Daily security scan
Date · 2026-10-03 (UTC — plugins first indexed that day)
88
added
0
critical
36
medium
52
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| @mvalentsev/dsh-wsl-projects One DSH web server per project, inside WSL2 — started, stopped and opened from a panel in the Windows app. | medium | warn | 0/5/7 | 0/0 | 2026-10-03 00:13 |
| @YizhouLouisLu/dsh-math-copy Copy rendered math in the DSH Web UI as its LaTeX source instead of KaTeX's glyph text. | low | pass | 0/0/1 | 0/0 | 2026-10-03 00:13 |
| @DevTarlow/dsh-chrome-devtools Give your DSH Agent a real Chrome browser to drive and inspect. | low | pass | 0/0/3 | 0/0 | 2026-10-03 02:13 |
| @447662/dsh-native-codex-cli Drive Codex from DSH: DSH owns the chat UI, Codex CLI owns task execution and native thread history - no second AI in the loop. | medium | warn | 0/1/8 | 0/0 | 2026-10-03 02:13 |
| @bjzkhy/dsh-multiplatform-balance DSH skill plugin for multi-platform model account balances. | low | pass | 0/0/2 | 0/0 | 2026-10-03 02:13 |
| @louisyeaaah/dsh-doctor Read-only diagnostics for DSH: why a plugin row is not running, why a skill is invisible, whether patch rows conflict, and why an edited plugin did not take effect — plus a redacted card you can paste into an issue. | low | pass | 0/0/0 | 0/0 | 2026-10-03 04:13 |
| @EarthPretender/dsh-session-delete DSH 插件：在会话“…”菜单的“归档会话”下方新增红色“删除会话”行，二次确认后真正删除该会话的日志与工作区登记（不可逆；当次启动使用过的会话先停用再删，正在执行任务的会话再点一次停止任务并删除）。 | low | pass | 0/0/3 | 0/0 | 2026-10-03 04:13 |
| @Jaylor-Wang/dsh-tool-headroom Intelligent output compression, log denoising, syntax-preserving JSON compaction, and CCR cache plugin for DSH | low | pass | 0/0/0 | 0/0 | 2026-10-03 04:13 |
| @rocketstar666/dsh-approval-comment fork and fix from MaYiFei1995/dsh-approval-comment | low | pass | 0/0/0 | 0/0 | 2026-10-03 04:13 |
| @AusertDream/TravelPlanner 旅行规划师：DSH 的中文旅行规划 agent，实时查 12306 / 飞猪 / 途牛 / 高德，交付单文件 HTML 路书 | medium | warn | 0/11/35 | 0/0 | 2026-10-03 04:13 |
| @Cyrene-xl/dsh-cyrene-chat DSH 插件：增加「纯文本对话模式」agent 预设——整份替换系统提示词进行纯角色对话，只保留联网搜索与表情包。随包人设文本整理自开源项目 Cyrene-Agent（MIT）。 | low | pass | 0/0/1 | 0/0 | 2026-10-03 04:13 |
| @ch1bug/dsh-shell-remote Remote one-shot shell execution (thin ssh transport) - the remote world per ADR-0004 | medium | warn | 0/1/0 | 0/0 | 2026-10-03 04:13 |
| @0mao0/dsh-inline-figures DSH 插件：让模型把矢量图穿插在回答段落之间，回答变成「文字-图-文字」 · DSH plugin: inline vector figures between the paragraphs of a reply | low | pass | 0/0/0 | 0/0 | 2026-10-03 06:13 |
| @artorias-zj/dsh-cc-switch-skills DSH plugin: load every skill from the current user's .cc-switch\skills into DSH at startup | low | pass | 0/0/1 | 0/0 | 2026-10-03 06:13 |
| @herenfor/dsh-task-notify DSH 任务完成通知插件，支持浏览器通知和 Windows 通知保底。 | medium | warn | 0/1/4 | 0/0 | 2026-10-03 06:13 |
| @lzyyzznl/dsh-prompt-tuner Composer prompt tuner for the DSH Web GUI: rewrites the input draft through a model you choose, with a review card, SSE streaming, and a settings page for model / reasoning effort / style / optimization prompt. | medium | warn | 0/2/11 | 0/0 | 2026-10-03 06:13 |
| @lxchapu/dsh-session-purge DSH插件：把会话从磁盘上彻底删除。任意会话的「…」菜单里可删单条，侧边栏切到「仅显示已归档」时可一键删除全部已归档会话；两者都先弹二次确认，正在运行的会话会被拒绝删除。 | low | pass | 0/0/3 | 0/0 | 2026-10-03 06:13 |
| @gxpppp/dsh-boot-anim DSH 桌面版启动动画（SteamOS 风格七段分镜）+ UI 由外向内分层入场过渡。宿主侧插件，经 webserver/index-inject 注入，零依赖、零源码改动。 | medium | warn | 0/8/9 | 0/0 | 2026-10-03 06:13 |
