Daily security scan
Date · 2026-09-17 (UTC — plugins first indexed that day)
70
added
1
critical
24
medium
45
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| dsh-mcp-manager-plus MCP Server Management Plugin: A new "MCP Management" page has been added to the left sidebar of the DSH settings interface, allowing you to directly view, enable/disable, edit, restart, delete, and add MCP servers. | medium | warn | 0/1/7 | 0/0 | 2026-09-17 02:14 |
| dsh-pocket-console DSH plugin: approve tool calls and answer ask_user_question prompts from your phone over Feishu, with the desktop always first in line. | low | pass | 0/0/3 | 0/0 | 2026-09-17 02:14 |
| dsh-prompt-optimizer 优化提示词 | low | pass | 0/0/0 | 0/0 | 2026-09-17 02:14 |
| dsh-windows-c-cleanup DSH plugin: scan, grade and clean up Windows C: drive - five-tier safety grading, staging area, UAC elevation, and migration. | low | pass | 0/0/0 | 0/0 | 2026-09-17 02:14 |
| dsh-remote-access Control how the DSH Web GUI is reachable: local only, Tailscale, all local networks, or off. | low | pass | 0/0/2 | 0/0 | 2026-09-17 02:14 |
| dsh-ditto AI is great at doing one file. Ditto is for doing the same thing to 30 files without babysitting all 30. Review-first batch automation plugin for DSH: 3 reviewed samples → full preview → approve → safe apply. | low | pass | 0/0/0 | 0/0 | 2026-09-17 04:13 |
| win-pilot Agent-neutral Windows Computer Use plugin with MCP, CLI, skills, and native host adapters | medium | warn | 0/7/8 | 0/0 | 2026-09-17 04:13 |
| dsh-opencode-compat Standalone OpenCode Zen compatibility bundle for DSH: session headers and Muse reasoning replay | low | pass | 0/0/0 | 0/0 | 2026-09-17 04:13 |
| 857-dsh-pdf-patched | medium | warn | 0/3/2 | 0/0 | 2026-09-17 04:13 |
| dsh-opencode-go-model-list 修复dsh上opencode go模型列表问题 | low | pass | 0/0/5 | 0/0 | 2026-09-17 04:13 |
| dsh-browser-use DSH Agent Preset bridge for Open Browser Use WebMCP | low | pass | 0/0/0 | 0/0 | 2026-09-17 04:13 |
| dsh-lsp-bridge Bridge DSH to language servers for read-only code intelligence, with multi-language configuration, multi-root workspace support, and session-scoped server reuse. | medium | warn | 0/1/5 | 0/0 | 2026-09-17 04:13 |
| dsh-captain-guard | low | pass | 0/0/0 | 0/0 | 2026-09-17 04:13 |
| memosbox-dsh-plugin | low | pass | 0/0/6 | 0/0 | 2026-09-17 04:13 |
| xy-dsh A set of DSH plugins: an always-on-top agent lamp board (macOS) and a session context lens. | medium | warn | 0/7/7 | 0/0 | 2026-09-17 04:13 |
| dsh-net-access Control how the DSH Web GUI is reachable: local only, Tailscale, all local networks, or off. | low | pass | 0/0/1 | 0/0 | 2026-09-17 04:13 |
| dsh-claude-theme Claude-style theme for the DSH Web GUI: warm cream canvas, serif reading text, coral accent — plus a clickable pixel Clawd crab. | medium | warn | 0/4/1 | 0/0 | 2026-09-17 04:13 |
| dsh-water-reminder Hydration reminder plugin for DSH — a randomized 40-60 minute nudge delivered as a native OS notification, an in-conversation agent nudge, and a sidebar countdown panel. Zero runtime dependencies. | low | pass | 0/0/2 | 0/0 | 2026-09-17 04:13 |
