Daily security scan
Date · 2026-10-10 (UTC — plugins first indexed that day)
104
added
0
critical
40
medium
64
low
| Plugin | Risk | Verdict | C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| @bihong2026/dsh-arcade 🎮 GameHub Arcade — DSH sidebar plugin: 90+ classic open-source browser games, play instantly, zero installs. 1000+ planned. | medium | warn | 0/2/9 | 0/0 | 2026-10-10 00:15 |
| @DenAbr/dsh-compact-selected-model DSH plugin: /compact uses the currently selected model, not the one that finished the last turn | low | pass | 0/0/0 | 0/0 | 2026-10-10 00:15 |
| @lakerian/dsh-plugin-term-dictionary | medium | warn | 0/1/7 | 0/0 | 2026-10-10 00:15 |
| @blackstar-baba/dsh-bird-bike 像素小鸡骑自行车 —— DSH Web GUI 底部的我的世界像素风骑行带 / A DSH client plugin: a helmeted pixel chicken rides a bicycle along a Minecraft-style strip docked at the bottom of the app frame. Day/night cycle, bell, jumps, headlight, ride stats. | low | pass | 0/0/2 | 0/0 | 2026-10-10 02:15 |
| @icrefin/dsh-agent-prompt Edit the AGENTS.md instruction files DSH actually loads - user-global and per-workspace - from a left-sidebar panel in the GUI. | low | pass | 0/0/4 | 0/0 | 2026-10-10 02:15 |
| @matiomlei/dsh-workbuddy-project | low | pass | 0/0/5 | 0/0 | 2026-10-10 02:15 |
| @FuriousKinght/dsh-restart-button A button at the foot of the sidebar that restarts the DSH desktop app and reloads the page when it comes back. | medium | warn | 0/10/13 | 0/0 | 2026-10-10 02:15 |
| @Upstream196/dsh-label-tune dsh字体亮度的控制 | low | pass | 0/0/0 | 0/0 | 2026-10-10 02:15 |
| @jojoman2024/dsh-memj 基于项目逻辑的dsh记忆系统，项目基于交接文档，知识基于项目沉淀。以人实际工作的逻辑，做知识的聚合和交接。开放书写规范以及全插件提示词的前端编辑（热加载），用户可自行优化，或者让模型帮插件通过修改提示词自进化。 | medium | warn | 0/1/4 | 0/0 | 2026-10-10 02:15 |
| @awol2005ex3/dsh-file-comment [DSH](https://github.com/deepseek-ai/deepseek-harness) 插件：在右侧边栏文件预览中选中文本，添加评论并发送到会话输入框。 | low | pass | 0/0/0 | 0/0 | 2026-10-10 02:15 |
| @lerqian883-alt/dsh-plugin-ml-phase-gate Evidence-backed ML phase gates, live visualization, and portable project bootstrap for DSH. | low | pass | 0/0/6 | 0/0 | 2026-10-10 02:15 |
| @ZinK33/dsh-plugin-glass-notepad A floating black liquid-glass schedule plugin for DSH: work/personal categories, time ranges, a two-lane timeline and mainland-China holidays. | low | pass | 0/0/4 | 0/0 | 2026-10-10 02:15 |
| @reliable-ly0411/babeldoc-pdf-translate Portable agent skill for layout-preserving PDF translation with BabelDOC, bilingual output and custom terminology | low | pass | 0/0/0 | 0/0 | 2026-10-10 02:15 |
| @Wahwayhale/dsh-connect-doubao | low | pass | 0/0/1 | 0/0 | 2026-10-10 02:15 |
| @LINinLIN-0079/godot-imagegen DSH 插件「美术工坊」：把本机秋叶 SD WebUI / ComfyUI 接进 DSH，对话里直接出图、改写并运行 ComfyUI 工作流，产物落成 Godot 可用美术资产 | medium | warn | 0/3/5 | 0/0 | 2026-10-10 02:15 |
