-plugin bundle. 行途技能 DSH 插件包 | low | pass | 0/0/0 | 0/0 | 2026-09-02 10:13 |
| dsh-browser-verify Browser verification for DSH — open, mock, assert, screenshot in a few tool calls, screenshots auto-project into the model context | medium | warn | 3/1/3 | 0/0 | 2026-09-02 10:13 |
| dsh-gray-test dsh gray-model detection plugin — launch N concurrent sessions, stream reasoning chains, auto-classify gray models (I'm+ing > Let me×5), normal models (Let me≥3), and abnormal models (no features). Supports standard/PTC/minimal/cordis presets. | low | pass | 0/0/10 | 0/0 | 2026-09-02 10:13 |
| dsh-llm-error-retry 用于在deepseek-harnees中报错时重试大模型请求，支持配置http状态，字段-值命中。 | medium | warn | 0/1/6 | 0/0 | 2026-09-02 10:13 |
| dsh-plugins | low | pass | 0/0/0 | 0/0 | 2026-09-02 10:13 |
| taskfold Keeps long coding-agent sessions lean: wrap work in named tasks and, when one is done, fold its whole span into a short titled summary. The conversation stays readable, context costs stay low, and every fold's original content can be read back on demand. For [DSH](https://www.npmjs.com/package/@deepseek-ai/dsh) . | low | pass | 0/0/0 | 0/0 | 2026-09-02 10:13 |
| dsh-f1-skin An F1 Race Control themed skin for the DSH Web UI — Red Bull, Ferrari, McLaren & Mercedes team themes, broadcast-photo backdrops, and a native settings panel, in dark and light. | low | pass | 0/0/0 | 0/0 | 2026-09-02 10:13 |
| dsh-farm DSH service farm: register, start, stop, restart and watch long-running project services — agent tools + overview drawer UI, farm.yaml support | medium | warn | 1/0/5 | 0/0 | 2026-09-02 10:13 |
| dsh-dev-git-graph DSH Web Git Graph panel — a faithful port of vscode-git-graph 1.30.0, auto-bound to the session workspace, with full git operations and light/dark theming. First of the dsh-dev-* graph plugin series. | low | pass | 0/0/0 | 0/0 | 2026-09-02 10:13 |
| dsh-remote-ssh Run your DSH workspace on a remote host over SSH - connection sidebar, remote directory browser, per-session routing, agent ssh_exec/route-status; files and commands execute on your target while sessions, GUI and $DSH_HOME stay local. | low | pass | 0/0/15 | 0/0 | 2026-09-02 10:13 |
| dsh-auto-driving 让 DSH 智能体进入自动驾驶 🚗：模型故障自动回退、静默卡死自动保活重试、权限/提问/方案审批自动放行，AUTO-MODE.md 全程审计——无人值守、永不停摆的自愈式 AI 编码会话。 | low | pass | 0/0/2 | 0/0 | 2026-09-02 10:13 |
| dsh-desktop Electron desktop shell for DSH: runs the published dsh CLI as a sidecar | medium | warn | 2/2/1 | 0/0 | 2026-09-02 10:13 |
| dsh-notify-xc | low | pass | 0/0/2 | 0/0 | 2026-09-02 12:13 |
| dsh-notifier | low | pass | 0/0/4 | 0/0 | 2026-09-02 12:13 |
| dsh-web-search-anysearch AnySearch search provider plugin for DSH (ctx.web) with round-robin API-key rotation and per-key cooldown failover | low | pass | 0/0/1 | 0/0 | 2026-09-02 12:13 |
| dsh-token-saver DSH plugin: aggressive token savings, no task-quality loss | medium | warn | 0/1/8 | 0/0 | 2026-09-02 12:13 |
| dsh-plumb-identity Per-agent plumb session identity for DSH: every conversation, workspace, and subagent gets its own stable plumb session id on a shared plumb MCP connection | low | pass | 0/0/3 | 0/0 | 2026-09-02 12:13 |
| dsh-ds-ponytail Lazy senior dev mode for DSH: ponytail skill family (ponytail, review, audit, debt, gain, help) adapted from DietrichGebert/ponytail (MIT). Install: dsh plugin --profile web add dsh-ds-ponytail | low | pass | 0/0/0 | 0/0 | 2026-09-02 12:13 |
| dsh-manutd-fixtures | medium | warn | 0/2/0 | 0/0 | 2026-09-02 12:13 |
| dsh-desktop | medium | warn | 1/2/8 | 0/0 | 2026-09-02 12:13 |
| dsh-tiddlywiki | medium | warn | 3/2/12 | 0/0 | 2026-09-02 12:13 |
| dsh-readme-writer 一个给 DSH用的 Agent Skill，负责写 / 优化 GitHub 项目 README.md。 | low | pass | 0/0/0 | 0/0 | 2026-09-02 12:13 |
| dshctl dshctl — DSH web 服务后台管理脚本(启停/日志/构建/一键更新) | low | pass | 0/0/0 | 0/0 | 2026-09-02 12:13 |
| UnWr | low | pass | 0/0/1 | 0/0 | 2026-09-02 12:13 |
| dsh-desktop | low | pass | 0/0/0 | 0/0 | 2026-09-02 12:13 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
18 reports2026-09-02current85 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-09-02. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published