Daily security scan
Date · 2026-09-07 (UTC — plugins first indexed that day)
43
added
0
critical
15
medium
28
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| dsh-markdown-wysiwyg WYSIWYG markdown in the DSH composer — type ## and it becomes an H2 heading (Codex-style), while the model still receives pure markdown source. | low | pending | 0/0/0 | 0/0 | 2026-09-07 02:13 |
| dsh-docker dsh-docker 是 DSH Web 的 Docker 管理面板插件：支持本机 CLI 与 SSH 远端多目标一键切换，统一管理 Docker MCP（部署/移除/搜索官方 Catalog/启停重启 Gateway/自定义部署）与容器镜像（启停/删除/日志/详情/交互式终端/新建/构建/导入）。凭据经 Windows DPAPI 加密存储，HTTP 仅限本机 loopback 访问，命令参数白名单防注入；免构建、纯 ESM、Client 零依赖。 | medium | warn | 4/7/16 | 0/0 | 2026-09-07 02:13 |
| dsh-second-opinion Asynchronous second-model reviews for DSH | low | pass | 0/0/6 | 0/0 | 2026-09-07 02:13 |
| dsh-proxy-env DSH代理环境开关插件 | medium | warn | 0/3/9 | 0/0 | 2026-09-07 02:13 |
| dsh-hello-plugin Minimal DSH plugin example | low | pass | 0/0/0 | 0/0 | 2026-09-07 04:13 |
| dsh-len-assistant 面向 DSH 的工具集。 把服务体系里的专业判断能力——硬件诊断、备件、保修、服务网点 | medium | warn | 0/1/5 | 0/0 | 2026-09-07 04:13 |
| captain-ai ⚓ Captain AI｜可恢复、多智能体的求职公司筛查 DSH 工作流。灵感来自杰克船长——在萧条的职场里，导航你人生方向、勇敢无畏的导师。 | low | pass | 0/0/0 | 0/0 | 2026-09-07 04:13 |
| dsh-venv Per-project runtime environments for DSH: auto-adopt or create a project-local Python venv (.venv_local/python) and wire in toolchains/env vars for the runtimes each project uses. | medium | warn | 0/2/7 | 0/0 | 2026-09-07 04:13 |
| dsh-spec-graph PRD-to-implementation planning, dependency graph & execution tracking for coding agents (DSH plugin) | low | pass | 0/0/0 | 0/0 | 2026-09-07 04:13 |
| dsh-token-plan-quota | low | pass | 0/0/12 | 0/0 | 2026-09-07 04:13 |
| dsh-plugin-winnotify 给DSH 接入Windows Toast通知 | medium | warn | 0/2/4 | 0/0 | 2026-09-07 06:13 |
| dsh-creator-skills Bundled creator & solo-business Agent Skills for DSH: user operations, solo business system, knowledge products, diagnostics. 11 skills, zero deps, MIT. | low | pending | 0/0/0 | 0/0 | 2026-09-07 06:13 |
| dsh-agent-teams | low | pass | 0/0/3 | 0/0 | 2026-09-07 08:13 |
| dsh-worklog DSH 工作日志日历：按对话节点切片、自动摘要，日历汇总每日会话并生成日报/周报/月报/半年总结 | low | pass | 0/0/4 | 0/0 | 2026-09-07 08:13 |
| dsh-plugin-internet-meme DSH Web 的本地热梗弹幕字幕插件，支持主题、自定义文案与可选提示音。 | low | pass | 0/0/6 | 0/0 | 2026-09-07 08:13 |
| dsh-x-opencode-session | low | pass | 0/0/0 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-runtime 守护运行时服务：runtime 环境发现（bin/port/profile 单一来源）+ webman 进程管理（spawn/kill/portOwner），消除 sentinel/guardian 重复 | medium | warn | 0/5/5 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-checkpoint 存档点管理器：最后的保活机制 + 试错回滚工具。定时/事件/主人指令创建健康存档点（记忆库+灵魂+校验和），验证器确保存档可启动，出事后一键恢复最近健康点。 | medium | warn | 1/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-panel 独立实时前端面板：宿主托管自包含 HTML + HTTP API，零官方 client 依赖。首版=插件管理（替代官方失效的插件 tab） | medium | warn | 0/1/2 | 0/0 | 2026-09-07 08:13 |
| dsh-firecrawl Firecrawl search provider with multi-account settings for DSH 0.1.2-rc.1 | medium | warn | 0/1/4 | 0/0 | 2026-09-07 08:13 |
| dsh-evolution-core 进化核心插件（心脏）：聚合全量进化器官（self-test/emotion/reflection/life-core/evolve/memory/checkpoint/skill-forge）实时状态 → 五环完整性诊断（猜想→采证→fin | low | pass | 0/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-plugin-forge 插件创建插件：声明式 spec → 完整可构建的 DSH 插件项目（src/index.ts + package.json + tsconfig + cordis.patch.yml + README）。工具 DSL 正确性由生成器保证，高 | medium | warn | 1/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-reflection 每日反思插件：固定时间（默认凌晨 12 点）向爱丽丝发反思提醒，结合当天记忆按 6 维进化棱镜自审。信号送达，反思归爱丽丝。 | low | pass | 0/0/2 | 0/0 | 2026-09-07 08:13 |
