Daily security scan
Date · 2026-09-26 (UTC — plugins first indexed that day)
Effective tier · new today
dynamic first · this report0
critical
0
high
27
medium
57
low
8 of 84 new entries take their tier from a dynamic audit conclusion; the rest use the static scan tier. Where a conclusion exists it is authoritative (it may raise or lower the tier).
Static scan · new today
rule heuristics · fallback0
critical
3
high
26
medium
55
low
Tier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low. Used only when no dynamic conclusion exists.
Dynamic audit · subset of new today
model reads source · no execution0
critical
0
high
5
medium
3
low
Tier = highest finding. Of 84 new entries: 8 with a conclusion, 19 queued, 3 failed (no conclusion), 54 low-risk not queued.
Data file updated 2026-11-12 07:55 (UTC+8); latest conclusion audited 2026-11-10 07:38 (UTC+8)
| Plugin | Effective | Static | Dynamic | Findings C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|---|
| @weibaohui/dsh-fireworks dsh 插件 · 烟花庆祝引擎：agent 编程时在对话窗口上空放烟花——六类事件 × 30 张属性卡 × 洗牌袋随机变种，token 用量决定大小/高度/绚烂度，WebGL2 GPU 累积拖尾渲染 | low | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-09-26 00:13 |
| @having5548/dsh-backup Backup & restore plugin for DSH: workspace, full conversations (byte-exact), attachments, settings and dsh-mnemon memory data in one zip | medium | medium | queued | 0/2/5 | 0/0 | 2026-09-26 00:13 |
| @fan56/dsh-approval-policy dsh plugin: unattended approval gate — bounded answer window for subagent/scheduled/cron approvals, fail-closed default instead of hanging (per origin or per session) | low | low | not queued (low risk) | 0/0/7 | 0/0 | 2026-09-26 00:13 |
| @ZhangBo-cmd/dsh-coros-badge DSH 插件：常驻显示高驰手表型号与运动天数，点击展开一句话点评与建议 | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-09-26 00:13 |
| @weibaohui/dsh-flow dsh 插件 · 执行流程图：把当前会话的执行过程画成实时三泳道流程图（回合/用户/助手/工具/审批/重试），子代理发散-收敛扇形 + 双击下钻子流程，SSE 事件驱动直播 | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-09-26 00:13 |
| @PanChengN/dsh-plugin-session-delete 给 DSH 侧栏会话菜单加一行「删除会话」：真正从磁盘删除会话记录、派生缓存与子智能体会话（非官方插件） | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-09-26 02:13 |
| @yknBugs/dsh-manual-approval A DSH Plugin that add a new permission that every tool call opens an approval card first | lowD↓ | medium | low | 0/9/13 | 0/0 | 2026-09-26 02:13 |
| @notf0und/dsh-opencode-sounds DSH plugin: opencode's notification sound pack for the DSH Web UI (fork of @ai-galaxy/dsh-sound) | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 02:13 |
| @dxww123/dsh-alphasolve Session-scoped AlphaSolve workflow for DSH | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-26 02:13 |
| @leolee9086/dsh-viz DSH 可视化卡面插件：把数据画成会话里的一张图（时间线、关系网、日历、ECharts、图册） | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 04:13 |
| @mpetruc/dsh-vcc Deterministic VCC compaction for DSH | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 04:13 |
| @win10ogod/dsh-fount-memory Fount-inspired memory plugin for DSH with in-turn recall and no autonomous conversation turns | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-26 04:13 |
| @ZhaoAndy821/dsh-motion-background DSH WebUI 的动态背景插件：着色器型（GLSL 实时演算）与媒体型（MP4/WebM/GIF/图片）两类效果，每个效果是 mods/ 下的一个文件夹。Dynamic backdrops for the DSH WebUI. | mediumD↓ | high | medium | 2/3/13 | 0/0 | 2026-09-26 04:13 |
| @win10ogod/dsh-evidence-first-knowledge-work Evidence-first knowledge work skill packaged as a DSH plugin | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 04:13 |
| @win10ogod/dsh-fount-reality Autonomous screen attention and private background Agent loop for DSH | medium | medium | queued | 0/2/5 | 0/0 | 2026-09-26 04:13 |
