Daily security scan
Date · 2026-10-08 (UTC — plugins first indexed that day)
100
added
0
critical
39
medium
61
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| @Travizm/dsh-openai-live Full-duplex voice for DSH: a realtime capability seam, a GPT-Live-1 adapter, and a keyless replay backend. | low | pass | 0/0/0 | 0/0 | 2026-10-08 00:13 |
| @raymondkm2025/dsh-go-game Go (圍棋) plugin for the DSH: full rules engine, three-level AI, dead-stone estimator, LLM review, SGF, and an optional KataGo GTP bridge | medium | warn | 0/2/12 | 0/0 | 2026-10-08 02:13 |
| @ImHaoYuan/dsh-mobile-mirror DSH 插件：一键搭建局域网服务器，手机浏览器直连，也可下载调试版 App | medium | warn | 0/3/19 | 0/0 | 2026-10-08 02:13 |
| @Chi-hong22/dsh-plan-spend Plan Spend：DSH Web GUI 弹窗插件，展示已配置服务商的套餐花销（DeepSeek 官方余额 / OpenCode Go 5h·7d·月配额） | low | pass | 0/0/9 | 0/0 | 2026-10-08 02:13 |
| @HaoyanZhang123/dsh-plugin-control-your-development 把 AI 开发的进展变成人人看得懂、能拍板的产品仪表盘（DSH skill + 右侧栏面板）｜Turn AI-assisted development into a product dashboard anyone can read and control (a DSH skill + optional right-sidebar panel) | low | pass | 0/0/5 | 0/0 | 2026-10-08 02:13 |
| @gh-gongjin/dsh-plugin-gh-trending dsh 插件：GitHub 日/周/月热榜监控 + 仓库详情中文描述与 README 节译（全程只读 GET） | medium | warn | 0/2/4 | 0/0 | 2026-10-08 02:13 |
| @Chi-hong22/dsh-session-autoname 根会话首轮结束后按 MMDD｜类型｜主题 自动命名，并支持按全文内容按需命名指定会话 | low | pass | 0/0/0 | 0/0 | 2026-10-08 02:13 |
| @sumingwang233/dsh-code-review-graph Native DSH code intelligence, review workflows and interactive graphs powered by Code Review Graph | low | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @fanjinduo111/dsh-service-board DSH服务面板插件：按会话查看由哪个 Agent 会话启动了哪些服务，三态健康点 + HTTP 码、启动时间与运行时长、礼貌停止、实时日志带、原地重启并重放原命令行。基于上游 dsh-process-board 的补丁分叉（Windows）：修好重启后日志失效、扫描器误合并同名启动器、面板抢走输入框焦点。A docked DSH service panel plugin. | medium | warn | 0/6/17 | 0/0 | 2026-10-08 04:13 |
| @Endless-zby/dsh-jenkins-plugin dsh-jenkins-plugin | low | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @Ckarefulon/dsh-codespace-workspace | medium | warn | 0/3/6 | 0/0 | 2026-10-08 04:13 |
| @ChrisLou-bioinfo/dsh-usage-lite DSH plugin: token usage statistics across all sessions as a settings page (zero-dep, no build) | low | pass | 0/0/1 | 0/0 | 2026-10-08 04:13 |
| @Hope-Phenom/dsh-plugin-notify 一个标准的 DSH 插件：每轮回答结束时发一条桌面通知。A standard DSH plugin that posts a desktop notification whenever a turn ends. | medium | warn | 0/1/4 | 0/0 | 2026-10-08 04:13 |
| @kmyqchy/dsh-3d-preview STL / 3MF file preview for the DSH plugin dsh-better-sidebar: orbit, zoom, slicer plate switching and per-object filament colours from Bambu Studio / OrcaSlicer projects. Three.js based, no runtime dependencies. | low | pass | 0/0/1 | 0/0 | 2026-10-08 04:13 |
| @jerryxff26-alt/dsh-delivery-board DSH plugin: delivery board with stage pipeline, handoff audit trail and weekly Markdown report | medium | warn | 0/1/3 | 0/0 | 2026-10-08 04:13 |