| @eaglezlee/dsh-ui-html Renders sandboxed interactive HTML in a chat turn and sends the user's selections, clicks and form input back to the model — as a new user message by default, or as the tool result in blocking mode. | low | pass | 0/0/6 | 0/0 | 2026-10-10 02:15 |
| @RicardoYan/dsh-session-delete Delete a DSH session together with all its subagent sessions · 永久删除 DSH 会话及其派生的所有子代理会话 | low | pass | 0/0/6 | 0/0 | 2026-10-10 04:15 |
| @17897693/wen-wanan DSH 技能：情侣向睡前陪伴。一句温柔情话 → 一个谐音梗猜谜小故事 → 一句温柔晚安。131 条谐音词对、43 个落点，纯 Markdown、零依赖。 | low | pass | 0/0/0 | 0/0 | 2026-10-10 04:15 |
| @sixzjd/npm-usage Local usage statistics for DSH: token consumption, request count, cache hit rate and estimated cost as a native settings section. | low | pass | 0/0/4 | 0/0 | 2026-10-10 04:15 |
| @ttmouse/dsh-generative-ui DSH 插件：AI 在对话流里直接输出可交互的 Generative UI 组件（沙箱 iframe，纯客户端） | medium | warn | 0/1/2 | 0/0 | 2026-10-10 04:15 |
| @P-JIANGH/dsh-enhance oh-my-zsh-style enhancement bundle for DSH: packaged skills, work-rule prompt guidance, the Enhance agent preset with a persistent deep-work prompt section, guards + delivery gate, work tracking, worktrees, advisor — install and go | medium | warn | 0/1/1 | 0/0 | 2026-10-10 04:15 |
| @Wei894348/dsh-wb2api Self-hosted gateway plugin for DSH: registers a local WorkBuddy / CodeBuddy account pool as OpenAI-compatible model providers, with a web settings panel and a task-automation engine. | medium | warn | 0/6/11 | 0/0 | 2026-10-10 04:15 |
| @rhl88/dsh-session-delete DSH插件：在侧边栏会话菜单里加入删除会话（永久移除会话记录与完整历史，补足只能归档的限制）。 | low | pass | 0/0/3 | 0/0 | 2026-10-10 04:15 |
| @takboo/dsh-session-bin Native archived-session management for DSH with guarded permanent deletion and fixed batches. | low | pass | 0/0/0 | 0/0 | 2026-10-10 04:15 |
| @liaimei/dsh-cost-breakdown DSH 会话费用账单：账号余额 + 峰谷计价 + 每个会话（含子代理衍生会话）的消耗构成，输入框下方读数与右侧栏面板双入口。 DSH session cost breakdown: balance, peak/off-peak pricing, and how each session's spend is composed. | low | pass | 0/0/10 | 0/0 | 2026-10-10 04:15 |
| @xufu5438-netizen/dsh-boot-video 给 DSH加一段视频开机片头：启动时全屏播放 mp4、点击或 Esc 跳过、可导入自己的视频（解不了的编码自动转码成 H.264） | medium | warn | 0/4/11 | 0/0 | 2026-10-10 04:15 |
| @cumthugo/dsh-deepseek-offpeak-indicator 在 DSH Web GUI 输入框工具行显示当前 DeepSeek API 计费时段的小圆点：黄=高峰，绿=空闲（半价），仅在选中 DeepSeek 提供商时显示 | low | pass | 0/0/4 | 0/0 | 2026-10-10 04:15 |
| @xulixin1968/dsh-paperless-retrieval Search a local Paperless-ngx document library with hybrid semantic + keyword retrieval, returning titles and key snippets as agent context. | medium | warn | 0/1/2 | 0/0 | 2026-10-10 04:15 |
| @vitkuz573/dsh-token-saver DSH plugin: peak-hour billing guard for DSH, plus token-saving settings UI and a live session cost strip | low | pass | 0/0/0 | 0/0 | 2026-10-10 04:15 |
| @XSJUSTC/dsh-favourite Favorites for DSH: star sessions/workspaces, favourites-only filter, hide unfavourites, pin with hover metadata, star color, fork inheritance. | low | pass | 0/0/3 | 0/0 | 2026-10-10 04:15 |