| @miqian-nomad/dsh-browser-playwright-codex Codex-merged dsh-browser-playwright (compiled-only fork for DSH) + full diagnosis and patches for the 'minimized browser window gets yanked back' bug. 面向 DSH 的浏览器插件整合版 + 最小化窗口被拽回桌面的诊断与补丁。 | medium | medium | queued | 0/1/15 | 0/0 | 2026-09-26 04:13 |
| @sozercaniekosmosa/dsh-plugin-npm-run-shell | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 04:13 |
| @shiyan688/dsh-paperdesk DSH paper workbench: arXiv search → local library (metadata/PDF/full text) → L1/L2/L3 three-layer reading notes. Host + browser halves in one package, no build step. | medium | medium | audit failed | 0/4/7 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-wifi-access Host-side mobile access for DSH: 3081 reverse proxy (0.0.0.0:3081 -> 127.0.0.1:3080) + mobile browser shims; the UI lives in dsh-pocket · 移动端访问 host 侧实现与 3081 反代热备（界面由 dsh-pocket 提供） | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-hot-memory Projects Mnemon USER.md / MEMORY.md into every session system prompt · 把 Mnemon 的 USER.md / MEMORY.md 投影进每个会话的 systemPrompt | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 06:13 |
| @ardesp0630/dsh-work-progress Persistent work-progress row for DSH: task completion, a progress bar, and what the agent is doing right now. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 06:13 |
| @FlyingBamboo/dsh-pkg-atlas DSH 本机代码包依赖图谱（开发工具）：把已安装的 @deepseek-ai/* 包与第三方插件的依赖、挂载关系画成区-组-包三层交互图，支持聚焦、拖拽布局与中英切换。零运行时依赖，内置 cytoscape，断网可用。 | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-lan-services LAN service manager: probes ports 3090-3099, lists titles and LAN URLs, one-click start/stop · 局域网服务管理器：探测 3090~3099 端口段的本地 HTTP 服务，一键启停 | mediumD | medium | medium | 0/4/6 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-restart-button Session-header two-click Restart DSH button that restarts exactly this instance · 会话头两击确认「重启 DSH」，按本进程身份重启同一实例 | medium | medium | queued | 0/1/4 | 0/0 | 2026-09-26 06:13 |
| @win10ogod/dsh-agent-browser | medium | medium | queued | 0/2/11 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-literature-search Model-callable literature_search tool (OpenAlex by citation count + arXiv by relevance) · 模型可调用的 literature_search 工具（OpenAlex 被引排序 + arXiv 相关度） | medium | medium | queued | 0/1/2 | 0/0 | 2026-09-26 06:13 |
| @noahchalifour/dsh-anthropic-image-clamp DSH plugin: downscale images on Claude requests so many-image requests never hit the 2000px limit | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-skill-sets Group skills into task-type sets: switching a set swaps the injected skill list (catalog + body shadowed) · 技能档：按任务类型分档，切档即换注入的技能清单 | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-extensions-panel Registers a virtual-display toggle card in the sidebar Extensions tab · 在左栏「功能」Tab 注册虚拟显示器开关卡片 | medium | medium | queued | 0/1/3 | 0/0 | 2026-09-26 06:13 |
| @miseryrua/dsh-wb-memory 给 DSH 里的 Agent 一份跨会话长期记忆：真值源是工作区里的纯 Markdown，无向量库、无外部服务、零运行时依赖；每回合按预算分层注入 systemPrompt，后台自动流水 → 提炼 → 整理 → 治理。 | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-09-26 06:13 |
| @Headmaster218/dsh-llm-moe4all Local MoE4All engine provider for DSH. / DSH MoE4All | medium | medium | queued | 0/6/17 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-archive-button Sidebar archive button: two-click confirm, zips sessions idle for more than 3 days and deletes the originals · 侧栏归档按钮：两击确认，把空闲超过 3 天的会话打包并删除原目录 | medium | medium | queued | 0/1/3 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-local-file-search Adds a machine-wide file search to the composer @ menu (hits never enter the file tree or workspace index) · 在 @ 列表加「搜索本机文件」，全机一次性搜索，不进文件栏与工作区索引 | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-26 06:13 |
