Daily security scan
Date · 2026-10-02 (UTC — plugins first indexed that day)
99
added
1
critical
47
medium
51
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| @86cloudyun-afk/dsh-gungnir GUNGNIR - DSH 红队战役指挥框架：攻击路径合成的工程化。事实库+门闸+跳板池，执行层可插拔。编排层，不含漏洞利用代码；仅限授权测试。 | low | pass | 0/0/3 | 0/0 | 2026-10-02 00:13 |
| @yuehancn/dsh-tool-comfyui Let DSH generate images: call local or LAN ComfyUI workers directly from chat (status, generate, queue). | low | pass | 0/0/2 | 0/0 | 2026-10-02 02:13 |
| @yuehancn/dsh-tool-gzh-publisher WeChat Official Account (公众号) pipeline for DSH: validate a draft against the publish gate, then push it to the draft box. | medium | warn | 0/1/1 | 0/0 | 2026-10-02 02:13 |
| @modesthub/dsh-sensenova-freeapi DSH provider plugin for SenseNova with running/blocked dual-list key pool & dual-account rotation | low | pass | 0/0/14 | 0/0 | 2026-10-02 02:13 |
| @Tommy00748/dsh-self-evolution Self-evolution for DSH: bounded self-managed memory, an automatic per-turn review that refines skills instead of duplicating them, a skill health check, cross-session recall, and a learning card that appears only when it has something to say. | medium | warn | 0/3/6 | 0/0 | 2026-10-02 02:13 |
| @duxingxiake3/dsh-plugin-market Plugin Market for DSH: discover, vet and install DSH plugins from inside DSH. | low | pass | 0/0/9 | 0/0 | 2026-10-02 02:13 |
| @LemRic1117/dsh-download-dashboard DSH 的悬浮下载看板：只列 300MB 以上的下载，跨会话、跨子代理、跨终端可见 | low | pass | 0/0/6 | 0/0 | 2026-10-02 04:13 |
| @moyu-777/dsh-notion-workspaces Bind each DSH workspace to its own Notion workspace over the official Notion MCP. | medium | warn | 0/2/10 | 0/0 | 2026-10-02 04:13 |
| @d0ublecl1ck/dsh-unarchived-watch DSH Web 插件：未归档会话超过阈值时在侧边栏亮警告图标 + 设置页按工作区分组的只读看板 · Warning light for unarchived-session backlog: sidebar badge, threshold, read-only board. | low | pass | 0/0/0 | 0/0 | 2026-10-02 04:13 |
| @scccy/dsh-enterworktree DSH 宿主插件：创建(或复用) git worktree 并自动开隔离 session，等价于 Claude Code /enterworktree。 | medium | warn | 0/1/0 | 0/0 | 2026-10-02 04:13 |
| @yuehancn/dsh-tool-ocr Extract text from images and PDFs in DSH: read a born-digital text layer, or OCR a scan with any engine you configure. | medium | warn | 0/1/0 | 0/0 | 2026-10-02 04:13 |
| @yuehancn/dsh-tool-media DSH plugin | medium | warn | 0/1/0 | 0/0 | 2026-10-02 04:13 |
| @gswenxue/dsh-egress-router On-demand egress routing plugin for DSH: import vless/vmess/trojan/ss nodes, route only blocked traffic (GitHub, pip, npm) through them, fall back automatically, never auto-delete nodes. 给 DSH 的按需网络出海插件：选择性走节点、直连失败自动回退、失效只标记不删除。 | medium | warn | 0/6/18 | 0/0 | 2026-10-02 04:13 |
| @19north/dsh-redstone-music Minecraft redstone-music toolkit for DSH: onset-aligned SoundFont sample rendering and a song-to-datapack compiler (rm_render / rm_build). | medium | warn | 1/1/3 | 0/0 | 2026-10-02 04:13 |
| @Alicex7777/dsh-theme-colors DSH Web theme plugin: per-region colors, OKLCH depth/vividness, 26 day+night schemes, 3-state text colors with a free gamut picker | medium | warn | 0/1/8 | 0/0 | 2026-10-02 04:13 |