| @wwwyxsuper/dsh-session-purge DSH 插件：在侧栏「已归档」会话的 ⋯ 菜单里彻底删除会话（日志 + 投影缓存 + 工作区登记；二次确认；五道安全闸门）。DSH plugin: permanently delete a session straight from the archived list. | low | pass | 0/0/4 | 0/0 | 2026-10-03 06:13 |
| @kaine380/dsh-mcp-unified-panel 能力库 (Unified MCP & Skill Hub): All-in-One MCP & Skill manager for DSH with feature-based row recognition and built-in OAuth 2.1 client driver. | medium | warn | 2/1/6 | 0/0 | 2026-10-03 06:13 |
| @edwardzhou21/dsh-reasoning-slider DSH 插件 · 仿 Codex 的推理等级滑条，内嵌在模型选择器里 | Codex-style reasoning-effort slider embedded in the DSH model selector | low | pass | 0/0/0 | 0/0 | 2026-10-03 06:13 |
| @YuMo-233/dsh-subagent-model-switch DSH ??:???/?????????????--??????????,????? turn ????? | low | pass | 0/0/2 | 0/0 | 2026-10-03 06:13 |
| @louisyeaaah/dsh-receipt Turn one DSH session into a shareable receipt: duration, turns, tool calls, files touched, tokens. Read-only, redacted by default, zero dependencies. | medium | warn | 0/3/1 | 0/0 | 2026-10-03 06:13 |
| @Dalizi2026/dsh-factory-provider 把 Factory (Droid) 订阅额度接入 DSH 的原生 LLM provider 插件 · Factory (Droid) subscription quota as native DSH providers | medium | warn | 0/5/8 | 0/0 | 2026-10-03 06:13 |
| @Iris0fTheValley/Thaliris-dsh Thaliris plugin for DSH using native agents, subagents, Settings and shared Web/Desktop client extensions. | low | pass | 0/0/0 | 0/0 | 2026-10-03 06:13 |
| @moon-partner/dsh-anime25d-pets-v2 DSH0.2.0compatible anime 2.5D desktop pet | low | pass | 0/0/0 | 0/0 | 2026-10-03 06:13 |
| @qiweiii/dsh-brand-studio Customize in-app branding in DSH Web, PWA, and Desktop. | low | pass | 0/0/1 | 0/0 | 2026-10-03 06:13 |
| @lsmax-72/dsh-rsi 面向个人用户、安装在 dsh 中的 Chat Memory＋Skill 自动演化插件 | medium | warn | 0/1/2 | 0/0 | 2026-10-03 06:13 |
| @wbb316/dsh-comfyui-image DSH的本地 ComfyUI 图片生成插件：一个 generate_image 工具覆盖文生图 / 图生图 / 局部重绘 / 去背景，参数有智能默认值、报错可照做；零第三方运行时依赖，附 doctor 自检与 88 项测试（自带 mock ComfyUI，无需真装）。Local ComfyUI image plugin for DSH — one generate_image tool with text2img / img2img / inpaint / remove-background modes. | medium | warn | 0/2/14 | 0/0 | 2026-10-03 08:13 |
| @winniesi/dsh-hide-sidebar Mobile left sidebar for the DSH Web GUI: the 56px collapsed rail becomes a top toggle button that slides the sidebar in over the content. | low | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @panando/dsh-pua DSH PUA 修订版（基于 @michengai/dsh-pua v0.3.22）：解除上游全局总闸，让「入口常显」与「功能默认关闭」共存——输入栏菜单一键开关 PUA，界面紧凑化。 | low | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @AK-blank/dsh-plugin-offpeak-badge Unofficial DSH Web GUI plugin: shows whether the DeepSeek API is billing at the off-peak or peak rate right now — bilingual 空闲/高峰 · Idle/Peak, Chinese holiday calendar built in. | low | pass | 0/0/1 | 0/0 | 2026-10-03 08:13 |
| @d0ublecl1ck/dsh-search-enhance Search inside the DSH New-Session workspace picker: pinyin initials, full pinyin spelling and substring matching. / 在「新建会话」的工作区下拉里直接搜索，支持拼音首字母、全拼与任意位置子串匹配。 | medium | warn | 0/1/6 | 0/0 | 2026-10-03 08:13 |
| @chinahhy/DSH-plugins Hoya自用DeepSeek-Harness插件仓库 | low | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @MYX-0211/dsh-sidebar-image-zoom Pointer-anchored wheel zoom and drag-to-pan for images in the DSH right sidebar. Replaces the built-in image viewport. | low | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @copylee711/dsh-remote-control | low | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @dajie2014/dsh-dictation-turbo 双击 Control 键 = 点一下 DSH 输入框下方的语音输入麦克风（开始 / 停止听写） | medium | warn | 0/1/4 | 0/0 | 2026-10-03 08:13 |
