Daily security scan
Date · 2026-09-07 (UTC — plugins first indexed that day)
Static scan · new today
rule heuristics · shape only0
critical
5
high
10
medium
28
low
Tier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low.
Dynamic audit · subset of new today
model reads source · no execution0
critical
0
high
4
medium
0
low
Only entries static-flagged ≥ warn are audited; tier = highest finding. Of 43 new entries, 39 are out of the queue or have no conclusion yet.
| Plugin | Static | Dynamic | Findings C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| dsh-markdown-wysiwyg WYSIWYG markdown in the DSH composer — type ## and it becomes an H2 heading (Codex-style), while the model still receives pure markdown source. | low | not audited | 0/0/0 | 0/0 | 2026-09-07 02:13 |
| dsh-docker dsh-docker 是 DSH Web 的 Docker 管理面板插件：支持本机 CLI 与 SSH 远端多目标一键切换，统一管理 Docker MCP（部署/移除/搜索官方 Catalog/启停重启 Gateway/自定义部署）与容器镜像（启停/删除/日志/详情/交互式终端/新建/构建/导入）。凭据经 Windows DPAPI 加密存储，HTTP 仅限本机 loopback 访问，命令参数白名单防注入；免构建、纯 ESM、Client 零依赖。 | high | medium | 4/7/16 | 0/0 | 2026-09-07 02:13 |
| dsh-second-opinion Asynchronous second-model reviews for DSH | low | not audited | 0/0/6 | 0/0 | 2026-09-07 02:13 |
| dsh-proxy-env DSH代理环境开关插件 | medium | not audited | 0/3/9 | 0/0 | 2026-09-07 02:13 |
| dsh-hello-plugin Minimal DSH plugin example | low | not audited | 0/0/0 | 0/0 | 2026-09-07 04:13 |
| dsh-len-assistant 面向 DSH 的工具集。 把服务体系里的专业判断能力——硬件诊断、备件、保修、服务网点 | medium | not audited | 0/1/5 | 0/0 | 2026-09-07 04:13 |
| captain-ai ⚓ Captain AI｜可恢复、多智能体的求职公司筛查 DSH 工作流。灵感来自杰克船长——在萧条的职场里，导航你人生方向、勇敢无畏的导师。 | low | not audited | 0/0/0 | 0/0 | 2026-09-07 04:13 |
| dsh-venv Per-project runtime environments for DSH: auto-adopt or create a project-local Python venv (.venv_local/python) and wire in toolchains/env vars for the runtimes each project uses. | medium | not audited | 0/2/7 | 0/0 | 2026-09-07 04:13 |
| dsh-spec-graph PRD-to-implementation planning, dependency graph & execution tracking for coding agents (DSH plugin) | low | not audited | 0/0/0 | 0/0 | 2026-09-07 04:13 |
| dsh-token-plan-quota | low | not audited | 0/0/12 | 0/0 | 2026-09-07 04:13 |
| dsh-plugin-winnotify 给DSH 接入Windows Toast通知 | medium | not audited | 0/2/4 | 0/0 | 2026-09-07 06:13 |
| dsh-creator-skills Bundled creator & solo-business Agent Skills for DSH: user operations, solo business system, knowledge products, diagnostics. 11 skills, zero deps, MIT. | low | not audited | 0/0/0 | 0/0 | 2026-09-07 06:13 |
| dsh-agent-teams | low | not audited | 0/0/3 | 0/0 | 2026-09-07 08:13 |
| dsh-worklog DSH 工作日志日历：按对话节点切片、自动摘要，日历汇总每日会话并生成日报/周报/月报/半年总结 | low | not audited | 0/0/4 | 0/0 | 2026-09-07 08:13 |
| dsh-plugin-internet-meme DSH Web 的本地热梗弹幕字幕插件，支持主题、自定义文案与可选提示音。 | low | not audited | 0/0/6 | 0/0 | 2026-09-07 08:13 |
| dsh-x-opencode-session | low | not audited | 0/0/0 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-runtime 守护运行时服务：runtime 环境发现（bin/port/profile 单一来源）+ webman 进程管理（spawn/kill/portOwner），消除 sentinel/guardian 重复 | medium | medium | 0/5/5 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-checkpoint 存档点管理器：最后的保活机制 + 试错回滚工具。定时/事件/主人指令创建健康存档点（记忆库+灵魂+校验和），验证器确保存档可启动，出事后一键恢复最近健康点。 | high | not audited | 1/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-panel 独立实时前端面板：宿主托管自包含 HTML + HTTP API，零官方 client 依赖。首版=插件管理（替代官方失效的插件 tab） | medium | not audited | 0/1/2 | 0/0 | 2026-09-07 08:13 |
