Daily security scan
Date · 2026-09-30 (UTC — plugins first indexed that day)
182
added
3
critical
51
medium
128
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| @lingyingaojue/dsh-dev-mode 开发者模式：新手几句大白话讲需求，AI 自动走完「写计划 → 子代理审计划 → 极简模式后台会话写代码并编译 → 子代理 QA → 修 bug → 复测 → 交付」的 DSH 插件（agent preset）。 | medium | warn | 0/3/7 | 0/0 | 2026-09-30 02:11 |
| @fangweixuan26-hash/dsh-dual-balance DSH plugin: show the signed-in DeepSeek account's Platform wallet next to the DEEPSEEK_API_KEY balance, as one pill in the composer stats band | medium | warn | 0/1/3 | 0/0 | 2026-09-30 02:11 |
| @apherchin/dsh-windows-session-notification DSH plugin: cross-session "needs attention" notifications on Windows — actionable toasts, tiered sounds and a taskbar badge, only for sessions you are not watching. | medium | warn | 0/1/5 | 0/0 | 2026-09-30 02:11 |
| @temidayoxyz/deep-opencode OpenCode's free-tier models for DSH: a local opencode serve makes the free models resolve, so no API key is needed. | medium | warn | 0/2/18 | 0/0 | 2026-09-30 02:11 |
| @hoyyang/dsh-project-manager Project board for DSH: kanban card groups, cards linked to landfill-project memory, mounted repos and sessions. | low | pass | 0/0/5 | 0/0 | 2026-09-30 02:11 |
| @YanKaFei/Lacan-Knowledge-OS Corpus-grounded research environment for Lacanian psychoanalysis: frozen scholarly core (39 hash-pinned components), evidence-carrying answers with provenance, MCP surface (10 tools), Obsidian bridge. Engine ships no source text — the reference corpus is a separate public repository, research use only. | low | pass | 0/0/0 | 0/0 | 2026-09-30 02:11 |
| @LilJoeIJOYU/dsh-session-delete Delete a DSH conversation for real: a Session sidebar action that removes the stored log, its projection cache and its subagent logs. | low | pending | 0/0/0 | 0/0 | 2026-09-30 02:11 |
| @shine-yu-student/dsh-pen Enable DSH to paint (literally). | low | pass | 0/0/6 | 0/0 | 2026-09-30 02:11 |
| @SZYTree0312/dsh-bailian-gold 百炼成金模式 — 为阿里云百炼做前缀缓存优化的 dsh agent preset。缓存命中定价差 8 倍，省的是金子。 | low | pass | 0/0/0 | 0/0 | 2026-09-30 02:11 |
| @sknagato/dsh-plugin-fc-emulator dsh fc/nes模拟器 | medium | warn | 0/4/8 | 0/0 | 2026-09-30 02:11 |
| @sevastopol36/dsh-plugin-scihub a sci-hub search plugin for DSH | low | pass | 0/0/4 | 0/0 | 2026-09-30 02:11 |
| @Justin-Mai/dsh-stock-view DSH 右上角行情盯盘插件：A 股 / ETF / 港股 / 美股 自选股 + 加密货币实时行情 | critical | fail | 3/0/15 | 0/0 | 2026-09-30 02:11 |
| @stefanohe/dsh-show-balance Show account balance directly in the status bar. | medium | warn | 0/1/0 | 0/0 | 2026-09-30 02:11 |
| @WuShichao/dsh-ipynb-preview Render Jupyter .ipynb notebooks in the DSH document preview: syntax highlighting, offline LaTeX, and zoomable figures | medium | warn | 1/0/0 | 0/0 | 2026-09-30 02:11 |
| @sevastopol36/dsh-plugin-ghproxy DSH native plugin: fetch GitHub files, release assets, archives, gists and api.github.com JSON through public proxy mirrors with automatic health-checked failover | low | pass | 0/0/4 | 0/0 | 2026-09-30 02:11 |
| @sj244/dsh-qq-bridge 把已存在的固定 DSH 会话接到 QQ（OneBot/NapCat）并保留原上下文：白名单 + @/昵称必唤醒 + 概率唤醒，其余只记录；也可以把 agent 扔进群里当群友玩（不建议公共群）。 / Bridge one existing DSH session to QQ via OneBot/NapCat, keeping its context — fail-closed whitelist, @/nickname wake, configurable-probability wake. | medium | warn | 0/3/13 | 0/0 | 2026-09-30 02:11 |
| @apherchin/dsh-session-delete DSH session-row menu "Delete conversation": permanently deletes a session, cascades into subagent sessions, and refuses live sessions. Host + client Cordis plugin (bundle form). | low | pending | 0/0/0 | 0/0 | 2026-09-30 02:11 |
| @luckamuu/dsh-sessions-plugin DSH 插件：提供删除已归档会话的入口（可以彻底删除不会在次出现） | low | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @0x-0cd/dsh-opencode-go-status DSH Web plugin: OpenCode Go subscription panel — usage quota, remaining quota, subscription expiry and renewal state, all from one API-key endpoint (the public /zen/go/v1/usage API has no money and no expiry date). | medium | warn | 0/1/6 | 0/0 | 2026-09-30 04:13 |
| @ethanrise/dsh-privacy-gateway DSH 本地隐私网关，在数据发送给 AI 前脱敏 CSV/XLSX 中的敏感字段。 | low | pass | 0/0/4 | 0/0 | 2026-09-30 04:13 |