| @StarterMonk/dsh-adhd-session-mode DSH plugin converted from ayghri/i-have-adhd: ADHD-friendly output shaping that takes effect in a single session, never globally. | low | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @elegant01/agent-acta 本地 AI agent 请求日志面板 | low | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @Tangcuyu4/dsh-area-progress DSH 跨工作区任务进度查看器：全区概览、跨区任务进度详情、异常与待办扫描，只读会话日志 | low | pass | 0/0/2 | 0/0 | 2026-10-08 04:13 |
| @Tangcuyu4/dsh-im-alive DSH IM 主动消息守护进程：不定时发家常主动消息，抖动间隔、免打扰时段、日预算、防重复 | low | pass | 0/0/1 | 0/0 | 2026-10-08 04:13 |
| @Tangcuyu4/dsh-cuoti DSH 错题本插件：坑、根因、解法与预防守则钉进提示词，同样的错不犯第二遍 | low | pass | 0/0/1 | 0/0 | 2026-10-08 04:13 |
| @residenthiago2011/DSH-Laya-Tool-Router Laya Tool Router Using the SystemOne Jev Typed Decisions for Local Laya Model and Equivalents. | medium | warn | 0/1/2 | 0/0 | 2026-10-08 04:13 |
| @Amo-aibiancheng/dsh-balance-meter DSH Web 界面底部常驻标注：充值余额 + 本次会话消费（按账户余额差测量，非本地 token 估算） | low | pass | 0/0/3 | 0/0 | 2026-10-08 04:13 |
| @iuuuuuuuu/dsh-session-handoff DSH plugin: memory-preserving session handoff. Carries a conversation into a fresh session before it becomes unusable, and rescues sessions that already are. | low | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @xiaoso456/dsh-workflow-lite DSH 的软工作流插件：在画布上设计流程，编译成计划提示词，由模型按计划执行；运行状态由模型自己记，没有执行引擎 | low | pass | 0/0/0 | 0/0 | 2026-10-08 04:13 |
| @solstice621/dsh-openai-auth OpenAI / Codex ChatGPT subscription auth for DSH Desktop, with native account and quota UI. | medium | warn | 0/3/9 | 0/0 | 2026-10-08 06:14 |
| @linglanxin/dsh-aiagent-taskboard Minimal live taskboard plugin for DSH: what Claude Code / Codex / DSH / Open Design are doing right now - list + swimlane timeline. | medium | warn | 0/2/9 | 0/0 | 2026-10-08 06:14 |
| @xuzihao66/dsh-token-frugal Cut the input-token cost of long DSH sessions: source-side tool-output compression on tools/post-execute plus per-agent tool-catalogue visibility, with a measurement script. | low | pass | 0/0/2 | 0/0 | 2026-10-08 06:14 |
| @arzvaak/dsh-provider-hub BharatCode and OpenAI-compatible provider setup alongside ChatGPT and GitHub Copilot subscriptions for DSH. | medium | warn | 0/1/4 | 0/0 | 2026-10-08 06:14 |
| @kee0012/dsh-restart DSH 桌面版标题栏重启按钮：一键重启整个应用（含 shell 与宿主进程）。 | medium | warn | 0/6/10 | 0/0 | 2026-10-08 06:14 |
| @ruaibeite/dsh-undo Turn-level file undo for DSH: every write and edit is snapshotted before it lands, and the model can call the undo tool to roll back all files a conversation turn changed. | low | pass | 0/0/2 | 0/0 | 2026-10-08 06:14 |
| @wjvalue/dsh-answer-me-with-html Answer me with HTML as a DSH plugin: a skill-only bundle that answers hard questions with a one-page HTML. 让 DSH 用一页 HTML 回答复杂问题。 | low | pass | 0/0/0 | 0/0 | 2026-10-08 06:14 |
| @gygygfg/dsh-winstage-sandbox DSH plugin: Windows staging-candidate-selective-commit sandbox (files + registry) with a review panel | low | pass | 0/0/7 | 0/0 | 2026-10-08 06:14 |
| @Respawn-ID/dsh-rhine-splash Rhine Lab style boot splash bundle for DSH desktop — 莱茵生命风格的 DSH 开屏动画插件 | low | pass | 0/0/4 | 0/0 | 2026-10-08 06:14 |
| @kee0012/dsh-science-skill 科研技能中心 for DSH：技能目录、分类、按会话启用门控，以及用户可调用的 /command 技能栏。 | low | pass | 0/0/9 | 0/0 | 2026-10-08 06:14 |