| dsh-paste-preview DSH web plugin: paste images with thumbnail previews, reroute them as file attachments for text-only models, zoomable thumbnails in sent messages | low | pass | 0/0/1 | 0/0 | 2026-09-17 04:13 |
| dsh-apis-plugin dsh-apis-plugin | low | pass | 0/0/1 | 0/0 | 2026-09-17 04:13 |
| memo_harness Agent memory with error bars: full local posteriors reconciled under finite relation laws. Dedupes source lineage, corrects without rewriting history. One CLI + SQLite. | low | pass | 0/0/0 | 0/0 | 2026-09-17 04:13 |
| dsh-paper-reader DSHA 论文阅读器插件：三栏阅读（左目录/中黑底论文/右实时 Agent 对话）+ 右栏停靠模式 + pdf.js 渲染与文字抽取 | low | pass | 0/0/10 | 0/0 | 2026-09-17 06:13 |
| dsh-context-imports Claude Code-style @path imports for DSH: expands @imports in AGENTS.md/CLAUDE.md and injects referenced files into context at session start | low | pass | 0/0/1 | 0/0 | 2026-09-17 06:13 |
| dsh-nx Experimental DSH plugin for safe, local Siemens NX automation through MCP. | low | pass | 0/0/8 | 0/0 | 2026-09-17 06:13 |
| dsh-desktop-upgrade DSH Desktop plugin: adds the missing 「升级 DSH」 entry — tray command + dsh_upgrade model tool, driving the official version service and installer channel via desktopRuntime.updates. 不改内核文件。 | low | pass | 0/0/0 | 0/0 | 2026-09-17 06:13 |
| dsh-sidemind | low | pass | 0/0/0 | 0/0 | 2026-09-17 06:13 |
| dsh-ds-balance DSH 插件：在左侧栏底部显示 DeepSeek 账户余额，设置页提供连接、展示币种、预警阈值与刷新节奏的配置卡片。（原生嵌入“设置-插件-插件配置”） | low | pass | 0/0/0 | 0/0 | 2026-09-17 06:13 |
| dsh-plugin-mesh DSH 局域网 Mesh 插件：自动发现同网段的其他 DSH 实例，提供对端操作页面，支持跨机双向派发任务。 | low | pass | 0/0/15 | 0/0 | 2026-09-17 08:13 |
| dsh-fal-imagegen fal.ai native image generation for DSH: a FAL_KEY settings card plus Agent tools (fal_generate_image / fal_edit_image) that call queue.fal.run directly. | low | pass | 0/0/3 | 0/0 | 2026-09-17 08:13 |
| dsh-web-searxng-search Self-hosted SearXNG web search provider for DSH. No API key or vendor account. | low | pass | 0/0/1 | 0/0 | 2026-09-17 08:13 |
| dsh-graft-plugin A DSH plugin that puts graft — a prebuilt graph of every symbol, its file:line span, and who calls what — in front of both you and the model. | medium | warn | 0/5/9 | 0/0 | 2026-09-17 08:13 |
| dsh-memory-lite 给 agent 的按需记忆库：会话日志提炼成分层 markdown 记忆，mem_query 只回命中片段（约 700 字符，而不是上万字符）。零依赖、不每轮注入、条条可溯源。既是 DSH 插件，也是独立 CLI。 | low | pass | 0/0/4 | 0/0 | 2026-09-17 08:13 |
| dsh-commandcode-quota Command Code plan quota in your DSH sidebar: 5-hour, weekly and monthly credit windows with reset countdowns. Works with Go, GOAT, Pro, Max and Provider plans. | low | pass | 0/0/7 | 0/0 | 2026-09-17 08:13 |
| dsh-iconic-launcher DSH plugin — pick a preset or upload a PNG: backdrop auto-removed, packed into a multi-size ICO, written to your desktop in one click. | low | pass | 0/0/4 | 0/0 | 2026-09-17 08:13 |
| win10GUI-dsh-plugin | low | pass | 0/0/2 | 0/0 | 2026-09-17 08:13 |