| @121212165/dsh-plugin-quota dsh plugin: live usage meter — per-session token/turns/cost tracking injected into the system prompt, /qm panel, quota_meter card tool; also the family's universal plugin-development test template | low | pass | 0/0/0 | 0/0 | 2026-10-02 04:13 |
| @sjh9714/dsh-retry-guard Observe identical tool failures and optionally pause the next model step in DSH. | low | pass | 0/0/0 | 0/0 | 2026-10-02 04:13 |
| @QIN-SMART/dsh-sidebar-marks DSH plugin: sidebar conversation marks — row tint, colored dot, per-conversation title size | low | pass | 0/0/1 | 0/0 | 2026-10-02 04:13 |
| @LiuCrane/dsh-easy-balance DSH Web UI plugin: model provider chip beside the composer plus DeepSeek and OpenCode Go balances below it, only for providers the profile configures. | low | pass | 0/0/2 | 0/0 | 2026-10-02 04:13 |
| @Coshire90-1135/DSH-MnnChat-Provider 把手机上 MNN Chat 的端侧小模型接进 DSH 当 LLM provider —— 一个娱乐产物，工具调用基本不行,暂不支持文生图 | medium | warn | 0/2/7 | 0/0 | 2026-10-02 04:13 |
| @xubin0628/dsh-task-notifier DSH 任务通知插件：任务完成 / 需要批准 / 需要回答 / 出错时的横幅、提示音与系统通知，并在设置里提供「通知」页自由配置 | low | pass | 0/0/5 | 0/0 | 2026-10-02 04:13 |
| @codel6i/dsh-shell-switch Switch the dsh agent's command shell between PowerShell and Git Bash, from a panel in Settings or on the plugin's own row page. | medium | warn | 0/4/4 | 0/2 | 2026-10-02 04:13 |
| @archcra/dsh-plugin-project-monitor DSH 插件：事项进度看板。自管数据、零配置，红橙黄绿到期预警 + 每日摘要，无需本地 Excel。 | medium | warn | 0/5/5 | 0/0 | 2026-10-02 06:13 |
| @Charlestam218/dsh-sound-alert DSH 声音提示插件：任务完成与需要确认时播放两种不同的清脆音效（一高一低，浏览器端合成，无音频文件） | medium | warn | 0/5/18 | 0/0 | 2026-10-02 06:13 |
| @CeilCelia/dsh-travily-api Tavily web search for DSH: settings switch, credential-held API key, connection test. | medium | warn | 0/2/7 | 0/0 | 2026-10-02 06:13 |
| @QXingYShu/dsh-comfyui-image DSH plugin that drives a local ComfyUI image workflow (Z-Image-Turbo, Qwen-Image-2.1) from the agent | medium | warn | 0/4/9 | 0/0 | 2026-10-02 06:13 |
| @yuehancn/dsh-tool-invoice DSH plugin | medium | warn | 0/1/0 | 0/0 | 2026-10-02 06:13 |
| @gggtmd/dsh-wallet-hud Sidebar DeepSeek wallet balance HUD for the DSH Web UI | low | pass | 0/0/0 | 0/0 | 2026-10-02 06:13 |
| @yuehancn/dsh-tool-subtitle DSH plugin | medium | warn | 0/1/1 | 0/0 | 2026-10-02 06:13 |
| @yuanxinbin520/dsh-session-cleaner DSH session-menu plugin: thorough session deletion (including the projection-cache records DSH leaves behind) and real cross-workspace moves. | medium | warn | 0/1/2 | 0/0 | 2026-10-02 06:13 |
| @Han-1413141/dsh-codex-computer-use DSH plugin for the local Codex Computer Use runtime on Windows, with native menu integration and automatic startup. | medium | warn | 0/4/14 | 0/0 | 2026-10-02 06:13 |
| @Fnckerpoi/dsh-plugin-nexus-sdlc Nexus spec-driven development agent preset for DSH | low | pass | 0/0/0 | 0/0 | 2026-10-02 06:13 |
| @kirigayakazima/dsh-antigravity-usage 反重力（Antigravity）额度 / 用量 DSH 插件：实时额度走本地语言服务器 API，离线 token 与缓存命中从本地会话库只读解出（反重力没开也能看历史） | medium | warn | 0/2/14 | 0/0 | 2026-10-02 06:13 |