| @Iambatman1928/dsh-lawagent-ui ????????? lawagent-ui:??????????(DSH ??) | medium | medium | queued | 0/3/2 | 0/0 | 2026-09-26 08:13 |
| @huguangyu666/dsh-plugin-android-emulator DSH plugin: port of the ZCode official android-emulator plugin — 23 Android build / emulator / ADB / UI-Automator MCP tools + the android-dev skill | medium | medium | queued | 0/1/1 | 0/0 | 2026-09-26 08:13 |
| @linanbuan/dsh-usage 用量 · Usage — DSH 设置面板：当日/累计 token 用量、缓存命中、历史日历，以及 kimi-coding / commandcode 的额度与刷新时间。 A DSH settings panel: token usage, cache hits, a history calendar, and provider quotas. | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-09-26 08:13 |
| @xlxs123/dsh-session-multiselect DSH Desktop plugin: multi-select panel for conversations ??grouped by workspace, batch delete / fork / export / summarize / pin / archive. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 08:13 |
| @pure-craft/dsh-actions Deterministic project actions for people and agents — a DSH Web plugin. One actions.json, two surfaces: a right-sidebar panel and agent tools. | low | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-09-26 08:13 |
| @Lequait/dsh-proxy-router Direct-first fetching with automatic proxy fallback for DSH. 订阅链接 → 本地内核 → 直连优先、失败自动切代理 | mediumD | medium | medium | 0/8/8 | 0/0 | 2026-09-26 08:13 |
| @Lequait/dsh-glm-web 非官方的智谱清言（chatglm.cn）网页版 provider for DSH —— 用网页版登录态与积分驱动 agent。Unofficial Zhipu Qingyan web provider for dsh. | low | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-09-26 08:13 |
| @DSH-PackForge/dsh-pack-plugin | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-26 08:13 |
| @s-huizhuy-u/dsh-github-sync Publish a DSH workspace to GitHub: create the repo, initialize git, commit, and push — with the token held in the DSH credential store. | medium | medium | queued | 0/1/8 | 0/0 | 2026-09-26 08:13 |
| @longgege-cd/dsh-skin-pixel-anime Pixel-anime skin plugin for DSH web UI: palettes, pixel fonts (incl. simplified Chinese), corner presets, pixel clock. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 08:13 |
| @HapyRain/dsh-router-laya Auto tier routing for DSH: a locally fine-tuned model picks low/high/max thinking effort per message. Private, <1s, no cloud. 自动档位路由 | lowD↓ | medium | low | 0/11/17 | 0/0 | 2026-09-26 08:13 |
| @re-ITRT/dsh-skill-mcp-panel A Skill list and MCP server manager for DSH, mounted as a sidebar panel and themed entirely from the host's own design tokens. | low | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-09-26 08:13 |
| @eighteentang/dsh-plugin-dev-tools DSH 开发工具箱：界面元素定位（Alt+悬浮）、随插件分发的开发经验库、开发模式自检清单注入 | mediumD↓ | high | medium | 1/10/12 | 0/0 | 2026-09-26 10:13 |
| @bruceyork00-a11y/PinMe Just Pin a model to Favorites, so you dont need to choose it from menu. (Dsh plugin) | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-09-26 10:13 |
| @Billwu18/dsh-cache-hit-monitor Live prompt-cache telemetry for the current session in the DSH right sidebar: a register bank, a dot-matrix hit rate and a reactor-core history board. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 10:13 |
| @superSizzzz/dsh-think-budget DSH 插件：给单步思考一个字数预算，连续几步没有可见结论时强制先给结论再继续 | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-26 10:13 |
| @plumeume/dsh-copilot-key 把笔记本的 Copilot 硬件键变成启动/唤起 DSH：自研按键钩子 + DSH 管理器插件（dsh-copilot-key，已发布 npm） | medium | medium | queued | 0/2/2 | 0/0 | 2026-09-26 10:13 |
| @jonah791/dsh-temporal-self 时间自我模型 T1 时距注入（距主人上条 / 距自圈 / 今日已醒）——注入坐标，不假装感觉 | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-26 10:13 |