| @imtokenxinluo/dsh-tip-jar Tip jar for DSH: contributors declare USDC / fiat / QR channels in sponsors.json; sponsor-center panel + TipJarEmbed. Pure P2P, privacy by default. 打赏罐 | low | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @PennChong95/dsh-cost-meter DSH 插件：在上下文用量右侧显示本会话 token 用量与人民币费用（按 DeepSeek 官方价目折算） | low | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @joeseesun/dsh-plugin-qiaomu-rss 在 DSH 中阅读 RSS，与原生 AI 对话伴读文章 | RSS reading with native AI companion for DSH | low | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @adsikito/dsh-study-steward DSH agent preset: a study-and-execution steward persona on the full Standard tool surface, shipped with a generic Markdown rule pack for plans, vocabulary, algorithms, review and archiving. | low | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @yangyiqun747/dsh-plugin-whale-maid A chibi whale-maid companion plugin for DSH | low | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @imtokenxinluo/dsh-session-backup Backup tooling for DSH session data: bundle + sha256 integrity verification + spot-restore loader check. | low | pending | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @imtokenxinluo/dsh-fixture-bad-plugin Negative test fixture for DSH plugin contract checks (intentionally bad plugin, do not use as a real plugin) | low | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @Lmf-ynu/dsh-aurora-glass | low | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @liyang52520/dsh-web-login Password gate for the DSH Web GUI: first-run setup, brute-force lockout, audit log, and a management page inside Harness settings. | low | pass | 0/0/3 | 0/0 | 2026-09-30 04:13 |
| @crease123/dsh-journal-calendar Daily journal for DSH: the agent records what you did and what you plan to do into one JSON file per day, and the right sidebar draws them as a calendar with checkable todos. | low | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @nilesh32236/dsh-squad Cross-workspace AI worker fleets for DSH: spawn named worker sessions in other projects, queue or steer tasks into them, watch them in the background, collect their reports, and answer their escalations — all from one orchestrating chat. | low | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @lovezi0/dsh-open-in-app-base dsh "Open In..."控件底座，提供一个开放的可由同类插件补充的插槽以解决原生"Open In..."缺少在某些软件中打开 | low | pass | 0/0/4 | 0/0 | 2026-09-30 04:13 |
| @imtokenxinluo/dsh-session-doctor Session doctor for DSH: scan and losslessly repair corrupted session logs. 会话医生：扫描并无损修复会话日志损坏。 | low | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @sakuraboy9128-cmd/dsh-approval-notify Desktop notification when DSH is waiting for your approval of a tool call, with click-to-focus on the DSH window. | medium | warn | 0/4/6 | 0/0 | 2026-09-30 04:13 |
| @lovezi0/dsh-open-in-codebuddy 按钮与菜单由底座 `dsh-open-in-app-base` 统一渲染，本插件只负责「目标软件」这一半：注册一条目标记录，并在自己的宿主半边实现「是否可用」与「怎么打开」。不 fork、不修改宿主，也不依赖原生 open-in-app 的应用目录——插件自带一个本机路由，直接向 CodeBuddy CN 的 CLI 入口传递目录参数。 | medium | warn | 0/2/2 | 0/0 | 2026-09-30 04:13 |
| @EXstarAmazing/dsh-aqua-0.2-adapt Aqua 玻璃主题 · DSH 0.2 适配版（上游 WYH66666666/DSH-Transparent-UI-Plugin 的兼容补丁分支） | low | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @NanGePlus/dsh-sop-capsules DSH 插件，提示胶囊：在当前工作区沉淀可复用 SOP / 提示片段，并在会话输入框中一键注入。 | low | pass | 0/0/0 | 0/0 | 2026-09-30 04:13 |
| @sakuraboy9128-cmd/dsh-sensevoice-npu DSH speech-to-text provider that runs SenseVoiceSmall on the Intel NPU via OpenVINO | medium | warn | 0/3/6 | 0/0 | 2026-09-30 04:13 |
| @Theworld7/dsh-session-delete-plugin A DSH plugin that adds a permanent "Delete session" action to the sidebar session context menu. | low | pass | 0/0/1 | 0/0 | 2026-09-30 04:13 |
| @tianyiming1/dsh-plugin-local-prompt-bridge Stock-safe DSH community plugin: local tokenize pressure + overflow to CONTEXT_WINDOW_EXCEEDED compact-retry | low | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @2JumpSinA/dsh-context-guard A DSH plugin that tells you to wrap up and start a new session before the session gets too long: badge + one-shot banner from the official contextPressure projection, and from 45% occupancy it auto-drafts a machine-facts handoff block into your working directory. Zero context tax, bilingual zh/en. | medium | warn | 0/7/24 | 0/0 | 2026-09-30 04:13 |