| dsh-web-fetch-proxy DSH plugin: route the built-in web_fetch through a local proxy so TUN fake-ip addresses stop tripping the SSRF guard. | medium | warn | 0/5/18 | 0/0 | 2026-09-17 08:13 |
| dsh-graph-runtime Graph runtime capabilities for the DSH: register LangGraph compiled graphs as DSH tools, plus a graph-driven routing agent. | low | pass | 0/0/0 | 0/0 | 2026-09-17 08:13 |
| dsh_workspace_switch deepseek-harness多工作区隔离管理，统一管控 Skill / MCP / 插件启停，全局配置兜底，工作区可单独开关 | low | pass | 0/0/0 | 0/0 | 2026-09-17 08:13 |
| dsh-drawio 在 DSH Web GUI 侧边栏里直接画 draw.io 图：图纸即工作区里的 .drawio 文件，编辑器自托管、完全离线 · A self-hosted draw.io editor for the DSH sidebar | low | pass | 0/0/0 | 0/0 | 2026-09-17 08:13 |
| dsh-pptx-editor PPTX editor integration for DSH | low | pass | 0/0/0 | 0/0 | 2026-09-17 08:13 |
| dsh-continue dsh 输入栏一键「继续」「讲人话」快捷按钮插件 —— 代替程序员重复的体力活 | low | pass | 0/0/0 | 0/0 | 2026-09-17 08:13 |
| dsh-vps-manager Use your VPS inside DSH as seamlessly as over SSH: zero-token commands plus AI that operates the server with risk-tiered confirmation. 在 DSH 中和 SSH 一样无感地使用 VPS。 | critical | fail | 1/2/11 | 0/0 | 2026-09-17 08:13 |
| belief-merge Provenance-retaining cross-session context merge for DSH — a confluence theorem with a counterexample, and a benchmark for it. | low | pass | 0/0/0 | 0/0 | 2026-09-17 08:13 |
| dsh-simulated-life Simulated life context and world evolution for DSH: injects past 24h simulated events and provides life_react tool. | low | pass | 0/0/0 | 0/0 | 2026-09-17 10:13 |
| dsh-user-markdown 让用户消息也能在DSH里被markdown渲染 | low | pass | 0/0/3 | 0/0 | 2026-09-17 10:13 |
| dsh-console-tap DSH 控制台显形插件:把助手执行的命令与完整控制台输出实时推给前端(官方 WebUI 悬浮控制台) | medium | warn | 0/6/13 | 0/0 | 2026-09-17 10:13 |
| dsh-plugin-atlassian DSH plugin: connect Atlassian's official remote MCP server (Jira, Confluence, JSM, Bitbucket, Compass) over OAuth 2.1. | medium | warn | 0/6/15 | 0/0 | 2026-09-17 10:13 |
| dsh-wechat-clawbot DSH plugin: WeChat floating-ball bridge (QR login, message relay to agent) — maintained fork of lubaiUwU/DSH-WeChatClawBot with context_token + login-loop fixes | medium | warn | 0/14/43 | 0/0 | 2026-09-17 10:13 |
| dsh-plugin dsh plugins | low | pass | 0/0/3 | 0/0 | 2026-09-17 10:13 |
| dsh-model-switcher | low | pass | 0/0/8 | 0/0 | 2026-09-17 10:13 |
| dsh-api-balance Live DeepSeek API balance and per-session token usage in the conversation header. | medium | warn | 0/1/2 | 0/0 | 2026-09-17 10:13 |
| dsh-offpeak-job DSH 的谷时调度插件——把任务留到谷时再运行。 | low | pass | 0/0/2 | 0/0 | 2026-09-17 10:13 |
| dsh-memory-delta 给 AI 编码助手的跨会话长期记忆：自动注入、只推变化。DSH 插件 + 零依赖 CLI。 | medium | warn | 0/3/4 | 0/0 | 2026-09-17 10:13 |
| dsh-opencode dsh plugin that fixes opencode.ai 400 MissingSessionID: sends the x-opencode-session header on opencode / opencode-go routes in DSH. One-command install, in-memory, upgrade-safe. | low | pass | 0/0/0 | 0/0 | 2026-09-17 10:13 |
| dsh-project Engineering suite for DSH: seven plugins covering roles, specifications, test design, quality gates, evidence, audit trail and pipeline orchestration | medium | warn | 0/2/0 | 0/0 | 2026-09-17 10:13 |