| @Daniel92Q/dsh-sidebar-footer-stack DSH plugin: stacks the sidebar footer slot entries vertically, unifies their card chrome, and lets you drag them to reorder. | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-09-26 10:13 |
| @pgnqukezrdxmhjso/dsh-llm-codebuddy-power 功能齐全的 CodeBuddy（WorkBuddy）提供者插件。 A full-featured CodeBuddy (WorkBuddy) provider plugin. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 12:13 |
| @jevgpt/dsh-plugin-locale-tr Turkish (tr) language pack for the DSH web GUI - 45 namespaces, 1,870 UI strings, no core changes | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-09-26 12:13 |
| @superSizzzz/dsh-feishu-bridge Two-way bridge between DSH and a Feishu / Lark bot: stage conclusions out, messages in, work summary at the end. | medium | medium | queued | 0/1/8 | 0/0 | 2026-09-26 12:13 |
| @Lgv-H/dsh-maibot-plugin-writer DSH 插件：让 DSH自己编写、校验、安装麦麦（MaiBot）插件。5 个 maibot_* 工具 + 随包 skill，能力白名单与 SDK 方法表实时取自本机 MaiBot | medium | medium | queued | 0/1/4 | 0/0 | 2026-09-26 12:13 |
| @Snowy117/dsh-direnv Load each workspace's direnv environment into every DSH command. 让 DSH 每个工作区的子进程自动带上该工作区的 direnv 环境。 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 12:13 |
| @YYK0402/dsh-siyuan-archive | medium | medium | audit failed | 0/4/12 | 0/0 | 2026-09-26 12:13 |
| @ZhaoZeW/dsh-rollback TRAE-style conversation rollback for DSH: per-turn checkpoints, in-place context truncation, and an affected-file diff preview. | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-26 12:13 |
| @Planckbaka/dsh-plugin-github-workflows GitHub workflows for DSH: repos, PRs, issues, commits, releases, Actions, Codespaces, search & raw gh api - one plugin on the GitHub CLI | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 12:13 |
| @18569663yz-web/dsh-plugin-crypto-ticker DSH 侧边栏左下角的实时加密货币行情卡片：BTC / ETH / SOL / JUP 的价格、24h 涨跌幅与 24 点迷你走势图，价格跳动带脉冲反馈，零依赖、免密钥。A live crypto ticker card in the DSH sidebar footer, above the balance and Settings - zero dependencies, no API key. | medium | medium | queued | 0/1/5 | 0/0 | 2026-09-26 12:13 |
| @Zioove/gpt-6-astra-dsh-preset DSH agent preset + bundle plugin: the GPT-6 / Codex Astra persona on dsh standard toolset, with a preset-local reference skill and a slim spawned-subagent persona | medium | medium | queued | 0/3/2 | 0/3 | 2026-09-26 12:13 |
| @rinDBeans/codex-ui DSH Web 的 Codex 化界面插件 · A Codex-style interface plugin for DSH Web | medium | medium | queued | 0/3/22 | 0/0 | 2026-09-26 12:13 |
| @EXarchive/DshLauncher DSH 桌面控制台 —— 单文件便携，双击即用 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 12:13 |
| @dienlanhvietnam-lang/deepseek-harness-vietnamese Vietnamese language pack for DSH with complete localization, CI verification and upstream tracking. | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-09-26 14:13 |
| @kangtsang/dsh-worktree-space dsh-worktree-space is a DSH plugin that creates isolated multi-repo workspaces for AI agents using Git worktrees. Each task gets its own workspace containing separate worktrees for every repository, enabling parallel agents to work without file conflicts, context pollution, or tangled commits. | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-09-26 14:13 |
| @overact/dsh-context-management Windowed compaction, session-private notes and paged history recall for DSH | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-09-26 14:13 |
| @ArthurZhou/dsh-plugin-model-hub A DSH web plugin that adds a Model Hub settings page for configuring | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @weibaohui/dsh-matrix dsh 插件 · 黑客帝国数字雨：对话窗口铺上经典字符雨背景，token 原文掺进雨里，雨势随 agent 活跃度起伏 | low | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-09-26 14:13 |