| @verneuil/dsh-opencode-go-usage DSH插件，一个极简的浮窗同时显示 DeepSeek 官方余额与 OpenCode Go 的 5h/w/m 用量 | low | pass | 0/0/2 | 0/0 | 2026-09-30 04:13 |
| @songgms/dsh-git-graph | critical | fail | 1/2/9 | 0/0 | 2026-09-30 04:13 |
| @ASDLYF/Bilibili-Quark-Transform B 站视频批量下载（可选分辨率 / 分集）并上传到夸克网盘 | medium | warn | 0/2/16 | 0/0 | 2026-09-30 04:13 |
| @HarrisXiu/dsh-plugin-finder DSH插件发现工具：自动在 GitHub 与 npm 上检索社区插件，给出每个插件的 npm 包名与 GitHub 仓库地址，并内置一份可安装的推荐清单。装上后可在侧边栏「插件发现」页面浏览搜索，也可以让 agent 直接调用 dsh_plugin_finder 工具检索。 | low | pass | 0/0/7 | 0/0 | 2026-09-30 06:13 |
| @TianYa-DAO/dsh-pinned-sessions Keeps running, finished-but-unopened and currently open sessions at the top of the DSH Web sidebar workspace list. | low | pass | 0/0/0 | 0/0 | 2026-09-30 06:13 |
| @frederico-kluser/dsh-orquestrator DSH plugin: on task send, pick a different model for subagents and an independent reviewer that validates each subagent's work before it reaches the main agent | low | pass | 0/0/6 | 0/0 | 2026-09-30 06:13 |
| @orzyyyy/dsh-vim-scroll 桌面版会话中增加模仿 vim 的翻页方式。 | low | pending | 0/0/0 | 0/0 | 2026-09-30 06:13 |
| @xqtx9527/dsh-live-pricing DSH 实时价格条：高峰/空闲时段、中国法定节假日、当前单价与会话花费 | Live pricing widget for DSH | low | pass | 0/0/0 | 0/0 | 2026-09-30 06:13 |
| @dongshan1999/dsh-toolkit | medium | warn | 0/2/7 | 0/0 | 2026-09-30 06:13 |
| @lengmodkx/dsh-mimo-tts MiMo voice for DSH: auto-read answers aloud, click-to-talk composer mic, voice cloning. 小米 MiMo 语音插件。 | low | pass | 0/0/8 | 0/0 | 2026-09-30 06:13 |
| @yuluo554/dsh-prompt-polisher Composer prompt-polisher button plugin for DSH: one-click draft rewrite, style presets, dual model path, race protection | low | pass | 0/0/6 | 0/0 | 2026-09-30 06:13 |
| @wangzhanchao883/dsh-no-long-sit DSH cat desktop pet — its first job is a sit/water reminder. 猫猫桌宠：先当久坐/喝水提醒用（可拖动、四态循环动画、真实案例、总结评价）。 | low | pass | 0/0/6 | 0/0 | 2026-09-30 06:13 |
| @Teagnes/dsh-xxnerv-eva EVA-style companion HUD for DSH: remaining balance as active time, session cache-hit share as sync ratio. | low | pass | 0/0/4 | 0/0 | 2026-09-30 06:13 |
| @MyRemme/dsh-lan-pair LAN-only remote access for DSH: pair a phone or another PC by QR code or token to open the same web UI, with optional key-free access inside the LAN. | medium | warn | 0/4/10 | 0/0 | 2026-09-30 06:13 |
| @huanglianqi/dsh-math-snippets LaTeX snippet expansion in the DSH web composer: Tab expands a trigger into a formula template with the caret in the first hole, then walks the rest. // expands with no Tab at all. | low | pass | 0/0/2 | 0/0 | 2026-09-30 06:13 |
| @kyle123740/dsh-zcode-cli-proxy dsh-zcode cli反代 —— 把 ZCode CLI（客户端 agent）接入 DSH：app-server 常驻通道、Start Plan 额度直连、真流式、图片输入、工具委派 | medium | warn | 0/1/45 | 0/0 | 2026-09-30 06:13 |
| @kxdyh/dsh-usage-meter Live token usage and account balance meter for the DSH sidebar | low | pass | 0/0/0 | 0/0 | 2026-09-30 06:13 |
| @boxiaolanya2008/tokensqueezer Cuts a DSH agent's token use on its own output: caps generation before the call, folds verbose answers and reasoning after it, and keeps code byte-identical. | low | pass | 0/0/2 | 0/0 | 2026-09-30 06:13 |
| @aujurd22/dsh-flymemory Long-term memory for DSH: 15 FlyMemory MCP tools, automatic recall and capture hooks, and a supervised local engine. | medium | warn | 0/5/12 | 0/0 | 2026-09-30 06:13 |
| @Mgeeeeee/dsh-personalization Sidebar identity row and client UI tweaks for DSH: your own avatar, nickname and account balance | low | pass | 0/0/2 | 0/0 | 2026-09-30 08:14 |
| @xiseliuli/dsh-as-mcp dsh-as-mcp | medium | warn | 0/2/14 | 0/0 | 2026-09-30 08:14 |
| @linner1224/dsh-video-coursemap 视频课程知识地图 Agent（DSH 插件） | medium | warn | 0/2/3 | 0/0 | 2026-09-30 08:14 |
| @seeseeczl/dsh-sym 给 DSH 的界面读数层：实时会话花费（人民币，按厂商/模型与峰谷时段折算）、DeepSeek 账户余额、峰谷时段标记，以及把任一回复作为上下文引用的 @ 按钮 | low | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @novaschai7/dsh-plugin-balance-ui DeepSeek account balance, today's token usage and estimated spend in the dsh Web client sidebar. · 在 dsh 侧边栏显示 DeepSeek 余额、今日 token 用量与花费估算。 | low | pass | 0/0/4 | 0/0 | 2026-09-30 08:14 |