| @jizenghui81/dsh-huashu-pixel Warm pixel theme for the DSH Web UI: cream-paper and arcade-phosphor palettes, pixel chrome with bundled pixel fonts, CRT motion on streaming and state changes, three intensity tiers, and a pixel loading bar while a turn runs. | low | pass | 0/0/3 | 0/0 | 2026-10-03 08:13 |
| @ouransishen/dsh-identity DSH agent 自身身份（did:web + X.509）的器官化出入口 | low | pass | 0/0/3 | 0/0 | 2026-10-03 08:13 |
| @yue-xiaxing/dsh-chang-kaishen-mode 常凯申模式：纯娱乐向的 DSH 人物饰演开关。开关位于「设置 → 通用」；本插件的代码与发布流程全部由 AI 完成。 | low | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @A42Null/dsh-opencode-zen-plugin OpenCode Console (Zen) models for DSH: paste your Console API key and the Console's chat models become selectable in DSH. | low | pass | 0/0/5 | 0/0 | 2026-10-03 08:13 |
| @hy-sde/dsh-graph Agent Graph for DSH (durable supervisor): control plane, operator executor, stream layer, projection, wakes, host assembly and supervisor tools — the dsh-graph-* / dsh-tool-graph packages. | low | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @Palpitate1388/dsh-market-sidebar | low | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @hy-sde/dsh-session-intelligence The session_health tool for DSH: per-session health intelligence (outcome classification, tool-health signals, prompt-quality heuristics, context pressure). | low | pass | 0/0/1 | 0/0 | 2026-10-03 08:13 |
| @gba-mep/docx-toc | low | pass | 0/0/0 | 0/0 | 2026-10-03 08:13 |
| @daoyu1993-lab/dsh-plugin-type-to-compose DSH plugin: type or paste anywhere in the window and it lands in the current conversation's composer — no click needed. | medium | warn | 0/2/9 | 0/0 | 2026-10-03 08:13 |
| @piecuzwhynot/dsh-external-workers Give your DSH agent three more pairs of hands. It sends long tasks to Claude Code, Codex and Antigravity using your own subscription logins, keeps one persistent session per lane, and never loses a job. 给 DSH 用的外部 agent 泳道：把长任务派给 Claude Code、Codex、Antigravity 三个 CLI，用你自己已有的订阅登录。每条泳道一个持久会话，作业重启和压缩都不会丢。 | medium | warn | 0/4/19 | 0/0 | 2026-10-03 08:13 |
| @xieani090612/dsh-remote-panel DSH插件：探测本机 WSL 发行版与远程 SSH 机器 注：主要部分均为ai编写 | medium | warn | 0/5/7 | 0/0 | 2026-10-03 08:13 |
| @qianai05233/dsh-codex-panel Floating control panel for DSH: one-tap approval for git & GitHub write tools | medium | warn | 0/2/3 | 0/0 | 2026-10-03 10:14 |
| @baldovinmarques391-design/dsh-computer-control DSH bundle: Windows desktop operation as discrete tool calls, each returning the frames captured around the call. | medium | warn | 0/7/12 | 0/0 | 2026-10-03 10:14 |
| @karahanart/dsh-client-locale-tr | low | pass | 0/0/12 | 0/0 | 2026-10-03 10:14 |
| @asdukw/dsh-plugin-chat-tools Chat-page context tracking tools for DSH: collect and incrementally read on-screen chat messages over a local HTTP bridge | low | pass | 0/0/3 | 0/0 | 2026-10-03 10:14 |
| @asdukw/dsh-plugin-android-tools Android device automation tools for DSH: read screen, tap, type, back, launch app, swipe over a local HTTP bridge | low | pass | 0/0/3 | 0/0 | 2026-10-03 10:14 |
| @qianai05233/dsh-freeapi-panel Free-API aggregator panel for DSH: 29 legit free LLM providers with automatic failover | medium | warn | 0/1/5 | 0/0 | 2026-10-03 10:14 |