| @AhYi8/dsh-gotify-notify DSH 的 Gotify 通知插件 | low | pass | 0/0/5 | 0/0 | 2026-10-10 04:15 |
| @sunnycreate/dsh-plugin-stand-reminder | low | pass | 0/0/1 | 0/0 | 2026-10-10 06:14 |
| @miku05231/dsh-provider-quote DSH 插件：对正在使用的模型提供商询价（余额 + 单价，参考 cc-switch 的「服务商询价」） | medium | warn | 1/0/1 | 0/0 | 2026-10-10 06:14 |
| @Jia-HuaWu/dsh-ujn-image 在 DSH 里用济南大学大模型平台生成与编辑图片（文生图 + 图生图） | medium | warn | 0/3/8 | 0/0 | 2026-10-10 06:14 |
| @liaosiliangCodeLife/harness-mate-dsh DSH plugin: use the agent running on your own computer from your phone or browser — bridge to the HarnessMate platform. | low | pass | 0/0/4 | 0/0 | 2026-10-10 06:14 |
| @YiQiuAcc/dsh-font-settings A DSH web plugin that replaces the font settings in general settings with searchable font pickers. | low | pass | 0/0/0 | 0/0 | 2026-10-10 06:14 |
| @john-walks-slow/dsh-cd Session working-directory override for DSH: a cd tool that makes relative paths in the file tools and the bash default workdir follow the new directory, per-session and cache-safe, without moving the session or its workspace root. | low | pass | 0/0/0 | 0/0 | 2026-10-10 06:14 |
| @BlackThunder2191026/dsh-deepseek-usage DSH 插件：侧边栏实时余额 + 每轮对话花费（人民币，含 token 明细） | low | pass | 0/0/3 | 0/0 | 2026-10-10 06:14 |
| @Ok541151/cwk Agent mode picker for DSH: choose an external Agent CLI as the session's default executor, with automatic discovery of installed CLIs. | low | pass | 0/0/8 | 0/0 | 2026-10-10 06:14 |
| @Zhang1025681484/dsh-md-editor Editable Markdown tab for the DSH right sidebar — Monaco editor, autosave, opens from the workspace file tree. | low | pass | 0/0/3 | 0/0 | 2026-10-10 06:14 |
| @KILLEDx/dsh-token-stats DSH设置页 Token 统计分区：跨会话用量指标、热力图与常驻悬浮小窗（读本地日志，零模型消耗） | medium | warn | 0/1/4 | 0/0 | 2026-10-10 06:14 |
| @PolinniZhong/dsh-apradar AI 产品雷达（AI Product Radar）—— DSH 插件：关注公开来源、识别前后变化、查看原始证据、沉淀产品机会。 | low | pass | 0/0/6 | 0/0 | 2026-10-10 06:14 |
| @xjhao-heim/dsh-task-memory DSH 插件:工作区级任务记忆,把做过的任务存成记忆卡,下次会话不必重新分析一遍。 | medium | warn | 0/1/5 | 0/0 | 2026-10-10 06:14 |
| @freeqin123/dsh-commandcode-plans-provider Command Code 订阅（Go/GOAT/Pro/Max）接入 DSH：档位过滤不隐藏任何模型、可视化配置 API Key、底部用量环、图片输入 | medium | warn | 0/1/0 | 0/0 | 2026-10-10 06:14 |
| @EJDRONE/dsh-multi-acp 让 DSH 的一个会话由外部 ACP agent CLI 作为根 agent 驱动 | low | pass | 0/0/6 | 0/0 | 2026-10-10 06:14 |
| @sorawithcat/dsh-health-reminder DSH 插件：按自定义作息定时提醒喝水、起身、护眼和拉伸，多套方案随时切换，完全离线。 | low | pass | 0/0/3 | 0/0 | 2026-10-10 06:14 |
| @whf-jx/dsh-wallpaper DSH Web GUI 本地壁纸插件:上传本地图片/视频、手动切换、定时轮换与随机播放,带清晰度/压暗/模糊/填充调节 | low | pass | 0/0/3 | 0/0 | 2026-10-10 06:14 |
| @acdsh4869/DSH-Transparent-UI-Plugin Aqua glassmorphism theme plugin for DSH (DSH v0.2.x / desktop v0.22.3+) — original by WYH66666666, adapted for 0.2.x | low | pass | 0/0/0 | 0/0 | 2026-10-10 08:15 |