| @kee0012/expert-team DSH 专家团插件：把一支多角色专家团队装进当前会话 —— 团队画廊、成员名册、一键召唤，每位专家在独立子会话中并行工作，主会话汇总产出。 | medium | warn | 0/5/19 | 0/0 | 2026-10-08 06:14 |
| @adamcjm/dsh-window-drag-probe Restore macOS window dragging in DSH Desktop: a 16px top drag band plus an in-window diagnostic panel (upstream discussion #9112). | low | pass | 0/0/3 | 0/0 | 2026-10-08 06:14 |
| @PerryLink/dsh-phocinae Local non-generative decision layer for DSH: phocinae_ask / phocinae_gate tools plus a fail-closed approval gate | medium | warn | 0/12/11 | 0/0 | 2026-10-08 06:14 |
| @COH2357/dsh-workspace-api-key 一个DSH插件，可以为每一个工作区配置独立的Api Key | low | pass | 0/0/5 | 0/0 | 2026-10-08 06:14 |
| @ruaibeite/dsh-files-to-chat Right-click a file or folder in the DSH right sidebar file tree to add it to the conversation as an @ reference, with multi-select batch insertion. | low | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @xinyang20/dsh-decision-router Decision-model-powered routing for DSH, with local inference and opt-in cloud decisions. | low | pass | 0/0/5 | 0/0 | 2026-10-08 08:14 |
| @xinyang20/dsh-project-space Workspace resource library for DSH: organize, preview and reuse references and deliverables. | medium | warn | 0/5/15 | 0/0 | 2026-10-08 08:14 |
| @qiz42144-web/dsh-ai-curfew AI 也要下班。到点话越来越少，凌晨三点只剩一句「明天再说」；已下班照样收消息，只是只回一个「。」 | low | pass | 0/0/2 | 0/0 | 2026-10-08 08:14 |
| @BaoBao1996121/dsh-chatgpt-subscription DSH 插件：ChatGPT 订阅登录、主 Agent 模型选择与直连/Clash 网络设置 | medium | warn | 0/4/9 | 0/0 | 2026-10-08 08:14 |
| @jessicacui99/dsh-plugin-token-cost Live token spend for the current DSH session, priced with your profile's table and shown beside the composer. | low | pass | 0/0/1 | 0/0 | 2026-10-08 08:14 |
| @Smallballoons01/echo-notes Emotion-first encrypted diary plugin for DSH: templates, mood browsing, writing reminders, MCP adapter | low | pass | 0/0/3 | 0/0 | 2026-10-08 08:14 |
| @miiy/dsh-terminal-keybar A touch key bar for the DSH Web terminal. | low | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @seonzzy/dsh-zen-adapter OpenCode Zen free models for DSH, with live catalog discovery and no dependencies. | low | pass | 0/0/1 | 0/0 | 2026-10-08 08:14 |
| @NianjunZou/dsh-session-manager Codex-style left session manager for DSH — a reversible left-workspace UI overlay with a pinned section, project-session grouping and status dots. | low | pass | 0/0/1 | 0/0 | 2026-10-08 08:14 |
| @Tonywqs/dsh-session-folders 每个 DSH 会话一个时间戳产物目录：会话留在原工作区，插件注入「产物目录」规则；可选硬隔离模式。 Per-conversation output directories for DSH sessions. | low | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @dingchenhui0618-arch/dsh-warden Adversary review gate for DSH: an independent small model reviews destructive tool calls before they run, and reports every verdict. · DSH 对抗式审查门：危险工具调用在执行前由一个独立小模型复核。 | low | pass | 0/0/3 | 0/0 | 2026-10-08 08:14 |