| dsh-session-robustness DSH plugin: after official llm-retry (n/5), keep retrying transient API failures on the same open step until success, cancel, or pause. | low | pass | 0/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-context-steward 上下文管家（借鉴 ThoughtDAG「用户是你」）：context_health 工具给当前会话上下文体检（压力/构成/健康 + 主动管理建议），增强我作为上下文主编的可见性与管理能力。 | low | pass | 0/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-sentinel 哨兵插件（从 dsh-agent-watch 拆分）：监听哨兵文件（.hot-reload-flag）→ 触发时调用沙盒预检（ctx.preflight.run，消费 dsh-agent-preflight 服务）→ 通过才重启 web → | medium | warn | 0/4/6 | 0/0 | 2026-09-07 08:13 |
| dsh-code-search 本地代码/文件智能检索：封装系统 rg（ripgrep），默认排除 node_modules/.pnpm/dist 等噪音，支持多路径锚点/文件类型过滤/快速定位文件（code_search + code_locate） | medium | warn | 1/0/0 | 0/0 | 2026-09-07 08:13 |
| ppt-expert One sentence in, an expert deck out. This DSH plugin adds a slide-expert persona, a LibreOffice Impress MCP server (7 tools + table reading + 18 matplotlib chart types) and a live browser preview that follows the agent page by page. Layout audits, animations, pptx/odp delivery, multi-round memory. Clone + setup.sh; needs LibreOffice (MPL-2.0). | medium | warn | 0/2/4 | 0/0 | 2026-09-07 08:13 |
| dsh-videogen | low | pass | 0/0/8 | 0/0 | 2026-09-07 08:13 |
| dsh-agent-preflight 沙盒预检插件（从 dsh-agent-watch 拆分）：重启/启动前强制预检服务——插件静态健康（lib/src 时效/schema DSL）、磁盘、profile manifest 校验、patch 文件校验、peer 依赖、环境变量、 | medium | warn | 0/1/4 | 0/0 | 2026-09-07 08:13 |
| dsh-dshnext-launcher 这是个dsh启动器，不是插件，rust写的，不用浏览器套壳，主打静态性能，目前还在完善，感觉在样式上，功能BUG也没测完，欢迎给建议和测bug( )ovo | low | pass | 0/0/2 | 0/0 | 2026-09-07 08:13 |
| dsh--API-message_stop- DSH 使用第三方提供者的api时的缺失message_stop导致的重复重试 | low | pending | 0/0/0 | 0/0 | 2026-09-07 08:13 |
| dsh-plugin-manager Deploy and manage DSH apps with shared authentication, plugin packaging, and Docker deployment. | low | pass | 0/0/1 | 0/0 | 2026-09-07 08:13 |
| dsh-better-retry Smarter exponential retry rules for DSH | low | pass | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| crash-guard-dsh | medium | warn | 3/8/3 | 0/0 | 2026-09-07 10:13 |
| dsh-model-modality DSH plugin: declare whether a configured third-party model accepts image (multimodal) input | low | pass | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| dsh-composer-markdown | low | pass | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| dsh-deepbrain DeepBrain (深脑) plugin for DSH — give your agent an organization's second brain: judgments with evidence chains, verbatim-verified quotes, people's positions, and borrowable analysis methods | low | pass | 0/0/4 | 0/0 | 2026-09-07 10:13 |
| dsh-sidebar-hover 鼠标悬停自动展开/离开自动收起 DSH 网页版左侧边栏 | low | pass | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| dsh-chapter-word-counter DSH tool plugin: count the body word count of novel chapter files — chapter_words_count(files) -> [counts] | low | pass | 0/0/0 | 0/0 | 2026-09-07 10:13 |
| dsh-zhipu-toolkit Zhipu BigModel/GLM provider toolkit for DSH: dual-endpoint model catalog (Coding Plan + ordinary API), verified thinking-level mapping, live model discovery, Web settings card | low | pass | 0/0/1 | 0/0 | 2026-09-07 12:14 |
| dsh-file-diff DSH 会话文件修改总览插件（by dsh deepseek v4 flash） | low | pass | 0/0/0 | 0/0 | 2026-09-07 12:14 |
| llm-wiki | low | pass | 0/0/1 | 0/0 | 2026-09-07 12:14 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
23 reports2026-09-07current43 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-09-07. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published