| @nikitafedorov008/dsh-flutter-tools Flutter panel for the DSH sidebar: devices, launch, VM Service controls, debug toggles, embedded DevTools, memory and profiling | medium | warn | 0/6/8 | 0/0 | 2026-10-03 10:14 |
| @Inceptzws/dsh-project-guard DSH permission guard: work inside the workspace is never interrupted; only the extra permission a call asks for is judged — machine-safe actions pass, system changes ask with a consequence analysis, destructive ones are refused. | low | pass | 0/0/0 | 0/0 | 2026-10-03 10:14 |
| @qianai05233/dsh-codex-preset Codex-mode agent preset for DSH: explore → plan → implement → verify → integrate | low | pass | 0/0/0 | 0/0 | 2026-10-03 10:14 |
| @N3kOk0/dsh-acrylic DSH Windows 10 Theme | medium | warn | 0/5/20 | 0/0 | 2026-10-03 10:14 |
| @Hwayn-pixel/dsh-touchstone 璇曢噾鐭?路 dsh-touchstone: the missing evaluation half of DSH's self-evolution 鈥?same golden cases, run the current config vs a candidate prompt change, score with rule checks + an LLM judge, keep it only if it got better. | low | pass | 0/0/8 | 0/0 | 2026-10-03 10:14 |
| @AK-blank/dsh-plugin-mac-notify Unofficial DSH plugin: macOS Notification Center alerts when a session finishes or needs you — the banner carries the last reply, plays your system alert sound, and clicking it jumps back to the DSH page. | medium | warn | 1/2/5 | 0/0 | 2026-10-03 10:14 |
| @kvashninsasha-gif/dsh-locale-ru Русский язык для DSH: 2615 строк интерфейса в 58 namespace — штатный DSH-плагин, добавляющий Русский рядом с 中文 и English | low | pass | 0/0/7 | 0/0 | 2026-10-03 10:14 |
| @d0ublecl1ck/dsh-csdn-theme CSDN 博文的配色与正文排版主题插件，用于 DSH Web GUI · CSDN-blog typography theme for the DSH web GUI. | low | pass | 0/0/0 | 0/0 | 2026-10-03 10:14 |
| @Hwayn-pixel/dsh-clipbook 灏忓す瀛?路 dsh-clipbook: a clipbook for DSH conversations 鈥?one click on any assistant reply to keep it; a header panel to browse, search, copy, delete and export your clips. | low | pass | 0/0/12 | 0/0 | 2026-10-03 10:14 |
| @metaone01/dsh-better-float Live DOM floating panels and screenshot overview for DSH Desktop | medium | warn | 0/3/10 | 0/0 | 2026-10-03 10:14 |
| @lovezi0/dsh-open-in-androidstudio dsh第三方插件：向会话（Session）头部工具栏的 **"Open In..."** 按钮组注册 **Android Studio** 目标，一键用本机 Android Studio打开当前会话的 workspace 目录。 | medium | warn | 0/2/10 | 0/0 | 2026-10-03 10:14 |
| @lpeixin/dsh-project-compass An AI-powered DSH plugin for codebase analysis, developer onboarding, and project-level Q&A. 项目罗盘 / Project Compass — DSH 插件，通过 AST、依赖图、RAG 和 LLM 分析代码库，自动生成架构、模块、调用链与上手指南，并提供项目级 AI Q&A，帮助开发者快速理解和接手项目。 | low | pass | 0/0/0 | 0/0 | 2026-10-03 10:14 |
| @huguangyu666/dsh-plugin-ai-super-search DSH 插件：超级搜索 toolkit——集成 TinyFish 结构化检索、AnySearch REST、Bing 免 Key 爬取、Jina 与 DuckDuckGo，接管 DSH 原生 web_search，零 Token 消耗。 | low | pass | 0/0/5 | 0/0 | 2026-10-03 10:14 |
| @Isle-ux/dsh-archive-keeper-plugin 归档守护：DSH 会话归档后自动提炼要点，由你自己决定每条归档的去留（保留原文 / 只留摘要 / 彻底删除，删除可恢复）。 | medium | warn | 0/11/9 | 0/0 | 2026-10-03 10:14 |
| @pokerface-1224/deepseek-whale-girl-pet DSH 鲸鱼娘桌宠插件：透明 Windows 桌宠、五种动作立绘与互动菜单 | medium | warn | 0/2/7 | 0/0 | 2026-10-03 10:14 |
| @daoyu1993-lab/dsh-plugin-composer-align Pin the New Session composer to the exact place the conversation composer occupies, so the input box stops jumping after the first message. | low | pass | 0/0/5 | 0/0 | 2026-10-03 12:14 |
| @lpf0404/dsh-compat-market | low | pass | 0/0/9 | 0/0 | 2026-10-03 12:14 |