| @sorawithcat/dsh-settings-sync 设置同步插件：一份 JSON 带走插件清单、profile 配置、DSH_HOME 文件与浏览器本地设置，导入后可一键重装插件；与插件市场的 dsh-profile-backup 0.2 格式互通。 | medium | warn | 0/2/7 | 0/0 | 2026-10-10 08:15 |
| @liu-zhengdong/dsh-shells DSH 插件：给 Agent 多个跨平台持久后台 shell（zsh/cmd/gitbash/pwsh），侧边栏面板跟随 PTY 流 | medium | warn | 0/1/1 | 0/1 | 2026-10-10 08:15 |
| @EDDY597/dsh-opencode-gateway DSH 插件：把本机 opencode 生态接入 DSH 模型菜单——OpenCode Go 订阅（经 opencode-api-plugin 网关）+ Zen 免费档（内嵌 opencode2api，无需网关运行） | low | pass | 0/0/3 | 0/0 | 2026-10-10 08:15 |
| @liu-zhengdong/dsh-recall DSH 插件：把每个 turn 归档为一条 Run，后台生成摘要，让 Agent 检索自己的执行历史 | low | pass | 0/0/0 | 0/0 | 2026-10-10 08:15 |
| @hfbcwhy7gh-cpu/dsh-restart-hotkey | medium | warn | 0/2/11 | 0/0 | 2026-10-10 08:15 |
| @JUYANJY/dsh-codex-bridge Observe and steer a local Codex (OpenAI) session from DSH, over the codex app-server protocol. | low | pass | 0/0/0 | 0/0 | 2026-10-10 08:15 |
| @xingxingbk-git/dsh-chat 为 DSH 提供 Chat / Harness 双模式切换 | medium | warn | 0/2/6 | 0/0 | 2026-10-10 08:15 |
| @AAAlenwow/dsh-spring-admin-kit Spring Boot admin toolkit: EasyExcel batch import/export code generation and Thymeleaf+LayUI template safety guard. 企业后台开发技能包。 | low | pass | 0/0/0 | 0/0 | 2026-10-10 08:15 |
| @AAAlenwow/dsh-weknora-archive Incrementally archive DSH sessions into a self-hosted WeKnora knowledge base: extract, summarize, dedupe, upload. DSH 会话归档进 WeKnora 知识库。 | low | pass | 0/0/2 | 0/0 | 2026-10-10 08:15 |
| @FurryBear2025/dsh-session-drag-move DSH 左侧栏会话跨工作区拖拽：把会话拖到别的工作区，真正改写会话日志 header 的 cwd 并把日志目录迁到目标项目下，改变归属而不只是改名。 | low | pass | 0/0/2 | 0/0 | 2026-10-10 08:15 |
| @felixpu/dsh-restart-autostart 在 DSH 网页版「设置 → 通用」加入进程控制行：手动重启 dsh web 宿主进程，以及「跟随系统启动」勾选框（写入 macOS launchd / Linux systemd / Windows 服务自启条目，开机拉起并在崩溃后自动重启）。 | medium | warn | 0/11/6 | 0/0 | 2026-10-10 08:15 |
| @xulixin1968/dsh-cookie-sync Sync cookies from Edge browser to DSH sidebar browser, avoiding repeated logins on supported sites. | medium | warn | 0/2/4 | 0/0 | 2026-10-10 08:15 |
| @18477514055/dsh-ledger-memory 台账记忆（Ledger Memory）—— DSH 的工程化项目记忆：台账 + 活动日志(L0-L4) + 三层上下文压缩 + 逐字胶囊落盘 + 跨会话交接单。可回溯、可追查。 | low | pass | 0/0/1 | 0/0 | 2026-10-10 08:15 |
| @felixpu/dsh-settings-params 集中管理注入宿主的环境变量，并支持按白名单热重载那些启动时只读一次环境变量的插件（如 dsh-sql），免重启即可读取新值。 | medium | warn | 0/3/6 | 0/0 | 2026-10-10 08:15 |
| @felixpu/dsh-lock 密码门禁：打开 DSH 时先显示密码界面，解锁后才能使用；支持手动锁定与自动锁定，密码以 scrypt 单向哈希存储。 | low | pass | 0/0/4 | 0/0 | 2026-10-10 08:15 |
| @66wjz/dsh-model-cap DSH 提供商与模型高级管理台 · Provider & model management console for DSH | low | pass | 0/0/5 | 0/0 | 2026-10-10 08:15 |
| @felixpu/dsh-env-inspector-plus 环境体检：在「设置 → 环境体检」加一个分页，展示当前 DSH 宿主进程的身份（pid / 入口 / 工作目录 / Node / 运行时长）与环境变量分组（总数、DSH_ 前缀组、凭证形态组），值一律不出宿主；同时给模型一个只读的 env_inspect 工具。 | low | pass | 0/0/4 | 0/0 | 2026-10-10 08:15 |