| @tuoLuoSuan/dsh-skill-center 技能中心 — 在 DSH 的 Web GUI 里浏览、体检并一键安装全世界的 Agent Skills。Skill Center for DSH: five public skill sources, pre-install validation, provenance, update checks and a trash. | medium | warn | 2/1/5 | 0/0 | 2026-10-02 06:13 |
| @KDDKBD/DeepSeek-splash-animation 给 DSH 加一段自定义开屏动画 | medium | warn | 0/1/5 | 0/0 | 2026-10-02 06:13 |
| @WTStarMark/dsh-plugin-mesh 把带 dsh 系列 GitHub 标签的仓库，画成一张可交互的生态网络图 | low | pass | 0/0/3 | 0/0 | 2026-10-02 06:13 |
| @chen112233usa/dsh-typesafe-ai-skill 把 TypeSafe / Jev（System One 判断模型）的构建技能注册进 DSH 的全局技能层，每个会话自动可用。不含任何密钥。 | Registers the TypeSafe/Jev skill into DSH's global skill layer. Ships no API key. | low | pass | 0/0/0 | 0/0 | 2026-10-02 06:13 |
| @yuhub233/dsh-effort-slider 科幻推理等级滑条 for DSH：Ultra 档 + 闪电编排模式 + 子代理 tok/s 读数 / A sci-fi reasoning-effort slider for DSH | low | pass | 0/0/12 | 0/0 | 2026-10-02 06:13 |
| @Charlestam218/dsh-github-publish DSH 插件发布器：把本地做好的插件一键推送到 GitHub 仓库（凭据 → 建仓 → 提交 → 推送 → 可选 Release） | medium | warn | 0/4/9 | 0/0 | 2026-10-02 06:13 |
| @DelayNooMore/dsh-plugin-session-trash DSH 会话回收站插件：移入回收站、恢复、永久删除，设置页管理 | medium | warn | 0/2/4 | 0/0 | 2026-10-02 06:13 |
| @ROBOHAPPYIY/dsh-zh-review-guard DSH bundle plugin: make internal reasoning user-reviewable and keep every user-facing explanation in Simplified Chinese. Injected into every session system prompt. | low | pass | 0/0/1 | 0/0 | 2026-10-02 08:13 |
| @baom1ng/dsh-local-plugin-source Turn a local folder into an in-app plugin source for DSH Desktop: list, install, enable/disable and remove local plugin bundles from Settings ? Plugins ? Local plugins. | low | pass | 0/0/2 | 0/0 | 2026-10-02 08:13 |
| @A2chitect/dsh-openviking-enhance OpenViking in the DSH web GUI: a Studio panel, a per-session memory-commit status pill with its commit timeline, and a right-sidebar tab showing what the current session retrieves. | medium | warn | 1/5/10 | 0/0 | 2026-10-02 08:13 |
| @anne43983959/dsh-audio-cue DSH 宿主插件：审批询问与一轮对话结束时播放声音提示（含两次实测事故复盘） | medium | warn | 0/1/1 | 0/0 | 2026-10-02 08:13 |
| @leexiaode4/dsh-launch-buttons Multiple named launch targets in the DSH composer: left-click starts the default target, right-click opens the list. | medium | warn | 0/2/6 | 0/0 | 2026-10-02 08:13 |
| @baom1ng/dsh-desktop-archive-manager Manage and permanently delete archived Sessions in DSH Desktop - no harness core patch required. Desktop-only DSH bundle. | low | pass | 0/0/1 | 0/0 | 2026-10-02 08:13 |
| @d0ublecl1ck/dsh-hide-empty-workspace DSH Web 插件：最后一个未归档会话被归档的瞬间自动隐藏该工作区行，并在工作区行自带的「…」菜单里追加「隐藏工作区」，另配侧栏底部恢复入口；不归档、不删除、不改写任何工作区注册与会话数据。Auto-hide a sidebar workspace the moment its last unarchived session is archived — display only, no data writes. | medium | warn | 0/2/11 | 0/0 | 2026-10-02 08:13 |
| @yuehancn/dsh-tool-epub DSH plugin | medium | warn | 0/1/0 | 0/0 | 2026-10-02 08:13 |
| @Zilong6666/dsh-task-workspace DSH task workspace convention: one folder per task, one PROGRESS.md per task (overwritten each update), and per-task git once a task runs long. | medium | warn | 0/1/5 | 0/0 | 2026-10-02 08:13 |
