Daily security scan
Date · 2026-09-06 (UTC — plugins first indexed that day)
Static scan · new today
rule heuristics · shape onlyTier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low.
Dynamic audit · subset of new today
model reads source · no executionOnly entries static-flagged ≥ warn are audited; tier = highest finding. Of 14 new entries, 13 are out of the queue or have no conclusion yet.
| Plugin | Static | Dynamic | Findings C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| dsh-status-bar Live execution status bar for the DSH web GUI: real-time activity + event-driven LLM achievement summaries with expandable detail reports. | low | not audited | 0/0/5 | 0/0 | 2026-09-06 02:13 |
| dhs-connect DSH Connect — ChatGPT model connector for DSH, powered by the Codex app-server. | high | low | 2/3/20 | 0/0 | 2026-09-06 02:13 |
| DSH-WebGIS DSH WebGIS Plugin: Map reading, map manipulation, and 3D world comprehension. | low | not audited | 0/0/0 | 0/0 | 2026-09-06 06:15 |
| dsh-whale-particles 给 DSH Web 加一个点阵互动背景:点阵可组成鲸鱼或你上传的透明 PNG 照片,每颗粒子有自己独立的平滑外力;既能手动随鼠标扰动,也能切换自动屏保模式(360° 任意方向扫波 + 全屏呼吸躁动),参数面板支持恢复默认。 | low | not audited | 0/0/3 | 0/0 | 2026-09-06 06:15 |
| dsh-wellness dsh-wellness | low | not audited | 0/0/0 | 0/0 | 2026-09-06 06:15 |
| dsh-skill-injector Auto-inject chosen skills into DSH sessions: each prompt or once at session start, with a settings page and a composer indicator. | medium | not audited | 0/1/2 | 0/0 | 2026-09-06 06:15 |
| dsh-split-screen | low | not audited | 0/0/4 | 0/0 | 2026-09-06 06:15 |
| dsh-btw enables /btw commands in deepseek-harness (similar to /btw in claude code) | low | not audited | 0/0/0 | 0/0 | 2026-09-06 06:15 |
| dsh-team Durable agent teams and web dashboard plugin for DSH | low | not audited | 0/0/1 | 0/0 | 2026-09-06 06:15 |
| dsh-commandcode-usage-inline | low | not audited | 0/0/0 | 0/0 | 2026-09-06 06:15 |
| dsh-whale-pet dsh的桌面宠物，挂载在WhaleHarbor中 | medium | not audited | 0/3/8 | 0/0 | 2026-09-06 06:15 |
| dsh-novel-forge AI 编译纯文本小说工作台 for DSH：大纲导入、道藏/大世界设定、卷与章节规划、逐章 AI 生成 3000-4000 字、九维审稿、全书质检、全本导出。AI novel writing workbench (text-only). | low | not audited | 0/0/2 | 0/0 | 2026-09-06 06:15 |
| dsh-adrian-inject-context | low | not audited | 0/0/4 | 0/0 | 2026-09-06 06:15 |
| dsh-model-info-fill 模型信息补全：按模型名自动补全上下文、输出上限、思考档位和图片能力 | low | not audited | 0/0/4 | 0/0 | 2026-09-06 06:15 |
Site-wide fused risk
Static + vet fused, dynamic raises applied (raise-only); 23532 entries in total
Critical-tier plugins (266)
Static heuristic scan + manifest audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.
Daily report archive
67 reportsWhat does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-09-06. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
What does the "Manifest" column mean?
Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.
Is the static scan the only layer?
No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusions can raise a verdict but never exempt one. The verdict shown across the site is the stricter of the two (max of static and dynamic). This daily report reflects the static layer. As of the latest run: 2605 dynamic audit records, 2047 with a model conclusion, 294 raised above the static verdict, 0 lowered below it.
Source: dsh.so security standards · Maintained by dsh.so · Published