| @lxl8182/dsh-message-edit DSH Web 用户消息编辑重发插件：改掉某一轮提问重发，该轮之后的内容丢弃，原会话归档（新会话继承逐字节相同前缀以保住 prompt 缓存）。 | low | pass | 0/0/1 | 0/0 | 2026-09-30 08:14 |
| @Han-1413141/dsh-visual-edit Point at a webpage, give your DSH agent feedback, and compare the result. Local Vite + React visual editing sidebar. | medium | warn | 0/6/9 | 0/0 | 2026-09-30 08:14 |
| @ethanrise/dsh-model-deploy | medium | warn | 0/3/2 | 0/0 | 2026-09-30 08:14 |
| @Ayelsh/dsh-zhipu-plan A DSH plugin: Zhipu coding-plan sign-in, quota and usage panel. | low | pass | 0/0/1 | 0/0 | 2026-09-30 08:14 |
| @f1426912008/dsh-stock-ticker DSHWeb GUI 的实时股票盯盘插件：A 股自选股迷你窗口，含分时曲线、悬停详情卡与自选股设置页。零运行时依赖，无需构建。 | low | pass | 0/0/6 | 0/0 | 2026-09-30 08:14 |
| @win10ogod/dsh-knowledge-work Persistent knowledge-work Agent workflows, evidence capture, review and reports for DSH | low | pass | 0/0/2 | 0/0 | 2026-09-30 08:14 |
| @fanyongbing/dsh-mcp-native MCP server manager for DSH — manage this machine's MCP servers as native Loader rows, from a Settings page with cards, search, start/stop and a full config editor. Zero dependencies, zero build. | medium | warn | 0/1/7 | 0/0 | 2026-09-30 08:14 |
| @lxl8182/dsh-session-ops DSH Web 会话管理插件：设置 → 会话管理，一键归档 / 一键还原 / 一键删除（删除移入回收目录，可手工恢复）。 | low | pass | 0/0/2 | 0/0 | 2026-09-30 08:14 |
| @Yinhefuluoye/dsh-glass-effect A glass-material appearance for DSH: translucent composer, dialogs, menus and code blocks — one switch in Settings, off restores the stock look exactly. | medium | warn | 0/1/6 | 0/0 | 2026-09-30 08:14 |
| @AllenCoderBug/dsh-web-search-zerokey 零 key 联网搜索：不填任何 API key、不启任何本地服务、不消耗模型积分。多源聚合（Bing/HN/GitHub/arXiv/npm/掘金/CSDN），中英文自动路由。 | low | pass | 0/0/12 | 0/0 | 2026-09-30 08:14 |
| @Ayelsh/reasoning-setup A DSH plugin: edit reasoning effort levels and thinking formats for models that declare none. | low | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @Alkaid4521/dsh-pixel-art 手写像素画 skill 插件：教 agent 写脚本逐像素画出任意图，不联网、不依赖绘图库、同参数必然复现（DSH / DSH） | low | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @liuqingman/dsh-somni Sleep-consolidated long-term memory for DSH agents: episodic / semantic / prospective / procedural memory + identity, stdio JSON-RPC sidecar, idle-time dream consolidation, zero-config Cordis plugin. ｜ 给 DSHagent 的睡眠整理式长期记忆：醒时回忆、睡时做梦整理，零配置 Cordis 插件。 | low | pass | 0/0/3 | 0/0 | 2026-09-30 08:14 |
| @Tim5613/dsh-homepage-palette-skin DSH client skin: reproduces the deep-blue gradient glass sidebar from the official DSH homepage preview. · DSH 客户端皮肤：复刻官网预览图的深蓝渐变玻璃侧边栏 | low | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @Schrei5/dsh-plugin-session-project DSH sidebar plugin: show each session's project (Workspace) name under its title in the flat session list | low | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @kxdyh/dsh-agent-governor Two interception layers for DSH agents - DOL communication semantics and Sentinel tool execution governance | critical | fail | 2/1/5 | 0/0 | 2026-09-30 08:14 |
| @jryang1997/dsh-hold-to-talk Hold-to-talk dictation for the DSH composer: long-press the input box, release to transcribe into the draft. | low | pass | 0/0/0 | 0/0 | 2026-09-30 08:14 |
| @drfai/dsh-whale-pet DSH 桌宠插件：内置 Coopanion 鲸鱼娘分层精灵，随模型峰谷计价自动更换女仆装发带颜色，并常驻显示时段倒计时 | low | pass | 0/0/5 | 0/0 | 2026-09-30 08:14 |
| @Leo-Cjw/dsh-pharos | low | pass | 0/0/2 | 0/0 | 2026-09-30 10:13 |
| @Lostforest7/dsh-encoding Correct-encoding command runner and mojibake recovery for DSH. 让 DSH 在 Windows 上不再乱码。 | medium | warn | 0/1/1 | 0/0 | 2026-09-30 10:13 |
| @haotian-lu-prog/dsh-dev-backup Backup freshness monitor for DSH — see whether your scheduled backup actually ran, right in the Harness Web UI (DSH 0.2.0-rc.2) | medium | warn | 0/1/1 | 0/0 | 2026-09-30 10:13 |
| @HelloQingTao/dsh-rail-zero DSH web plugin: zero the collapsed left sidebar's 56px rail; reuses dsh-qol's hamburger, falls back to the official toggle. | low | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @1497105876/dsh-mimotts MiMo TTS 语音合成 DSH 插件（DSH 0.1.7） | low | pass | 0/0/1 | 0/0 | 2026-09-30 10:13 |