| @dingchenhui0618-arch/dsh-market-sidebar 把 dshmarket 插件市场搬进 DSH 侧边栏 / Puts the dshmarket plugin market on the DSH sidebar | low | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @azazo1/dsh-browser Drive the user's real Google Chrome from DSH without CDP: native messaging + MV3 extension, numbered-text snapshots, persistent profile. 不走 Chrome 调试协议, 用扩展驱动本机 Chrome. | low | pass | 0/0/2 | 0/0 | 2026-10-08 08:14 |
| @sbVAN/dsh-skill-mimo 将每个MiMo Desktop / MiMoCode skill读取到 DSH 会话技能目录中。Reads every Xiaomi MiMo (MiMo Desktop / MiMoCode) skill into the DSH session skill catalog. | medium | warn | 0/3/3 | 0/0 | 2026-10-08 08:14 |
| @icrefin/dsh-notify-push Push DSH agent notifications to your phone and watch via ntfy, Bark, Gotify, Telegram or a webhook. | medium | warn | 0/2/5 | 0/0 | 2026-10-08 08:14 |
| @Smallballoons01/dsh-idle-scholar Idle-time micro-learning for DSH: turns agent waiting gaps into study cards. Ships English, Japanese, and 法考 (Chinese National Judicial Examination) seed decks; extensible with JSON course packs. | low | pass | 0/0/1 | 0/0 | 2026-10-08 08:14 |
| @wonderandyou/dsh-qwen-paint DSH 插件：在对话里调用本机 ComfyUI，用千问 Qwen-Image 2.1 出图。纯本地、不出网、不需要 API Key。 | medium | warn | 0/4/29 | 0/0 | 2026-10-08 08:14 |
| @Ebony-Vinyl/dsh-our-free-model 在 dsh 里装上这个插件即可，无需登录、注册或填 API Key，就能使用包括 DeepSeek V4.1 Flash、Kimi K3 在内的前沿模型——完全免费，不限量。 All you do is install this plugin in dsh: no login, no sign-up, no API key — the frontier models are just there, DeepSeek V4.1 Flash and Kimi K3 among them. Completely free, with no usage cap. | low | pass | 0/0/3 | 0/0 | 2026-10-08 08:14 |
| @kissazi2/dsh-personalization-local dsh个性化插件 | low | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @Octen-Team/dsh-octen Octen web search and fetch for DSH: web_search via Octen /search, web_fetch via Octen /extract. | low | pass | 0/0/4 | 0/0 | 2026-10-08 08:14 |
| @shenjackyuanjie/dsh-openrouter-service-tier DSH 原生 OpenRouter service tier 控制插件，兼容 0.2.0-rc.2 与 0.2.1-alpha.1 | low | pass | 0/0/0 | 0/0 | 2026-10-08 08:14 |
| @xgxx666/dsh-clear-usage DSH 本地 Token 用量统计与模型分析，支持热力图、自定义日期和模型筛选。 | medium | warn | 0/1/1 | 0/0 | 2026-10-08 10:14 |
| @HsgtLgt/dsh-plugin-screenshot 面向模型的「截图」工具插件（DSH，Windows 宿主）。 注册一个 screenshot 工具，让会话里的 AI 能真正「看见」并展示你的屏幕。 | low | pass | 0/0/0 | 0/0 | 2026-10-08 10:14 |
| @Twofruitsgrape/dsh-comsol DSH plugin: drive COMSOL Multiphysics end to end (steady + transient workflows) with a bundled MCP engine | low | pass | 0/0/0 | 0/0 | 2026-10-08 10:14 |
| @helloHupc/dsh-git-branch DSH 插件：在对话框工具行、权限选择框右侧只读显示当前项目的 git 分支；目录不是仓库时不显示。 | medium | warn | 0/1/2 | 0/0 | 2026-10-08 10:14 |
| @Matthew-Laplace/dsh-ark-pet DSH 方舟桌宠：干员库按需下载、自定义 Codex 图集与普通图片导入。Arknights library and custom image pets for DSH. | medium | warn | 0/1/6 | 0/0 | 2026-10-08 10:14 |
| @Everglow28/dsh-glm-quota-dock GLM Coding Plan quota pill for the DSH web GUI - real-time per-window usage in the composer stats row | low | pass | 0/0/2 | 0/0 | 2026-10-08 10:14 |
| @callqh/dsh-project-summary Compact floating Git project summary for DSH: branch, changes, commits and GitHub PR. Follows DSH themes and conversation bounds. | medium | warn | 0/2/10 | 0/0 | 2026-10-08 10:14 |