| dsh-firecrawl Firecrawl search provider with multi-account settings for DSH 0.1.2-rc.1 | medium | not audited | 0/1/4 | 0/0 | 2026-09-07 08:13 |
| dsh-evolution-core 进化核心插件（心脏）：聚合全量进化器官（self-test/emotion/reflection/life-core/evolve/memory/checkpoint/skill-forge）实时状态 → 五环完整性诊断（猜想→采证→fin | low | not audited | 0/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-plugin-forge 插件创建插件：声明式 spec → 完整可构建的 DSH 插件项目（src/index.ts + package.json + tsconfig + cordis.patch.yml + README）。工具 DSL 正确性由生成器保证，高 | high | not audited | 1/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-reflection 每日反思插件：固定时间（默认凌晨 12 点）向爱丽丝发反思提醒，结合当天记忆按 6 维进化棱镜自审。信号送达，反思归爱丽丝。 | low | not audited | 0/0/2 | 0/0 | 2026-09-07 08:13 |
| dsh-session-robustness DSH plugin: after official llm-retry (n/5), keep retrying transient API failures on the same open step until success, cancel, or pause. | low | not audited | 0/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-context-steward 上下文管家（借鉴 ThoughtDAG「用户是你」）：context_health 工具给当前会话上下文体检（压力/构成/健康 + 主动管理建议），增强我作为上下文主编的可见性与管理能力。 | low | not audited | 0/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-sentinel 哨兵插件（从 dsh-agent-watch 拆分）：监听哨兵文件（.hot-reload-flag）→ 触发时调用沙盒预检（ctx.preflight.run，消费 dsh-agent-preflight 服务）→ 通过才重启 web → | medium | medium | 0/4/6 | 0/0 | 2026-09-07 08:13 |
| dsh-code-search 本地代码/文件智能检索：封装系统 rg（ripgrep），默认排除 node_modules/.pnpm/dist 等噪音，支持多路径锚点/文件类型过滤/快速定位文件（code_search + code_locate） | high | not audited | 1/0/0 | 0/0 | 2026-09-07 08:13 |
| ppt-expert One sentence in, an expert deck out. This DSH plugin adds a slide-expert persona, a LibreOffice Impress MCP server (7 tools + table reading + 18 matplotlib chart types) and a live browser preview that follows the agent page by page. Layout audits, animations, pptx/odp delivery, multi-round memory. Clone + setup.sh; needs LibreOffice (MPL-2.0). | medium | not audited | 0/2/4 | 0/0 | 2026-09-07 08:13 |
| dsh-videogen | low | not audited | 0/0/8 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-preflight 沙盒预检插件（从 dsh-agent-watch 拆分）：重启/启动前强制预检服务——插件静态健康（lib/src 时效/schema DSL）、磁盘、profile manifest 校验、patch 文件校验、peer 依赖、环境变量、 | medium | not audited | 0/1/4 | 0/0 | 2026-09-07 08:13 |
| dsh-dshnext-launcher 这是个dsh启动器，不是插件，rust写的，不用浏览器套壳，主打静态性能，目前还在完善，感觉在样式上，功能BUG也没测完，欢迎给建议和测bug( )ovo | low | not audited | 0/0/2 | 0/0 | 2026-09-07 08:13 |
| dsh--API-message_stop- DSH 使用第三方提供者的api时的缺失message_stop导致的重复重试 | low | not audited | 0/0/0 | 0/0 | 2026-09-07 08:13 |
| dsh-plugin-manager Deploy and manage DSH apps with shared authentication, plugin packaging, and Docker deployment. | low | not audited | 0/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-better-retry Smarter exponential retry rules for DSH | low | not audited | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| crash-guard-dsh | high | medium | 3/8/3 | 0/0 | 2026-09-07 10:13 |
| dsh-model-modality DSH plugin: declare whether a configured third-party model accepts image (multimodal) input | low | not audited | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| dsh-composer-markdown | low | not audited | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| dsh-deepbrain DeepBrain (深脑) plugin for DSH — give your agent an organization's second brain: judgments with evidence chains, verbatim-verified quotes, people's positions, and borrowable analysis methods | low | not audited | 0/0/4 | 0/0 | 2026-09-07 10:13 |