| @Han-1413141/dsh-compat-guardian Plugin compatibility checks, quarantine, recovery and offline startup rescue for DSH | medium | warn | 1/1/1 | 0/0 | 2026-09-30 10:13 |
| @Mgeeeeee/dsh-ui-personalization Sidebar identity row and client UI tweaks for DSH: your own avatar, nickname and account balance | low | pass | 0/0/2 | 0/0 | 2026-09-30 10:13 |
| @Tangcuyu4/dsh-zakou-pack DSH 杂口语言包：傲娇暴躁雌小鬼人格包，三层方言引擎（换骨架而非塞词）+ 脾气系统 + 斗嘴迎战 + 文件静默处理 | low | pass | 0/0/2 | 0/0 | 2026-09-30 10:13 |
| @liujianqiao701/dsh-compat-vet DSH插件兼容性体检：预警下次启动会被拒绝加载的插件，并在页面上按键一键隔离/卸载修掉它（改前自动备份、失败自动回滚）。Plugin compatibility vet for DSH. | medium | warn | 0/1/30 | 0/0 | 2026-09-30 10:13 |
| @cglyvip/dsh-auto-continue DSH 插件：模型请求失败自动注入「继续」并切换兜底模型，免手动干预 | medium | warn | 0/2/2 | 0/0 | 2026-09-30 10:13 |
| @callqh/dsh-codex-oauth Sign in to OpenAI Codex from DSH with a ChatGPT Plus/Pro subscription. | low | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @Tangcuyu4/dsh-long-memory DSH 超长记忆包：跨会话长期记忆 + 长文分块检索 + 聊天记录提取精炼，纯 JS 混合检索零依赖 | low | pass | 0/0/5 | 0/0 | 2026-09-30 10:13 |
| @lsdt45/dsh-model-config DSH 模型设置页插件：管理提供方与模型目录，配置模型容量、输入类型与思考能力 | low | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @oldHan2423/dsh-everything-find Everything (voidtools) file-name search for DSH: an everything_find tool plus a configuration card. | medium | warn | 0/1/4 | 0/0 | 2026-09-30 10:13 |
| @mwk719/dsh-skill-center DSH Web GUI 技能中心：侧栏入口把可配置来源目录里的技能铺成卡片，点击查看完整 SKILL.md；卡片开关会把技能注册进或移出模型可用的技能表。零依赖、免构建、无遥测、不采集数据。 | medium | warn | 0/1/4 | 0/0 | 2026-09-30 10:13 |
| @robin421/dsh-html-inspector Selection mode for DSH: click any element in a local HTML demo, locator auto-written to chat input / DSH HTML 选区模式插件 | low | pass | 0/0/6 | 0/0 | 2026-09-30 10:13 |
| @liweidong1722/dsh-work-list DSH工作台 | low | pass | 0/0/8 | 0/0 | 2026-09-30 10:13 |
| @HuanLinOTO/dsh-plugin-terminal-extension-wait-for 阻塞到字符串出现在 DSH 原生持久终端保留输出里（正则/子串；found/超时/退出/消失/取消五态） | Blocks until a pattern appears in a DSH persistent terminal's retained output (regex/substring; found/timeout/exit/gone/cancel outcomes) | low | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @lzpway-jpg/dsh-plugin-brand-custom Custom brand icon and name for the DSH Web client, editable live from a settings card | low | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @Tim5613/dsh-homepage-glass DSH macOS风格深蓝渐变侧边栏 + 官网流动蓝底丨DSH macOS-Style Deep Blue Gradient Sidebar + Official Website Fluid Blue Background | low | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @Lzhimie/dsh-skin-master DSH 皮肤大师：主题壁纸/自定义皮肤插件 —— 全局背景图片/视频、毛玻璃、输入框背景、弹出框毛玻璃、滤镜、AI 回复文本与消息气泡颜色 | low | pass | 0/0/7 | 0/0 | 2026-09-30 10:13 |
| @project-hy/dsh-claude-delegate DSH 插件：把自包含的编码子任务委派给本机 Claude Code（官方 Agent SDK），后台作业 + 实时输出通道 + 监控面板 + 运行时技能；npm: dsh-claude-delegate | low | pass | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @FeC3-pearlite/bearing-notes DSH 文献笔记插件：笔记汇总到一个 Word，右侧栏调用模型审阅并提示相关知识（轴承钢滚动接触疲劳） | medium | warn | 0/1/3 | 0/0 | 2026-09-30 10:13 |
| @Tangcuyu4/dsh-ciku-pack DSH 词库插件：收录用户情绪脏话与攻击性口气词当斗嘴弹药，弹药清单每轮自动注入 | low | pass | 0/0/2 | 0/0 | 2026-09-30 10:13 |
| @Han-1413141/dsh-autocompose Task-aware plugin composition for DSH, with native Web UI and isolated task execution | medium | warn | 1/1/1 | 0/0 | 2026-09-30 10:13 |
| @Altermoe/dsh-onedev DSH Plugin for OneDev | medium | warn | 0/2/7 | 0/0 | 2026-09-30 10:13 |
| @longhao666666/dsh-ask-mode DSH 插件：会话内一键切换咨询模式——只读问答，仅可新建 txt/md/docx 产出 | low | pass | 0/0/1 | 0/0 | 2026-09-30 10:13 |
| @bwndlct/dsh-codex-bridge Delegate Codex tasks to a running official DSH Desktop Host over MCP + loopback plugin | medium | warn | 0/2/9 | 0/0 | 2026-09-30 10:13 |
| @Zekilou/dsh-ask-form Structured form questions for the DSH agent: 14 typed field types, conditions, validation, targeted re-asks, and typed JSON answers. | medium | warn | 1/0/0 | 0/0 | 2026-09-30 10:13 |
| @17897693/dsh-wen DSH 办公文档插件：docx/xlsx/pptx/pdf/odf/csv/html 读写改与互转 + 离线 OCR（自用为主，不承诺维护） | medium | warn | 0/3/7 | 0/0 | 2026-09-30 10:13 |