| @DucLong06/dsh-vietnam Vietnamese UI language, Vietnamese palettes and a rotating Vietnam-landscape backdrop for DSH · Tiếng Việt, bảng màu Việt và hình nền phong cảnh Việt Nam cho dsh | low | pass | 0/0/0 | 0/0 | 2026-10-02 08:13 |
| @GreatArrow-ai/dsh-greatarrow GreatArrow.ai workspace memory for DSH: connects dsh to the GreatArrow.ai MCP server, so the agent can search and save memories, tasks and decisions that carry across sessions and other AI clients. | low | pass | 0/0/0 | 0/0 | 2026-10-02 08:13 |
| @KLAX54ix/dsh-explain-selection DSH 插件：选中回答里的文本就地解释，解释不进入主对话上下文；卡片内可继续选中追问，支持拖拽、指向线与三级嵌套。 | low | pass | 0/0/1 | 0/0 | 2026-10-02 08:13 |
| @qgynisc/dsh-inline-pastes DSH Web GUI 插件：粘贴图片即在文字中插入 image-1.png 内联胶囊，悬浮名字预览缩略图，自动编号（文字中插图 / hover 预览） | medium | warn | 0/2/11 | 0/0 | 2026-10-02 08:13 |
| @yuehancn/dsh-tool-podcast DSH plugin | medium | warn | 0/1/0 | 0/0 | 2026-10-02 08:13 |
| @yuehancn/dsh-tool-qrcode DSH plugin | medium | warn | 0/1/0 | 0/0 | 2026-10-02 08:13 |
| @mmd134312/dsh-cost-manager | medium | warn | 0/1/2 | 0/0 | 2026-10-02 08:13 |
| @ashareapi/ashareapi-dsh-plugin A股数据 API 官方 DSH 插件 —— 桌面端 / Web UI 输个包名即装，24 个 A股工具（行情 / K线 / 财务 / 资金 / 龙虎榜 / 板块 / 因子选股），免费工具无需 Key｜Official DSH plugin for the A-Share Data API — install by name from the desktop app or Web UI; 24 China A-share tools (quotes, K-lines, financials, money flow, dragon-tiger lists, sectors, screening), free tools need no key | low | pass | 0/0/1 | 0/0 | 2026-10-02 08:13 |
| @kkwings/dsh-super-memory | low | pass | 0/0/7 | 0/0 | 2026-10-02 08:13 |
| @GRUST303/dsh-loop-guard DSH 插件：检测并打断 agent 循环中的纯文本重复退化（generation degeneration）。7917 条真实消息实测，误报率 0.03%。DSH plugin that detects and breaks pure-text degeneration loops in agent output. | medium | warn | 1/0/3 | 0/0 | 2026-10-02 08:13 |
| @CharlesLiuZC/dsh-voice-context Voice-to-text plugin for DSH (desktop & web): composer mic button with cloud (SiliconFlow) or local offline (FunASR / faster-whisper) transcription. | medium | warn | 0/8/17 | 0/0 | 2026-10-02 08:13 |
| @liceses/dsh-cosplay DSH 角色扮演插件：角色卡（系统提示词注入 + 用户提示词改写）、可分享的单文件卡包、复刻原版 UI 的角色页签与首轮选角 chip | low | pass | 0/0/2 | 0/0 | 2026-10-02 08:13 |
| @Very12345/dsh-ssh-workspace Remote SSH workspaces for DSH with SSH config discovery and project selection | medium | warn | 0/4/1 | 0/0 | 2026-10-02 10:14 |
| @DC-507/dsh-zoom Global UI zoom for the DSH web client: Cmd/Ctrl +/-, 0 — scales the whole interface, not just conversation text. | low | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @taoyiii112-creator/dsh-deepseek-balance DSH API balance plugin with Wallpaper Engine backgrounds and an in-page mascot | low | pass | 0/0/16 | 0/0 | 2026-10-02 10:14 |
| @zjhaaa042-cloud/dsh-mobile-notify DSH 插件：任务完成后把通知推送到手机 —— ntfy / Bark / 钉钉 / 企业微信 / 飞书 / Server酱 / PushPlus / Telegram / Qmsg酱 / 通用 webhook | low | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @FANLS05/dsh-desktop-notifications Windows toast notifications for DSH: approvals, questions, run completion, errors and sign-in prompts - every toast led by the conversation name. | medium | warn | 0/1/3 | 0/0 | 2026-10-02 10:14 |