| @deepseekv41flash/dsh-remote-trust DSH plugin: makes a reverse-proxied (non-loopback) dsh web page count as a trusted host, so the Settings surface loads instead of reporting "settings are unavailable in this browser". | low | pass | 0/0/0 | 0/0 | 2026-10-08 10:14 |
| @Femad-6/dsh-lumen-market 流明市场：DSH 插件发现、介绍与文档、GitHub 仓库查验，以及官方管线安装和更新。 | medium | warn | 0/1/4 | 0/0 | 2026-10-08 10:14 |
| @wang6077/dsh-ide-vscode DSH 右栏内置 IDE 插件：左文件树 + 右编辑区，右键新建文件/文件夹、重命名改后缀、删除，Ctrl+S 保存（中文界面） | medium | warn | 0/5/8 | 0/0 | 2026-10-08 10:14 |
| @SHADOW-LI0327/dsh-process-kit 面向任意仓库的开发流程增强插件：以文件状态机驱动，内置 7 角色 Subagent、门禁脚本与 GUI 状态看板；仅执行确定性读取、渲染、安全追加与脚手架落地。 | medium | warn | 0/3/16 | 0/0 | 2026-10-08 10:14 |
| @jingkun05/dsh-session-delete-native Sidebar session deletion for DSH — a native "Delete session" row in the Session "…" menu. UI-only, registers no agent tools. | low | pass | 0/0/3 | 0/0 | 2026-10-08 10:14 |
| @CarrotFish/dsh-file-and-terminal 为 DSH Web 配置添加“文件管理”和“终端”面板。 | low | pass | 0/0/4 | 0/0 | 2026-10-08 10:14 |
| @boring-cuzzz/dsh-chimes Startup & turn-completion chimes for the DSH desktop app, with an in-app control panel and switchable sound library (Windows, zero dependencies). | medium | warn | 0/2/12 | 0/0 | 2026-10-08 10:14 |
| @XHXnb123/dsh-plugin-archive-reader 只读翻看 asar / zip 归档的 dsh 插件：列条目、读条目、正则搜内容（零依赖） | low | pass | 0/0/2 | 0/0 | 2026-10-08 10:14 |
| @ethanweave/workbuddy-gateway-dsh 在 DSH 中免费使用腾讯 CodeBuddy（WorkBuddy）账号额度：本机网关一键安装、开机自启、统一管理 | Use your CodeBuddy quota inside DSH for free: one-shot Windows installer, logon autostart and unified management for workbuddy-gateway | low | pass | 0/0/0 | 0/0 | 2026-10-08 10:14 |
| @wuanthony397-hash/dsh-codex-peer Run the local Codex CLI as a peer agent from DSH: split work between the two agents, hand tasks over, review each other's changes, and keep every run on disk. | medium | warn | 0/3/6 | 0/0 | 2026-10-08 12:14 |
| @paayton/dsh-link DSH 移动端 H5 桥接插件：手机浏览器经内网 / Tailscale 用连接密钥接入桌面版正在运行的会话（流式回复、Markdown、工具卡、图片上传）。 | medium | warn | 0/1/9 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-skill-workshop 从日常工作自动提炼、发布和更新技能，按使用情况整理受管技能；也支持手工编辑与导入。 | medium | warn | 0/4/0 | 0/0 | 2026-10-08 12:14 |
| @0w0miki/dsh-openpeon | low | pass | 0/0/4 | 0/0 | 2026-10-08 12:14 |
| @oumaekumiko0821/dsh-splash-gojo DSH 开机动画插件 · Full-screen boot splash for DSH — 图片内联、零运行依赖、纯 host 半边 | low | pass | 0/0/0 | 0/0 | 2026-10-08 12:14 |
| @llafztq/dsh-video-tool Video editing toolset for DSH - trim, concat, audio, subtitles, transform, transcode and frame grabbing, powered by ffmpeg. | medium | warn | 0/1/3 | 0/0 | 2026-10-08 12:14 |
| @4444Hao/dsh-codefall 适用于dsh的数字瀑布开机动画与绿色字样主题 | low | pass | 0/0/6 | 0/0 | 2026-10-08 12:14 |
| @WhichWitchWin/dsh-power-button 给 DSH 桌面版补一个可拖动的电源按钮：贴边自动收起，点开可重启或退出 DSH。Windows 专用、零依赖 · A draggable power button for DSH Desktop — latches to the window edge, click to restart or quit. | medium | warn | 0/1/6 | 0/0 | 2026-10-08 12:14 |
| @korosu/dsh-web-search-ddg Keyless DuckDuckGo HTML-scrape web_search provider for the DSH (ctx.web seam): no API key, no extra model turn, one command to install. | low | pass | 0/0/4 | 0/0 | 2026-10-08 12:14 |