| @swiftlc/dsh-annotation Text annotation tools for the dsh web composer | low | pass | 0/0/1 | 0/0 | 2026-09-30 10:13 |
| @longhao666666/dsh-session-delete DSH 插件：侧栏一键删除会话（先归档再清理磁盘日志，运行中的会话受保护） | low | pass | 0/0/1 | 0/0 | 2026-09-30 10:13 |
| @jryang1997/dsh-composer-dictation Hold-to-talk dictation for the DSH composer: long-press the input box, release to transcribe into the draft. | low | pending | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @longhao666666/dsh-element-context DSH 插件：对话中圈选/关联 UI 元素，把选择器、源码位置、盒模型与计算样式注入模型提示词 | low | pending | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @f-e-n-g-0531/dsh-code-review | low | pending | 0/0/0 | 0/0 | 2026-09-30 10:13 |
| @niliemi/dsh-billing DSH plugin: prices tokens with the official model price table, shows the running cost beside the composer context meter, and blocks a turn once spend passes the ceiling you set. | low | pending | 0/0/0 | 0/0 | 2026-09-30 12:13 |
| @MyRemme/dsh-computer-use-guard Three-tier (deny / ask / auto) authorization gate for DSH computer-use (cua-driver) tools, with a settings row that renders the three tiers per tool category. | low | pass | 0/0/0 | 0/0 | 2026-09-30 12:13 |
| @songshuhuoban/dsh-next-input | medium | warn | 0/1/1 | 0/0 | 2026-09-30 12:13 |
| @WindAndWood/dsh-chat-manager-wide DSH Chat Manager Wide — unofficial fork of dsh-chat-manager | low | pass | 0/0/2 | 0/0 | 2026-09-30 12:13 |
| @760403-create/dsh-endfield-theme Arknights: Endfield theme for the DSH Web GUI — charcoal + hazard-yellow industrial HUD, first-paint boot splash, conversation backdrop. | low | pass | 0/0/1 | 0/0 | 2026-09-30 12:13 |
| @QWEQ-CELL-DEL/dsh-whale-girl-wallpaper DSH Web skin: whale-girl dynamic wallpaper background | low | pass | 0/0/1 | 0/0 | 2026-09-30 12:13 |
| @Rczlin/dsh-better-reasoning | low | pass | 0/0/2 | 0/0 | 2026-09-30 12:13 |
| @vowa-antilamer/dsh-locale-ru Russian localization (ru) for the DSH web GUI — 58 message namespaces, 3674 strings. Language pack for @deepseek-ai/dsh-client-locale. | low | pass | 0/0/0 | 0/0 | 2026-09-30 14:14 |
| @LX-HMKK/DSH-appearance 轻量的 DSH 字体与主题插件：中英文字体分开选，含 One Dark Pro / Dracula / Nord / GitHub / Catppuccin 五套官方色板预设 | low | pass | 0/0/4 | 0/0 | 2026-09-30 14:14 |
| @Zm886/dsh-ruankao-essay 软考系统分析师论文助手：DSH 插件（题库索引 + 10 段式写作 + Word 交付） | low | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @Yaaaaaaa233/dsh-plan-and-execute On-demand planning for DSH: execute simple tasks directly and call a configurable planning model for complex ones. | low | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @zhuoxiaoshuai/dsh-database MySQL, Oracle, Redis, and Kafka workbench for DSH, with a shared execution path for humans and the model. | low | pass | 0/0/0 | 0/0 | 2026-09-30 14:14 |
| @moazzamak/dsh-code-review Code-review pack for DSH: the /review shortcut over the pinned Changes page, plus the dsh-change-review Skill that teaches an agent what a rejected change means. | low | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @DmitriyValetov/dsh-session-folders Session folders for the DSH 0.2.x web sidebar — fork of EugeneVl/dsh_session_folders (MIT) ported to DSH 0.2.0-rc.1 | low | pass | 0/0/3 | 0/0 | 2026-09-30 14:14 |
| @Erbsen16/dsh-client-ui-dracula 把 VS Code 的 Dracula（吸血鬼）配色搬到 DSH 的网页界面，顺带做了一组程序员向的排版调优。深色模式专用，随时可整页还原。 | medium | warn | 0/4/2 | 0/0 | 2026-09-30 14:14 |
| @Lyrissonare/dsh-preset-bridge DSH预设桥插件，解决“风神插件”“梁神模式”等在更新桌面版后预设不生效的问题，欢迎使用 | low | pass | 0/0/2 | 0/0 | 2026-09-30 14:14 |
| @YIYuNCU/DSHTrueDelete | low | pass | 0/0/6 | 0/0 | 2026-09-30 14:14 |
| @XN-H/dsh-ark-image DSH 生图插件：文生图 / 图片生成 / AI 绘画，基于火山方舟 Seedream（豆包）。零依赖、纯 JavaScript、无需构建。 | DSH image generation plugin for DSH: text-to-image via Volcano Ark Seedream (Doubao). Zero dependencies, plain JavaScript, no build step. | low | pass | 0/0/3 | 0/0 | 2026-09-30 14:14 |
| @invoker-bandit/dsh-history-up 一个 DSH 插件：记录每个会话里你提交过的输入，支持用 <kbd>↑</kbd> 方向键逐条回溯，也可以用 <kbd>/</kbd> 菜单挑一条填进输入框。按会话隔离的 shell 式输入历史。 | low | pass | 0/0/0 | 0/0 | 2026-09-30 14:14 |