| @daoyu1993-lab/dsh-plugin-sidebar-polish Polish the DSH left sidebar: drop the brand row, redraw New Session as a panel row, unify row heights, tune the fill, pin the collapse toggle, add a settings entry, mark idle sessions. | low | pass | 0/0/11 | 0/0 | 2026-10-03 12:14 |
| @littlefish04/dsh-turn-price DSH plugin: shows the CNY cost of every completed turn under the turn | low | pass | 0/0/2 | 0/0 | 2026-10-03 12:14 |
| @kyan001/dsh-jev-thinking Ask TypeSafe's Jev how deep a prompt needs to think. Apply that level to the model request. | low | pass | 0/0/2 | 0/0 | 2026-10-03 12:14 |
| @ADkun/dsh-convergence-notice DSH plugin: append one convergence line to every user message and inject it every N steps — both switchable, adjustable from the Settings page · 每条用户消息末尾追加一句收敛提示，并每 N 步注入一次，两项均可在设置页开关 | medium | warn | 0/1/5 | 0/0 | 2026-10-03 12:14 |
| @15372010668-dot/dsh-bluewhale-pet 一只陪你处理 DSH 任务的蓝鲸桌宠（dsh-bluewhale-pet）。In-page blue whale companion for DSH. | medium | warn | 0/2/9 | 0/0 | 2026-10-03 12:14 |
| @guzhou079-arch/dsh-plugin-android-vscreen DSH plugin — let an agent drive an Android phone on a virtual display, so your own screen stays untouched. · 让 AI 在安卓手机的「虚拟屏」上干活，手机照常用。 | medium | warn | 0/8/14 | 0/0 | 2026-10-03 12:14 |
| @HaiYu-22/dsh-session-purge Deep delete for DSH sessions: remove a session's log, projection cache, and archive entry from disk instead of only hiding it | medium | warn | 0/1/5 | 0/0 | 2026-10-03 12:14 |
| @Yokhong/dsh_academic_web_proxy | medium | warn | 0/1/2 | 0/0 | 2026-10-03 12:14 |
| @InInNHD/dsh-recheck Unofficial DSH plugin: bind conclusions to evidence files and revisit them when files change. 原生侧栏与结论复核历史。 | low | pass | 0/0/1 | 0/0 | 2026-10-03 12:14 |
| @2DogsLee/dsh-watcher DSH 插件 API 面自动比对引擎：升级前一条命令看清插件依赖的 API/配置字段变了没有 · Auto diff engine for DSH plugin-breaking changes, with CI watch & agent skill | low | pass | 0/0/0 | 0/0 | 2026-10-03 12:14 |
| @beibeihk/dsh-agent-observability Community plugin for event-grounded, privacy-first agent observability and reliability analysis in DSH. | medium | warn | 0/1/5 | 0/0 | 2026-10-03 12:14 |
| @Mark54s/dsh-regen | low | pass | 0/0/1 | 0/0 | 2026-10-03 12:14 |
| @PPsz-qqq/dsh-restart-button DSH plugin: one-click restart button in the top-right of the session header (Windows desktop + dsh web). 一键重启 DSH 客户端。 | medium | warn | 0/3/13 | 0/0 | 2026-10-03 12:14 |
| @zudazhuang/dsh-update DSH update plugin: official release checks, scheduled updates and supervised rollback | medium | warn | 0/4/12 | 0/0 | 2026-10-03 12:14 |
| @yang208691-source/dsh-nutstore-backup en: 'Backs up DSH sessions, plugin config and workspace memory to Nutstore (Jianguoyun) over WebDAV, with incremental upload, connection test and one-click restore on a new machine.' zh: '把 DSH 的会话记录、插件配置与工作区记忆通过 WebDAV 增量备份到坚果云，支持连接测试与在新机器上一键恢复。' | medium | warn | 0/7/21 | 0/0 | 2026-10-03 12:14 |
| @hiocobueno653-pixel/dsh-ui-polish DSH UI 打磨层：毛玻璃浮层修复 + 推理强度滑杆 + 模型选择导航增强（浏览器侧注入插件） | low | pass | 0/0/0 | 0/0 | 2026-10-03 12:14 |
| @3likofj/dsh-custom-reasoning DSH 第三方模型推理强度选择 | low | pass | 0/0/2 | 0/0 | 2026-10-03 12:14 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
48 reports2026-10-03current88 added0 crit36 medium2026-10-0299 added1 crit47 medium2026-10-010 added0 crit0 medium2026-09-30182 added3 crit51 medium2026-09-2969 added0 crit22 medium2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-10-03. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published