| @ags-neto/dsh-status-telemetry A DSH client plugin: a session telemetry pill in the composer dock that expands into a token, performance and context panel. | low | pass | 0/0/0 | 0/0 | 2026-10-08 12:14 |
| @smter/dsh-codebase-memory DSH plugin: connects the codebase-memory-mcp code graph, nudges the model at the decision point, corrects failed MCP calls, and indexes repositories by itself. | medium | warn | 0/1/1 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-memory-dreaming 从原生会话整理日常记忆、Dream 与每周复查，保留出处并审阅长期事实。 | medium | warn | 0/4/0 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-channel-core 统一管理 Discord、飞书渠道、会话绑定、消息交付与进度卡片的单插件。 | low | pass | 0/0/0 | 0/0 | 2026-10-08 12:14 |
| @Cjamiel/manoo-manos Manoo: manos para DSH. Ve tu pantalla, mueve el mouse y escribe por ti — barra, aro para enseñar y voz, en español, para quien no sabe usar la computadora. macOS. | low | pass | 0/0/1 | 0/0 | 2026-10-08 12:14 |
| @Arbeiter-bit/dsh-open-branch Fork a writable side conversation from any completed DSH turn, in the right sidebar. | low | pass | 0/0/3 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-browser-tools 连接已启动的浏览器，通过结构快照、引用、原生审批与截图完成网页操作。 | medium | warn | 0/6/2 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-instruction-files 配置指令文件自动更新、角色的独立工作区和新会话默认模型与权限。 | medium | warn | 0/2/0 | 0/0 | 2026-10-08 12:14 |
| @adamcjm/dsh-memo DSH 备忘录插件：侧边栏快速记录 + 本地 SQLite + GitHub 私有仓库同步 + 图片截图｜Memo plugin for DSH | low | pass | 0/0/4 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-status-cards 统一查看运行状态，并在原有边缘卡片查看 OpenCode Go 额度和 DeepSeek 余额。 | medium | warn | 0/2/2 | 0/0 | 2026-10-08 12:14 |
| @Kerberos255/dsh-lossless-context 使用原生压缩引擎分层整理上下文，保留原始会话并提供检索与展开。 | medium | warn | 0/2/0 | 0/0 | 2026-10-08 12:14 |
| @ChrisLou-bioinfo/dsh-workspace-badge DSH plugin: workspace badge on each session row in the flat (recency-sorted) sidebar list | low | pass | 0/0/1 | 0/0 | 2026-10-08 12:14 |
| @Zai-G/dsh-preset-workshop 预设工坊 · Preset Workshop：为 DSH 管理人设、系统提示词、工具与技能，并预览请求组成。 | low | pass | 0/0/5 | 0/0 | 2026-10-08 12:14 |
| @T-Auto/dsh-ops Provides bash, PowerShell 7, and a suite of high-performance tools written in Rust for Windows DSH to enhance token efficiency / 为windows的dsh提供bash、powershell7及一系列rust编写的高性能tools来提高token效率 | medium | warn | 0/4/5 | 0/0 | 2026-10-08 12:14 |
| @pridurok-goxa/dsh-ui-tweaks Твики интерфейса DSH. Первый — масштаб всего интерфейса: Ctrl+=, Ctrl+-, Ctrl+0, нумпад, Ctrl+колесо | low | pass | 0/0/2 | 0/0 | 2026-10-08 12:14 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
54 reports2026-10-098 added0 crit1 medium2026-10-08current100 added0 crit39 medium2026-10-070 added0 crit0 medium2026-10-060 added0 crit0 medium2026-10-050 added0 crit0 medium2026-10-0472 added0 crit30 medium2026-10-0388 added0 crit36 medium2026-10-0299 added1 crit47 medium2026-10-010 added0 crit0 medium2026-09-30182 added3 crit51 medium2026-09-2969 added0 crit22 medium2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-10-08. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published