| @better-er/dsh-mobile-drawer 「DSH·手机适配」：窄屏下把侧栏收成悬浮小方块，点会话自动收起，并压掉切会话时的自动聚焦，免得软键盘把页面顶起。纯客户端插件。 | low | pass | 0/0/3 | 0/0 | 2026-09-30 14:14 |
| @bauerelizabeth07139/tangsan TangSan mascot appearance layer for the DSH Web GUI: chat wallpaper with opacity, blur and scrim controls, an avatar brand mark, and a Settings section. | low | pass | 0/0/4 | 0/0 | 2026-09-30 14:14 |
| @he0119/dsh-tailnet-admin 把 Tailnet / 反向代理页面当作「本机」来用：启用 host 持久化设置，并按需关闭浏览器会话校验（Host/Origin 栅栏保持不动）。 | low | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @wlxyxykj/dsh-phone-remote | medium | warn | 0/1/8 | 0/0 | 2026-09-30 14:14 |
| @zcr-133/dsh-follow-edits Cline-style follow-along for DSH: open the file the agent just changed in the right Sidebar, jump to the change, and highlight the diff. | low | pass | 0/0/0 | 0/0 | 2026-09-30 14:14 |
| @liuyuhao1122/dsh-hermes-memory Lightweight layered memory plugin for DSH with automatic distillation and compaction. | low | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @Yiheng-guo/dsh-boot-animation-pro DSH 片头开机动画增强版：播放控制、触发规则、会话名单、分时段片头、片库管理、中英双语。A full-frame intro animation for DSH. Fork of NativeDog1/dsh-boot-animation. | low | pass | 0/0/1 | 0/0 | 2026-09-30 14:14 |
| @joeseesun/qiaomu-radio-dsh 乔木电台 DSH 插件 | Live radio with themed players, mood channels and local listening history | low | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @bauerelizabeth07139/MDSM MDSM (Male DeepSeek Mascot) appearance layer for the DSH Web GUI: chat wallpaper with opacity, blur and scrim controls, an avatar brand mark, and a Settings section. | low | pass | 0/0/4 | 0/0 | 2026-09-30 16:14 |
| @TBChaos/dsh-remote-desks 把本机 / WSL / 虚拟机 / SSH 远端上另一套 DSH 的 WebUI 镜像进桌面版 DSH，用同一套界面和体验管理它们。DSH 插件，MIT。 | medium | warn | 0/2/25 | 0/0 | 2026-09-30 16:14 |
| @Longxiangjunlin/dsh-endfield-theme Arknights: Endfield theme for the DSH Web GUI — charcoal + hazard-yellow industrial HUD, first-paint boot splash, conversation backdrop. | low | pass | 0/0/1 | 0/0 | 2026-09-30 16:14 |
| @anneqaq/dsh-widget DSH 插件：把模型编写的 SVG/HTML 片段渲染成对话中的内联可视化卡片（图表、流程图、时间线、对比表格），沙箱隔离、无网络、无依赖 | low | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @joeseesun/qiaomu-home-dsh 乔木 Home：让 Harness 成为一天的起点。会话搜索、今日重点、待办、记录与专注计时。 | low | pass | 0/0/7 | 0/0 | 2026-09-30 16:14 |
| @joeseesun/qiaomu-reader-dsh 乔木阅读：在 DSH 中阅读 EPUB、PDF、TXT，划线批注、导出阅读笔记与 AI 伴读。 | low | pass | 0/0/1 | 0/0 | 2026-09-30 16:14 |
| @HuanLinOTO/dsh-plugin-sidebar-terminal-tools DSH plugin: model-driven official sidebar terminals — six sidebar_terminal_* tools over ctx.terminalController; terminals auto-appear as native sidebar tabs, the user can take over anytime. / DSH 插件：模型驱动官方侧栏终端，自动出现原生终端 tab，用户可随时接管。 | low | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @SereinHK/dsh-plugin-session-delete A DSH plugin that deletes a conversation from disk — the destructive Session action DSH deliberately omits — plus bulk cleanup of empty Sessions. For DSH 0.2.x. | low | pass | 0/0/4 | 0/0 | 2026-09-30 16:14 |
| @DDDMUC/dsh-markdown-bubble Markdown rendering for DSH sent messages: the user and steering chat bubbles render headings, lists, code, tables, math and quotes through the host's own Markdown pipeline, while reference chips, attachments and the action strip stay intact. | medium | warn | 0/3/11 | 0/0 | 2026-09-30 16:14 |
| @huguangyu666/dsh-plugin-better-folders DSH 插件：更好的 DSH 文件夹 —— 自动整理工作区，把同一上级目录下的工作区汇合成可折叠的文件夹节点（复用内置「按工作区树」视图，不覆盖官方 UI）。 | medium | warn | 0/3/8 | 0/0 | 2026-09-30 16:14 |
| @wangjiezhe/dsh-jp-translate 「日语翻译」模式 | low | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @bauerelizabeth07139/nai Nai milk-frog mascot appearance layer for the DSH Web GUI: chat wallpaper with opacity, blur and scrim controls, an avatar brand mark, and a Settings section. | low | pass | 0/0/4 | 0/0 | 2026-09-30 16:14 |
| @Funny1Potato/dsh-outsourcing-expert DSH agent presets whose leader does no work itself: non-management tool calls are denied at the harness boundary and every task goes to a subagent (a second preset deliberately picks weaker models for harder tasks). | low | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @chongyi/dsh-notify DSH notify plugin | low | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @xiaoxingyuemiao/dsh-session-delete DSH 会话删除插件：会话行「…」菜单里的浅红色删除项 + 二次确认弹窗，确认后连同全部子会话移入可恢复的回收站（DSH 官方只支持归档） | medium | warn | 0/1/8 | 0/0 | 2026-09-30 16:14 |