| dsh-passbook 隐私密码本（Privacy Passbook）：我自己的私密凭据工具面——生成强密码、按字段写入、按需取用、不泄漏地使用（env 注入）、体检与轮换；存储复用 DPAPI vault，秘密走 stdin/env、不回显，审计只记「谁何时取了哪一条」。 | medium | warn | 0/2/4 | 0/0 | 2026-09-17 10:13 |
| dsh-custom-mode DSH 自定义模式：可切换基础模式、逐行开关插件、在 Web 设置页里随时改系统提示词，保存后新建会话即生效｜Custom mode for DSH: pick a base mode, toggle plugins row by row, edit the system prompt live from the settings page | medium | warn | 1/0/6 | 0/0 | 2026-09-17 10:13 |
| dsh-simple-codegraph Per-agent CodeGraph code intelligence integration for DSH. | low | pass | 0/0/3 | 0/0 | 2026-09-17 12:13 |
| dsh-code-graph Branch-aware code knowledge graph plugin for DSH — callers/impact/trace over 158+ languages, freshness-gated, zero MCP sessions | medium | warn | 0/2/8 | 0/0 | 2026-09-17 12:13 |
| dsh-server-monitor Read-only Linux server monitoring in the DSH sidebar. | medium | warn | 1/3/5 | 0/0 | 2026-09-17 12:13 |
| dsh-advanced-provider-settings Advanced provider configuration UI for DSH: headers, User-Agent, retry policy, timeouts, vision, reasoning and compatibility — without editing settings.yaml by hand. | low | pass | 0/0/0 | 0/0 | 2026-09-17 12:13 |
| dsh-plugin-proxy Runtime-switchable outbound proxy for DSH, with web settings card (maintained fork) | medium | warn | 0/8/21 | 0/0 | 2026-09-17 12:13 |
| dsh-plugin-adapter DSH adapter for OpenCode Zen free models (maintained fork with gateway-compat fixes) | medium | warn | 0/2/5 | 0/0 | 2026-09-17 12:13 |
| dsh-computer-use-win Windows computer use for DSH agents screenshot, click, type, scroll, with an on-screen indicator the human can see | medium | warn | 2/2/5 | 0/0 | 2026-09-17 12:13 |
| dsh-run-environment DSH plugin: run the project you have open, from the harness you are already in. Detects how a workspace is meant to be run (Node.js today, adapters for more) and runs it from the Session header. | low | pass | 0/0/2 | 0/0 | 2026-09-17 12:13 |
| dsh-dpharness 在 dsh 里浏览 dpharness.com 的插件目录并一键安装 —— 严选插件（汉化优先 + 可信度筛选）。Curated dsh plugin catalog for DSH with one-click install. | medium | warn | 0/2/11 | 0/0 | 2026-09-17 12:13 |
| dsh-verdict Measure whether a change to your dsh setup actually helped: register repeatable cases, run them, diff before/after. DSH plugin. | medium | warn | 1/1/0 | 0/0 | 2026-09-17 12:13 |
| dsh-run DSH web plugin: a Session-header split button that runs npm scripts from the workspace's package.json (default: dev, else start, else the first declared). | low | pass | 0/0/4 | 0/0 | 2026-09-17 12:13 |
| dsh-seams Field notes on DSH seams: extension points, a shell-only context-injection recipe, and four silent-failure traps | low | pass | 0/0/0 | 0/0 | 2026-09-17 12:13 |
| agent-usages | medium | warn | 0/1/1 | 0/0 | 2026-09-17 12:13 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
32 reports2026-09-17current70 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-09-17. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published