| @deadbushxw/dsh-plugin-query-enhance DSH 插件：精简 profile 中插件管理列表的回传信息，每项只回一行摘要，并新增支持参数输入的条件查询工具 | DSH plugin: keep plugin manager list actions from returning the whole table by answering with one summary line per record, and add a parameterized query tool for filter-based lookups | low | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @yuehancn/dsh-tool-browser DSH plugin | low | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @yuehancn/dsh-tool-mining DSH plugin | low | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @XIMOYA/dsh-danger-reflection Danger Reflection (危险反思) — a DSH permission preset where the conversation's own model reviews each sandbox-escalation request instead of asking you. | low | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @yuehancn/dsh-tool-notion DSH plugin | low | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @nijika-boyfriend/dsh-macos-notify macOS system notification plugin for DSH on task completion | low | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @QIN-SMART/dsh-quote-to-chat Select text in a DSH reply: a floating toolbar that quotes it into the composer draft or opens a side chat about it. | low | pass | 0/0/2 | 0/0 | 2026-10-02 10:14 |
| @hmtxj/dsh-model-modality Per-model input type (text/image) and thinking level checkboxes on the DSH Models settings page, writing the official llm-pi-ai input and reasoningEfforts fields. | low | pass | 0/0/5 | 0/0 | 2026-10-02 10:14 |
| @Big-Dao/dsh-plugin-wsl-env Run a DSH session against a WSL distro: ctx.shell, ctx.fs and the GUI terminal served from inside the distro, sandboxed with bubblewrap | medium | warn | 0/1/4 | 0/0 | 2026-10-02 10:14 |
| @Wenaixi/dsh-plugin-dev The authoritative standard and developer skill for DSH (DSH 0.2.0-rc.2) & Cordis plugin development. | critical | fail | 1/0/3 | 0/0 | 2026-10-02 10:14 |
| @wjj-8283/dsh-web-fetch-fakeip-plugin | low | pass | 0/0/5 | 0/0 | 2026-10-02 10:14 |
| @Yangi-252410/dsh-import-repositories | low | pass | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @jipika/dsh-jev-grep Search-flood adjudication plugin for DSH: ripgrep + TypeSafe Jev typed judgments (noul/choice) so the agent reads ~30 calibrated rows instead of hundreds. Configurable provider (OpenCode Zen free tier / TypeSafe / OpenRouter), degrades to raw grep when offline. Zero deps, cross-platform. | low | pending | 0/0/0 | 0/0 | 2026-10-02 10:14 |
| @meowyuho/dsh-usage-balance | low | pass | 0/0/3 | 0/0 | 2026-10-02 10:14 |
| @GuaiWuA/dsh-skill-bar 让 DSH 的 skill 变成可浏览的技能栏：搜索、收藏、点一下或拖一下写进输入框。/A browsable skill bar for DSH: search, favorite, and click or drag to insert into the input box. | medium | warn | 0/5/19 | 0/0 | 2026-10-02 12:14 |
| @zywnb-2/dsh-donevoice dsh桌面任务提醒，根据codex等agent相同逻辑构建而成，点击桌面提醒可快速回到dsh页面。可自定义上传的音效（自带16个通知音效） | medium | warn | 0/6/21 | 0/0 | 2026-10-02 12:14 |