| @HuaimaoCy/dsh-codex-chatgpt Use the Codex desktop app's ChatGPT models inside DSH: a first-class LLM provider plus conversation-access tools, reusing the desktop app's own ChatGPT sign-in. | low | low | not queued (low risk) | 0/0/7 | 0/0 | 2026-09-26 14:13 |
| @HuaimaoCy/dsh-agent-hub DSH plugin: run several agents on different models at once, with a shared real-time progress board. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @liuyun847/dsh-host-restart DSH 宿主插件:给模型一个 restart_dsh 工具,重启 dsh 后自动恢复原会话续跑 | medium | medium | queued | 0/1/3 | 0/0 | 2026-09-26 14:13 |
| @Neo65536-engineer/dsh-agent-log Read-only work reports for DSH: reconstruct what an agent task actually did from session logs — tools used, files read/written, commands run, test results, failures, token usage, and whether it finished. Fully offline, no API key, no data leaves your machine. | lowD↓ | high | low | 3/0/11 | 0/0 | 2026-09-26 14:13 |
| @functy23/dsh-mcp-studio DSH 的 MCP 服务与 Skills 管理器：面板里增删改 MCP 行、扫描导入其他 Agent 配置、管理 Skills（DSH Web 插件） | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @liuyun847/dsh-client-ui-session-rail DSH Web 客户端插件:侧边栏收起时在左侧空白区竖排显示活跃会话横条 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @sunzphy/dsh-sidebar-status DeepSeek account wallet balance and the live peak/off-peak billing period, in a fixed status region at the sidebar foot — plus a one-click official top-up link. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @1497105876/dsh-text-inject dsh 插件：在官方设置页把文字注入系统提示词 / 会话上下文，独立文件存储，热加载 + 历史备份 · Inject text into the DSH system prompt or session context from a Settings page | medium | medium | audit failed | 0/4/1 | 0/0 | 2026-09-26 16:13 |
| @seanchen88/dsh-pluginHive DSH的自定义插件（包括MCP工具、技能管理面板等） | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @lovezi0/dsh-workspace-acl-allow 处理沟槽的dsh Windows 的 DACL（Discretionary Access Control List，自主访问控制列表）必须显式授予的问题 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @VoodooB0Ys/dsh-desktop-notify DSH 的 Windows 桌面提醒：需要授权 / 提问 / 完成 / 出错 / 被中止时在屏幕角落弹出提醒，点一下回到对应对话 | Windows desktop reminders for DSH, with click-to-open. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @GIN0076/dsh-token-usage 📊 Token usage dashboard for DSH Settings — daily/weekly/monthly per-model token stats with line & bar charts. Local-first, zero deps, pure SVG. DSH 设置面板词元用量统计插件 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @Aicksion/dsh-clean-desktop-shell-pro Enhanced fork of dsh-clean-desktop-shell: auto-start backend, no browser tab, ask-before-quit on exit, parallel cold start. | mediumD↑ | low | medium | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @shuiiiiimu/dsh-selfharness DSH 上的 Harness 层自我改进插件 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @HuaimaoCy/dsh-memory-vault Knowledge and memory vault for DSH: memory groups with automatic summarization, free assignment between conversation memory and the knowledge base, priorities, a base-prompt layer, and AI curation. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-09-26 16:13 |
Dynamic audit results · new today (8 with a conclusion)
The model reads redacted source context and never executes plugin code. When a dynamic conclusion exists it is authoritative (it may raise or lower the level); otherwise the static tier applies. The audit never writes the exemption list.
Windows launch path downloads and runs rcedit from GitHub with no integrity check; other reviewed modules are conventional; main-process entry/preload not provided.
