Daily security scan
Date · 2026-09-09 (UTC — plugins first indexed that day)
Static scan · new today
rule heuristics · shape onlyTier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low.
Dynamic audit · subset of new today
model reads source · no executionTier = highest finding. Of 48 new entries: 3 with a conclusion, 12 queued, 1 failed (no conclusion), 32 low-risk not queued.
Data file updated 2026-10-26 07:31 (UTC+8); latest conclusion audited 2026-10-25 07:32 (UTC+8)
| Plugin | Static | Dynamic | Findings C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| dsh-whale-widget-sankou DSH 小鲸鱼余额挂件·三口皮肤版 —— 基于 MeteorNOX/DeepSeek-Balance-Whale-Widget（MIT）的修改版：自定义桌宠“三口”形象/语音/生气与吃撑状态/吃透明动画，含余额提醒与菜单修复 | medium | queued | 0/2/7 | 0/0 | 2026-09-09 00:13 |
| dsh-agent-pet A pet in the DSH Web UI that changes pose with your agent, with an eight-pose sprite sheet you can generate from one sentence. | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-09-09 00:13 |
| dsh-webdav-server dsh 插件 · WebDAV 服务器：把一个目录变成 Windows/macOS/Linux 都能挂载成本地磁盘的服务（令牌认证/只读模式/热更新配置） | medium | queued | 0/2/18 | 0/0 | 2026-09-09 00:13 |
| dsh-ai-saas-deal-finder DSH plugin that finds the cheapest legitimate AI/SaaS purchase option based on region, eligibility, payment methods, taxes, and service policies. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 02:13 |
| dsh-artifacts An Artifacts tab for the DSH web GUI sidebar: lists the files an agent produced and previews them in place, with live reload. | low | not queued (low risk) | 0/0/9 | 0/0 | 2026-09-09 02:13 |
| dsh-paste-code-block Cherry Studio-style paste: text/code blocks pasted into the DSH Web composer collapse into a bordered, collapsible, language-tagged card; restored as fenced code blocks on send. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 02:13 |
| dsh-mobile Flutter mobile app + Dart wire-protocol SDK for the DSH | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 02:13 |
| dsh-translator 基于 DSH 插件规范打造的输入框悬浮快捷翻译与历史找回挂件。支持直接复用当前会话已选大模型，内置智谱 AI 免费模型预设，并支持添加多个自定义 OpenAI 兼容接口。 | medium | queued | 0/2/11 | 0/0 | 2026-09-09 02:13 |
| dsh-desktop-drop-path | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 06:13 |
| dsh-queue-first-enter DSH Web plugin: with an empty composer, Enter steers the first queued message into the running turn. | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-09-09 06:13 |
| dsh-read-image-view Show local images read by read_image directly in the DSH web chat — inline thumbnail + lightbox, pure client plugin | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 06:13 |
| dsh-scheduled-send | medium | queued | 0/1/3 | 0/0 | 2026-09-09 06:13 |
| dsh-advisor | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-09 06:13 |
| dsh-context-window DSH 插件：复刻 Codex 最新上下文窗口管理 — token 预算提示 / 模型可调用的 new_context / 交接式换窗替代摘要压缩 | DSH plugin reimplementing Codex's context window management: token-budget notice, model-facing new_context, handoff window reset instead of summary compaction | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 06:13 |
| llm-capture | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-09 06:13 |
| dsh-outlook | medium | medium | 0/2/4 | 0/0 | 2026-09-09 06:13 |
| dsh-todo-board Cross-session TODO board for DSH: a draggable floating panel groups tasks by working directory, each task carries a run mode (remind / auto-continue in the current session / auto-open a new session) and two checkboxes (AI done, user verified). | low | medium | 0/0/7 | 0/0 | 2026-09-09 08:13 |
| dsh-plugin-updater Safe one-click plugin updater for DSH: backup, verified update with real boot smoke test, auto-rollback, and a launch-aware restart button. 深度求索 Harness 插件安全一键更新器 | medium | low | 0/6/4 | 0/0 | 2026-09-09 08:13 |
| dsh-automode Automode for DSH: a fourth permission preset — full access with an LLM classifier as the only gate before every tool call. | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-09-09 08:13 |
| dsh-turn-fold Two-level folding for DSH reasoning and tool calls (targets DSH 0.1.5-alpha.1) | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-09-09 08:13 |
| dsh-save-session DSH plugin: export the current session as filtered Markdown or rendered HTML (with TOC) via one-click buttons in the session header | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 08:13 |
| mega-index-map Cross-workspace interop Library: record, index and search files, tools, environments, knowledge and work records across workspaces for reuse. | medium | queued | 0/6/4 | 0/0 | 2026-09-09 08:13 |
| dsh-context-mode Context window optimization for DSH agents. Sandboxes tool output in-process (only what you print enters the conversation), persists session memory in an FTS5 knowledge base, and enforces routing via a system-prompt routing section. | low | not queued (low risk) | 0/0/7 | 0/0 | 2026-09-09 08:13 |
| dsh-security Plugins for performing security audits using dsh | medium | queued | 0/3/0 | 0/3 | 2026-09-09 08:13 |
| dsh-client-theme-cyber DSH 主题 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 08:13 |
| oh-my-dsh-plugins | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-09-09 08:13 |
| dsh-models-input-modalities DSH Web plugin: per-model input-modality selector (text/image) on the Models settings page for third-party (pi-ai) providers. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 08:13 |
| dsh-openkapsel Remote-only OpenKapsel workspace bridge for the DSH: replaces host filesystem and shell tools with a fail-closed remote tool set. Self-hosted alternative to cloud agent sandboxes. | high | queued | 1/0/2 | 0/0 | 2026-09-09 08:13 |
| deepshell-agent A desktop agent powered by DSH. | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-09-09 08:13 |