| @QIN-SMART/dsh-session-md DSH plugin: export a session as human-readable Markdown or a self-contained HTML page — full / handoff / readable / audit presets, one-click download | low | pass | 0/0/0 | 0/0 | 2026-10-02 12:14 |
| @nijika-boyfriend/dsh-notify-macos macOS system notification plugin for DSH on task completion | low | pass | 0/0/2 | 0/0 | 2026-10-02 12:14 |
| @Nay-1/dsh-session-share DSH 侧栏会话行菜单里的「分享会话」：预览后复制 Markdown、导出 .md（同名文件夹 + 图片）或单文件 HTML | medium | warn | 0/1/7 | 0/0 | 2026-10-02 12:14 |
| @tttwh/dsh-feishu-doc-saver | medium | warn | 0/8/4 | 0/3 | 2026-10-02 12:14 |
| @ikun666666/dsh-groupchat DSH 插件：每个工程一个群聊 —— 多个 AI 会话与人同群互聊、@ 唤醒离线会话、@创建成员 拉新会话进群 | low | pass | 0/0/5 | 0/0 | 2026-10-02 12:14 |
| @hemppp/dsh-panel-dock-plugin Photoshop-style floating dockable panels for the DSH Web UI - draggable, resizable, collapsible panels with persisted layout. | low | pass | 0/0/8 | 0/0 | 2026-10-02 12:14 |
| @zywnb-2/dsh-prompt-studio 提示词优化工坊 —— DSH 插件的多风格一键优化与发送前自动优化 | medium | warn | 0/1/18 | 0/0 | 2026-10-02 12:14 |
| @LapStdy/dsh-dingtalk-notify DSH钉钉群通知插件：AI 需要你选择/审批、或一轮任务完成时推送到钉钉群，自带设置面板 | low | pass | 0/0/8 | 0/0 | 2026-10-02 12:14 |
| @CloudWoR/dsh-bilibili dsh-web嵌入B站视频插件，可登录，但建议使用小号。 | medium | warn | 0/3/7 | 0/0 | 2026-10-02 12:14 |
| @yuehancn/dsh-tool-archive DSH plugin | low | pass | 0/0/0 | 0/0 | 2026-10-02 12:14 |
| @133563825as-ai/dsh-localdream DSH 插件：将手机端 Local Dream 的本地 NPU 生图接入对话，含文生图、图生图、四倍放大与分块重绘。 | medium | warn | 0/2/3 | 0/0 | 2026-10-02 12:14 |
| @Sky-lll27/DSH-chat-keeper DSH 对话管家：跨工作区对话总表 · 正文搜索（中文子串 / 未打开的旧对话也能搜 / 定位到命中那句并读出上下文）· 按时间批量归档 · 回收站式删除（可恢复、分批、不删除正在运行的对话） | low | pass | 0/0/5 | 0/0 | 2026-10-02 12:14 |
| @OkliaoliO/dsh-token-counter A DSH plugin that shows the account balance and, after every conversation turn, that turn's token usage and what it cost. Written by DeepSeek-V4.1-Flash at maximum reasoning effort (max). 一个 DSH插件：显示账户余额，并在每轮对话结束后显示该轮的 Token 消耗量与本次花费。本插件由 DeepSeek-V4.1-Flash 在最高推理强度（max）下编写。 | low | pass | 0/0/2 | 0/0 | 2026-10-02 12:14 |
| @ybh1291747665/dsh-peer-bus Cross-session message bus for DSH: let independent sessions address and wake each other. | low | pass | 0/0/13 | 0/0 | 2026-10-02 12:14 |
| @yinhong-zhou/jevdo Just Jev it. A Jev-first agent loop with reusable actions for DSH. | low | pass | 0/0/10 | 0/0 | 2026-10-02 12:14 |
| @wojiao42/dsh-memory-file DSH ????????????????? Markdown ?????????????????????????????? ? File-backed memory for DSH with verifiable constraints | low | pass | 0/0/4 | 0/0 | 2026-10-02 12:14 |
| @liwei9745/dsh-genbox-plugin DSH tools for GenBox: image generation/editing and video generation through a local GenBox server. | medium | warn | 0/13/21 | 0/0 | 2026-10-02 12:14 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
47 reports2026-10-02current99 added1 crit47 medium2026-10-010 added0 crit0 medium2026-09-30182 added3 crit51 medium2026-09-2969 added0 crit22 medium2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-10-02. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published