- mediumDownloads and executes rcedit binary from GitHub without integrity verification · lib/icon.js:20
No injection/RCE found; but start/stop HTTP routes lack auth and the static server binds 0.0.0.0, so a LAN-reachable DSH host exposes process control and file serving.
- mediumUnauthenticated /lan-services start/stop routes can spawn and kill local processes · dsh-lan-services/lib/index.js:241
- lowStatic server binds 0.0.0.0 and /api/net discloses the absolute root path · dsh-lan-services/servers/static-server.cjs:144
Critical flags are dev-only verify/mutation scripts, not the plugin runtime; both interpolate filesystem-derived directory names into PowerShell delete commands — local command-injection risk.
- mediumPowerShell delete command built by interpolating a filesystem-derived directory name (single quotes not escaped) · verify.mjs:146
- mediumSame unescaped PowerShell interpolation in mutations.mjs directory cleanup · mutations.mjs:66
- lowImporting verify.mjs immediately force-deletes directories under a shared temp location · verify.mjs:227
Loopback HTTP control server with a coarse origin whitelist lets any locally-served page kill/restart the host and flip dev mode, which enables an unrestricted model-driven shell tool.
- mediumOrigin whitelist trusts every localhost port, so any locally-served page can quit/restart the host and toggle dev mode · app-control.js:200
- mediumrun_verification executes model-supplied commands via PowerShell with -ExecutionPolicy Bypass and persists output · acceptance.js:551
No backdoor or injection; real issues are TLS verification disabled in the fetch path and an unverified mihomo binary auto-downloaded from third-party mirrors and executed.
- mediumTLS certificate verification disabled on all router fetch paths · lib/core.mjs:90
- mediumUnverified mihomo binary auto-downloaded from third-party mirrors and executed · lib/core.mjs:274
- lowUnbounded response buffering and unlimited redirect following in HTTP helpers · lib/core.mjs:322
The 3 critical static-scan hits appear to be heuristic flags on child_process/fs usage inside dev-only verification scripts; no critical or high risk is reachable, but index.js and core/* were not harvested.
- lowDev verification script builds Windows shell commands by string interpolation of env/filesystem paths · bin/verify-compose.mjs:128
- lowRecursive rmSync on the dev link path that may hold a junction · bin/dev-setup.mjs:111
The private loopback route is loopback- and token-guarded and the published package ships only the host/client halves; the one concrete gap is an unguarded percent-decode that can throw, no code-exec or exfil path found.
- lowMalformed percent-encoding in a query value throws URIError out of the async route handler · lib/index.js:385
Local Laya judge service: model downloads sha256-verified, spawns use arg arrays (no shell injection). index.js host entry unaudited; /state prompt text readable by any loopback-origin page (low).
- low/state CORS allowlist admits any loopback-origin page, exposing recent prompt text · service/http_guards.py:17
Site-wide effective tiers (dynamic first)
Dynamic conclusions set the tier where they exist; the static scan applies only where there is none. 28,551 in-scope entries (28,181 scanned + 370 pending).
16
critical
258
high
1,100
medium
26,807
low
Static scan for reference: low 27,985 · medium 0 · high 192 · critical 0 (dynamic conclusions moved these into the effective tiers above).
Static heuristics + semantic manifest audit + a model-driven dynamic audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.