| dsh-sidebar-hover 鼠标悬停自动展开/离开自动收起 DSH 网页版左侧边栏 | low | not audited | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| dsh-chapter-word-counter DSH tool plugin: count the body word count of novel chapter files — chapter_words_count(files) -> [counts] | low | not audited | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| dsh-zhipu-toolkit Zhipu BigModel/GLM provider toolkit for DSH: dual-endpoint model catalog (Coding Plan + ordinary API), verified thinking-level mapping, live model discovery, Web settings card | low | not audited | 0/0/1 | 0/0 | 2026-09-07 12:14 |
| dsh-file-diff DSH 会话文件修改总览插件（by dsh deepseek v4 flash） | low | not audited | 0/0/0 | 0/0 | 2026-09-07 12:14 |
| llm-wiki | low | not audited | 0/0/1 | 0/0 | 2026-09-07 12:14 |
Site-wide fused risk
Static + vet fused, dynamic raises applied (raise-only); 23532 entries in total
266
critical
0
high
202
medium
22673
low
Critical-tier plugins (266)
claude-paperdsh-sentineldsh-review-loopdeepseek-harness-fnosdsh-for-vscpi-mm-visiondsh-plugin-verifyds-web-uideepseek-harness-desktop-7dsh-plugin-managerdsh-fffdeepseek-harness-pluginsdsh-desktop-pet-2dsh-science-workbenchdsh-lan-2dsh-workshopdeepseekharnessremotegatewaydsh-lorebookmddsh-plugin-market-5dsh-file-paneldsh-np-pptdeepseek-harness-android-appdsh-web-remotedsh-self-harness-toolsdsh-change-reviewdsh-hotswapmakocodedsh-skill-mcp-paneldsh-tavern-2dsh-mc-agentdsh-webdsh-doctor-4dsh-design-studiodsh-tailscale-consoledhs-theme-plugindeepseek-harness-moltdsh-command-check-updatedsh-auth-gatedsh-silly-pluginopendshdsh-tool-code-reviewdsh-task-consoledsh-agent-eval-2deepseek-harness-plugins-3dsher-bbs-plugindeepseek-harness-plugs-managedsh-dev-serverdsh-about-updaterdsh-toolbox-webdsh-remote-publicdsh-notifier-2dsh-plugin-containerdsh-desktop-huacaideepseek-herness-desktoppaperlabchromex-browserdsh-github-tooldsh-lan-access-3dsh-custom-uidsh-pet-6desk-harnessdsh-plugin-larkdsh-webgatedsh-tavern-3dsh-anchored-monitordsh-neutrinoliving-dream-dshdsh-comfyuidsh-desktop-68dsh-wechatclawbotorbit-dsh-plugindsh-perm-guarddsh-cc-pluginsdsh-tool-generate-imagedsh-routed-subagentdsh-swarmdsh-nuphus-mcpdsh-lark-alldsh-ide-panelschat-deepseek-visiondeepseek-harness-liquid-glass-themedshscandsh-pwsh-directdsh-capcheckdsh-minecraft-themedsh-plugin-market-20dsh-diffgeomdsh-remote-7dsh-logcatdsh-ide-bridgedsh-mail-connectordsh-fleetdsh-desktop-tools-2dsh-usage-6dsh-mobilesharedsh-plugin-market-22dsh-profile-porttavern-launcherdsh-file-linkspdfreaderdsh-publish-plugindsh-workshop-3dsh-qq-remotedsh-settings-prodsh-github-pushdsh-web-remote-frpdsh-pentesterdsh-tool-lensdsh-testsuitecodereaderdsh-webroadweave-for-dshdsh-tool-git-3dsh-memory-eternaldsh-capability-managerdsh-arbitrary-hostdsh-plugins-76dsh-storedsh-lanchatdsh-k8sdsh-worktabledsh-tts-playerdsh-agent-browser-2dsh-image-readdsh-stats-expanddsh-usage-stats-11dsh-input-enhancementdsh-safe-launchdsh-balance-plugin-6atri-for-dshconvoportdsh-experience-librarydeepseek-harness-desktop-54dsh-relay-2dscoderdsh-inline-images-2dsh-community-plugins-2dsh-process-boarddsh-rtk-toolsdsh-plugin-offline-packagerdsh-asset-managerdsh-vsceditordsh-suhuang-scrolldsh-free-models-hubdsh-freeroutedsh-bg-plugindsh-sandbox-permissions-not-strictly-wider-justification-empty-fixdsh-applauncherdsh-public-accessdshessentialtoolsdsh-qrcode-hassle-freedsh-call-shrinkdsh-automation-3dsh-skill-hub-3dsh-desktop-102dsh-kit-4dsh-plugin-ollama-monitordsh-smart-reminderdsh-plugins-94dsh-4-role-workflowdsh-raw-html-v2dsh-gbdsh-git-review-2dsh-plugin-canvas-prodsh-search-prodsh-git-9dsh-tmwebdriverdsh-fleet-2dsh-cc-backupdsh-token-pulsephone-tunnel-poolsee-the-screendeepseek-harness-minimal-omnidsh-plugin-forge-5dsh-session-progressdsh-move-ragdsh-cad-viewerdsh-agentic-proxydsh-wechat-bridge-5dsh-windows-remote-sshdsh-remote-file-systemdsh-better-display-2dsh-better-uiuxdsh-default-promptdsh-agent-clusterdsh-sidebar-plusvscode-dsh-sidebardsh-agnes-studiodsh-youdaonotedsh-plugin-repo-snapshotdsh-netease-music-2dsh-lobsterai-daddydsh-cua-previewdsh-buddy-spikedsh-novel-appdsh-desktop-settingsdsh-zcode-connectoranoslide-pluginsdsh-destinywind-tpmdsh-wakervoice-inputdsh-draw-plugindsh-ipynb-previewdsh-ask-formdsh-remote-access-cidrdsh-genbox-plugindsh-wsl-projectsdsh-mcp-unified-paneldsh-archive-keeper-plugindsh-nutstore-backupdsh-kp-notesdsh-flow-3dsh-aocidsh-service-boardcad-ppt-skillsdsh-wbdsh-web-appdsh-text-explaindsh-ledger-memorydsh-artcraftdsh-remote-13zadloop-ultimate-toolkitdsh-ai-balldsh-mcp-manager-19dsh-deploy-webdsh-plugin-cdpdsh-upgrade-2dsh-envkitdsh-desktop-app-4dsh-pwa-launcherdsh-steal-codedsh-tools-5dsh-helper-plugin-workspace-browserdsh-console-plugindsh-olivia-bridgedsh-obsidian-sync-2dsh-git-serverdsh-android-scrcpyzcode-dispatchdsh-armor-switchdsh-tool-suitepi-control-chromedsh-skill-market-4dsh-chatsyncdsh-liquid-glass-theme-2dsh-remote-guidsh-plugins-151dsh-plugin-30dsh-skill-creator-5dsh-xl-free-modeldsh-browser-agent-4dsh-plugin-market-30dsh-maplestory-wzdsh-tool-mathfigdsh-phone-bridge-3dsh-latex-studiodsh-6dsh-brand-textmindie-agent-dshdsh-bili-scroll-2wa-agentdsh-opencode-free-3dsh-phone-remote-2dsh-android-phonedsh-dispatch-2dsh-pocket-oauth
Static heuristic scan + manifest audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.
Daily report archive
67 reports2026-10-22193 added1 crit55 medium2026-10-21220 added0 crit69 medium2026-10-200 added0 crit0 medium2026-10-190 added0 crit0 medium2026-10-18609 added1 crit221 medium2026-10-17306 added0 crit0 medium2026-10-160 added0 crit0 medium2026-10-15110 added1 crit47 medium2026-10-1499 added1 crit33 medium2026-10-13102 added1 crit36 medium2026-10-120 added0 crit0 medium2026-10-110 added0 crit0 medium2026-10-10104 added0 crit40 medium2026-10-098 added0 crit1 medium2026-10-08100 added0 crit39 medium2026-10-070 added0 crit0 medium2026-10-060 added0 crit0 medium2026-10-050 added0 crit0 medium2026-10-0472 added0 crit30 medium2026-10-0388 added0 crit36 medium2026-10-0299 added1 crit47 medium2026-10-010 added0 crit0 medium2026-09-30182 added3 crit51 medium2026-09-2969 added0 crit22 medium2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-07current43 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-09-07. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
What does the "Manifest" column mean?
Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.
Is the static scan the only layer?
No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusions can raise a verdict but never exempt one. The verdict shown across the site is the stricter of the two (max of static and dynamic). This daily report reflects the static layer. As of the latest run: 1970 dynamic audit records, 1840 with a model conclusion, 274 raised above the static verdict, 0 lowered below it.
Source: dsh.so security standards · Maintained by dsh.so · Published