| dsh-composer-collapse Three-mode height manager for the DSH Web composer: auto / pinned open / pinned collapsed. DSH Web 输入框高度三态管理插件。 | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-09-09 10:13 |
| dsh-plugin-log-forwarder DSH 实时日志转发插件：将 Agent 运行事件实时转发到 WebSocket / Loki / 本地文件 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 10:13 |
| dsh-plugin-cron | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-09-09 10:13 |
| dsh-workspace-enhance 为 DSH 提供 Codex 风格工作区会话绑定、会话顶部快捷归档及已归档会话管理中心 | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-09 10:13 |
| dsh-geolibre DSH plugin: render GeoJSON/vector data into an interactive GeoLibre map and let agents operate the live map (layers, styles, view, GeoLibre algorithms and Whitebox WASM tools) through agent tools. | medium | queued | 0/2/3 | 0/0 | 2026-09-09 10:13 |
| dsh-copy-session-ref 在会话行菜单复制规范 @session mention, 粘贴到输入框即可召回该会话上下文 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 10:13 |
| dsh-subagent-progress Live subagent progress dock for DSH — npm: dsh-subagent-progress | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 10:13 |
| dsh-latex2office | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 10:13 |
| dsh-thinktune DSH的 Ollama 适配器插件：让 qwen3.8 等思考模型的思考强度成为一个可配置、可选择的一等参数，同时原生支持多模态图片输入，并可在四种常见的思考控制协议之间一键切换。 | medium | queued | 0/1/6 | 0/0 | 2026-09-09 10:13 |
| dsh-antigravity Analysis and local fix for dsh-antigravity plugin CallId export error in DSH Desktop Beta | medium | audit failed | 0/3/9 | 0/0 | 2026-09-09 10:13 |
| dsh-better-workbench DSH 工作台插件，把常用的页面或者应用，Pin 在工作台 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 10:13 |
| dsh-custom-context-injector dsh-custom-context-injector 提供「自定义上下文」设置页并注入到模型上下文，支持落盘持久化。 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 10:13 |
| dsh-terminal Resizable native CLI terminal panes for DSH sessions. | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-09-09 10:13 |
| dsh-super-advisor DSH SuperAdvisor: on-demand second opinions from a stronger model, with editable requests and per-call human approval. | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-09 10:13 |
| dsh-nazuna-wallpaper-engine NAZUNA (彻夜之歌) themed wallpaper-engine for DSH: 七草荠 mascot, moonlight-violet liquid glass. Derivative of elysia395/dsh-wallpaper-engine v0.7.1 (MIT). | medium | queued | 0/2/1 | 0/0 | 2026-09-09 10:13 |
| dsh-accounts DSH 凭据桥接插件：AI 代填登录表单/注入 env 运行 CLI，值不进模型上下文；附网页管理界面 | medium | queued | 0/1/2 | 0/0 | 2026-09-09 10:13 |
| dsh-voice-input Voice input for the DSH Web composer: browser Web Speech with a Windows offline (System.Speech) fallback. | medium | queued | 0/2/11 | 0/0 | 2026-09-09 10:13 |
| dsh-fisher 摸鱼海岸：面向 DSH 的轻操作钓鱼与收藏娱乐插件。 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 10:13 |
| um-dsh-plugin-skills Agent skill pack for DSH plugin development · 18-page distilled official dev guide (bilingual) · umdshdev | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-09 10:13 |
Dynamic audit results · new today (3 with a conclusion)
The model reads redacted source context and never executes plugin code. When a dynamic conclusion exists it is authoritative (it may raise or lower the level); otherwise the static tier applies. The audit never writes the exemption list.
Outlook COM bridge is coherent and mostly defensive, but the advertised human approval gate is entirely agent-controlled and the privileged PowerShell payloads were not in the reviewed set.
- mediumHuman-approval gate for sending mail/invites is an agent-supplied boolean the host cannot verify · index.js:530
- lowLocal badge/open routes treat a missing Origin as trusted and compare Origin to the attacker-controllable Host header · index.js:307
- lowPrivileged lib/olk.ps1 and lib/watch.ps1 are executed but were not part of the reviewed source set · index.js:88
Runtime files are absent; the supplied tests show the board route fallback accepts unauthenticated local writes when the harness connection gate is missing.
- mediumFallback board route trusts any loopback Host and omits browser-session auth · tools/check-http.mjs
- lowScreenshot tool writes page URL/HTML/text to assets on failure · tools/capture-screenshots.mjs
Local DSH updater; child processes use argv arrays, the one shell unit is correctly escaped, the HTTP API is host/origin fenced — only an unvalidated `to` version spec is a low-risk gap.
- lowUnvalidated `to` version spec from the update API reaches `pnpm add` · lib/engine.js:703
Site-wide fused risk
Static + vet fused, dynamic conclusions applied (authoritative when present, raise or lower); 24543 entries in total
Critical-tier plugins (19)
Static heuristic scan + manifest audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.
Daily report archive
70 reportsWhat does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-09-09. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
What does the "Manifest" column mean?
Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.
Is the static scan the only layer?
No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusion is authoritative when there is one — it can raise a verdict or lower it; the static/vet fused tier applies only when there is no dynamic conclusion. Exemptions stay manual and the script never writes the suppression list. This daily report shows both layers: every new entry is marked with its dynamic state (conclusion / queued / failed / out of the queue because it is low risk), and all conclusions of the day are listed below with their tier, model summary and findings. As of the latest run: 2864 dynamic audit records, 2289 with a model conclusion, 321 stricter than the static verdict, 789 softer.
Source: dsh.so security standards · Maintained by dsh.so · Published