Daily report archive
87 reports2026-11-110 added0 crit0 medium2026-11-103344 added12 crit84 high1141 medium2026-11-090 added0 crit0 medium2026-11-080 added0 crit0 medium2026-11-070 added0 crit0 medium2026-11-060 added0 crit0 medium2026-11-050 added0 crit0 medium2026-11-044 added0 crit2 medium2026-11-030 added0 crit0 medium2026-11-02163 added2 crit5 high58 medium2026-11-010 added0 crit0 medium2026-10-310 added0 crit0 medium2026-10-30316 added2 crit4 high140 medium2026-10-29216 added2 crit8 high92 medium2026-10-28277 added2 crit6 high106 medium2026-10-270 added0 crit0 medium2026-10-2628 added0 crit10 medium2026-10-25200 added0 crit4 high80 medium2026-10-24166 added2 crit8 high73 medium2026-10-23218 added4 crit3 high87 medium2026-10-22193 added1 crit6 high49 medium2026-10-21220 added0 crit4 high65 medium2026-10-200 added0 crit0 medium2026-10-190 added0 crit0 medium2026-10-18609 added1 crit17 high204 medium2026-10-17306 added0 crit0 medium2026-10-160 added0 crit0 medium2026-10-15110 added1 crit5 high42 medium2026-10-1499 added1 crit33 medium2026-10-13102 added1 crit4 high32 medium2026-10-120 added0 crit0 medium2026-10-110 added0 crit0 medium2026-10-10104 added0 crit2 high38 medium2026-10-098 added0 crit1 high0 medium2026-10-08100 added0 crit39 medium2026-10-070 added0 crit0 medium2026-10-060 added0 crit0 medium2026-10-050 added0 crit0 medium2026-10-0472 added0 crit2 high28 medium2026-10-0388 added0 crit2 high34 medium2026-10-0299 added1 crit4 high43 medium2026-10-010 added0 crit0 medium2026-09-30182 added3 crit6 high45 medium2026-09-2969 added0 crit5 high17 medium2026-09-2864 added0 crit2 high21 medium2026-09-2763 added0 crit3 high20 medium2026-09-26current84 added0 crit3 high26 medium2026-09-2545 added1 crit4 high20 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit1 high28 medium2026-09-2259 added1 crit2 high16 medium2026-09-2165 added0 crit2 high21 medium2026-09-20104 added1 crit3 high31 medium2026-09-1981 added0 crit4 high32 medium2026-09-1872 added0 crit1 high13 medium2026-09-1770 added1 crit4 high20 medium2026-09-1567 added2 crit2 high30 medium2026-09-1482 added1 crit1 high29 medium2026-09-1343 added0 crit1 high14 medium2026-09-1284 added0 crit2 high27 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit1 high16 medium2026-09-0948 added0 crit1 high14 medium2026-09-08922 added2 crit62 high239 medium2026-09-0743 added0 crit5 high10 medium2026-09-0614 added0 crit1 high2 medium2026-09-0565 added0 crit14 high6 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit15 high15 medium2026-09-0285 added0 crit11 high8 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit48 high39 medium2026-08-2733 added0 crit6 high9 medium2026-08-26253 added0 crit38 high36 medium2026-08-25336 added1 crit51 high55 medium2026-08-24327 added4 crit41 high38 medium2026-08-23370 added2 crit73 high46 medium2026-08-2212 added0 crit2 high4 medium2026-08-212656 added8 crit290 high219 medium2026-08-20597 added5 crit84 high76 medium2026-08-191301 added12 crit273 high129 medium2026-08-184003 added22 crit999 high353 medium2026-08-17142 added1 crit36 high13 medium2026-08-16189 added0 crit53 high27 medium2026-08-15348 added5 crit144 high22 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-09-26. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site: four levels — critical / high / medium / low — read from finding counts, most severe first. Critical is reserved for secrets, exfiltration, destructive commands, or mining; a high-severity finding without a critical one reads high; medium (warning-level) findings read medium (needs review); no meaningful findings reads low. Where the model-driven dynamic security audit has a conclusion, that conclusion sets the tier (it can raise or lower it); the static scan tier (vet primary, dsh backstop) applies only when there is no conclusion.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
What does the "Manifest" column mean?
Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.
Is the static scan the only layer?
No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusion is authoritative when there is one — it can raise a verdict or lower it; the static scan tier (vet primary, dsh backstop) applies only when there is no dynamic conclusion. Exemptions stay manual and the script never writes the suppression list. This daily report shows both layers: every new entry is marked with its dynamic state (conclusion / queued / failed / out of the queue because it is low risk), and all conclusions of the day are listed below with their tier, model summary and findings. As of the latest run: 2919 dynamic audit records, 2341 with a model conclusion, 321 stricter than the static verdict, 794 softer.
Source: dsh.so security standards · Maintained by dsh.so · Published