| @mike-sl-ig/dsh-agent-bridge Data-driven agent bridge plugin for DSH: JSON recipes, cross-platform launcher, recipe wizard, self-test, registry import | medium | warn | 0/3/7 | 0/0 | 2026-09-30 16:14 |
| @skillre/dsh-plugin-pomodoro Pomodoro focus clock plugin for the DSH Web UI: ambient timer under the composer, daily rounds, local preferences | low | pass | 0/0/2 | 0/0 | 2026-09-30 16:14 |
| @TixAn9/DSHdesktop-restart-bottom 给桌面DSH写的重启插件 | medium | warn | 1/4/9 | 0/0 | 2026-09-30 16:14 |
| @praystring/dsh-send-debounce 把聊天框里连发的几条短消息合并成一轮后再唤醒模型（DSH 插件） | low | pass | 0/0/1 | 0/0 | 2026-09-30 16:14 |
| @Gty2408/dsh-session-eraser Delete a session from the DSH sidebar. A DSH plugin. | low | pass | 0/0/1 | 0/0 | 2026-09-30 16:14 |
| @AlanKhronos/dsh-dispatch-gate DSH 插件：在工具调用层强制「先委派给其他模型」——未派发的会话无法执行 pwsh/write/edit。⚠️ 本插件会拦截工具调用（这是设计目标）；含举证式放行、行为账本与一键停用开关。 | low | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @Ushio155/dsh-composer-balance 把 DeepSeek 余额常驻在 DSH 输入框工具行：接替已停更的 kte66/dsh-balance，修复密钥落盘、无来源策略与遮蔽内置 UI。 | low | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @wbb316/dsh-profile-sync profile 间插件迁移：把网页版（web）的插件集安全牵引到桌面端（desktop）—— 算差异、预检、生成退出后执行的脚本、重启后核对 | medium | warn | 1/17/17 | 0/0 | 2026-09-30 16:14 |
| @FIZMIE/dsh-restart-button One-click restart for the DSH desktop app: a sidebar button plus an agent-callable restart route. | medium | warn | 0/7/17 | 0/0 | 2026-09-30 16:14 |
| @Richardwongyk/dsh-happy-reader Happy Reader（dsh-happy-reader）—— DSH 桌面端阅读增强插件：隐藏输入框/上边栏、自由调整字号、中英分设正文字体、内容宽度扩展、一键全屏。dsh plugin / DSH plugin. | low | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @Cangjier/dsh-mail-notify | low | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @shuiqian520/dsh-session-delete DSH plugin: permanently delete a session from the sidebar menu, and retry a user message or an assistant reply. | medium | warn | 0/1/4 | 0/0 | 2026-09-30 16:14 |
| @joeseesun/qiaomu-rss-dsh 在 DSH 中阅读 RSS，与原生 AI 对话伴读文章 | RSS reading with native AI companion for DSH | low | pass | 0/0/3 | 0/0 | 2026-09-30 16:14 |
| @wangjiezhe/dsh-md-linebreak 将软换行视为硬换行 | low | pass | 0/0/0 | 0/0 | 2026-09-30 16:14 |
| @kotinder/dsh-roomcomm Roomcomm for DSH: your dsh agent talks to other AI agents in shared rooms (MCP tools + skill, zero setup) | low | pass | 0/0/0 | 0/0 | 2026-09-30 18:14 |
| @Hu9956/DSH-model-controls 切换供应商、模型与思考强度，每个模型各自记住档位。 | medium | warn | 0/2/11 | 0/0 | 2026-09-30 18:14 |
| @lctfwyt/dsh-liuyao Six-Line Divination (liuyao) for DSH — one-click casting, eight-palace najia chart, AI interpretation, chart card and case archive. 六爻起卦 · AI 解卦：一键起卦、纳甲装卦、按所问事项断卦。 | low | pass | 0/0/4 | 0/0 | 2026-09-30 18:14 |
| @HGT158/dsh-plugin-share 把你这套 DSH 插件变成一段可粘贴的分享码，别人贴进去就能逐个安装 · Turn your DSH plugin set into one pasteable code, and anyone can install the plugins one by one | low | pass | 0/0/1 | 0/0 | 2026-09-30 18:14 |
| @xlennart/dsh-auto-review-jev DSH 审批守护者：权限请求先由审查模型裁决。内置 System One 决策 API 后端（TypeSafe Jev / 硅基流动 systemone / 自部署 Laya）、onLowConfidence 低置信度策略与 allowRules 免审白名单。fork 自 gbthui/dsh-auto-review。 | low | pass | 0/0/0 | 0/0 | 2026-09-30 18:14 |
| @Adamaik/dsh-ollama-cloud-usage DSH plugin: Ollama Cloud remaining quota in Settings, with an in-page API key editor. · DSH 插件：设置页显示 Ollama Cloud 剩余额度并支持填写 API Key。 | medium | warn | 0/1/2 | 0/0 | 2026-09-30 18:14 |
| @umysy/DSH-Plugins DSH 插件集合 · Plugins for DSH | low | pass | 0/0/9 | 0/0 | 2026-09-30 18:14 |
| @SZYTree0312/dsh-opencode-free 星桥模式：OpenCode 免费模型路线的前缀稳定与载荷控制 Agent 预设（配套 dsh-opencode-xdbridge） | low | pass | 0/0/0 | 0/0 | 2026-09-30 18:14 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
46 reports2026-10-010 added0 crit0 medium2026-09-30current182 added3 crit51 medium2026-09-2969 added0 crit22 medium2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-09-30. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published