| @HangZhouXi/dsh-xiaoyi Turn your phone's Huawei XiaoYi into a remote control for the DSH agent on your own PC. DSH host plugin for XiaoYi OpenClaw mode: zero third-party deps, hand-written RFC6455 WebSocket client, AK/SK auth, heartbeat, A2A streaming, inbound attachments, outbound files. | low | pass | 0/0/2 | 0/0 | 2026-10-10 10:15 |
| @LiuJiaCheng11/dsh-postman DSH插件，允许你的AI直接操作你的Postman（网页版）的COLLECTIONS | medium | warn | 0/5/9 | 0/0 | 2026-10-10 10:15 |
| @NINKCH/dsh-infinite_canvas A node-based short-drama studio inside DSH. Start from a one-line idea, walk out with a storyboarded, voiced, subtitled video cut — right on an infinite canvas. | medium | warn | 0/3/2 | 0/0 | 2026-10-10 10:15 |
| @MarchingWorkhorse/Output-Overview dsh产出统计，包括代码行，采纳率，文档数，编辑次数等信息 | low | pass | 0/0/4 | 0/0 | 2026-10-10 10:15 |
| @OrderG-X/dsh-cu Vision-first desktop computer-use for DSH on macOS: OCR text targeting, set-of-mark element indices, and a Codex-style cursor with spring animation. No accessibility-tree dependency. | low | pending | 0/0/0 | 0/0 | 2026-10-10 10:15 |
| @zq0929/dsh-coding-plan-balance Coding Plan quota pill for the DSH Web composer dock: monthly cycle usage in USD and the rolling 5-hour window, read with the credential your ctrip model provider already uses. | low | pass | 0/0/3 | 0/0 | 2026-10-10 10:15 |
| @Seller-1990/dsh-model-smart-config Smart model setup for DSH third-party API providers: recognize a model ID and fill in context window, input modalities and reasoning levels. | low | pass | 0/0/1 | 0/0 | 2026-10-10 10:15 |
| @MYming-yue/dsh-board DSH 的持久化共同白板插件：完整白板在左、原生对话在右，人和 AI 持续维护同一份草稿。基于 draft-board。 | medium | warn | 0/1/10 | 0/0 | 2026-10-10 10:15 |
| @ccccty/proposal-generator-cn 项目书生成 - 科研项目申报书撰写技能包（DSH plugin） | low | pass | 0/0/0 | 0/0 | 2026-10-10 10:15 |
| @BangBang-03/dsh-memory DSH 工作区长期记忆插件：会话开始注入记忆摘要、memory 工具按需读写、轮次结束自动提炼，设置面板里可查看与管理；支持把 Qoder / WorkBuddy 的既有记忆导入。 | medium | warn | 0/6/5 | 0/0 | 2026-10-10 10:15 |
| @hojas/dsh-price-tip 侧栏的 DeepSeek API 价格时段提醒：当前处于空闲时段还是高峰时段、距离切换还有多久，以及当前生效的价目表。 | low | pass | 0/0/0 | 0/0 | 2026-10-10 10:15 |
| @wobenshiwomu/dsh-facet DSH 插件：切面（facet）—— /visualize 一个名字或 arXiv 链接，主 agent 调研 + 双子代理并行生成 2D/3D 架构图谱，浮窗直接弹出 | A name or paper in, structured diagram windows out | medium | warn | 0/1/2 | 0/0 | 2026-10-10 10:15 |
| @fishcg/dsh-input-prediction DSH 输入预测插件：输入框灰字续写下一句（Tab 接受）+ 每轮回答后 1–3 条可一键发送的候选 | low | pass | 0/0/8 | 0/0 | 2026-10-10 10:15 |
| @TindalosKorone/dsh-agent-memory DSH 跨会话长期记忆插件：零运行时依赖、输出可自算自证、请求级隔离；每项机制都附能判红的取证（CC BY-NC-SA 4.0） | low | pass | 0/0/2 | 0/0 | 2026-10-10 10:15 |
| @zhao-guang-ai/dsh-quote-annotate-pro | medium | warn | 0/3/10 | 0/0 | 2026-10-10 10:15 |
| @Unicorn0320/dsh-session-delete DSH 的会话 / 工作区「删除 + 恢复」插件：在左侧会话列表里直接删除会话或整个工作区，数据移入回收站，随时可以恢复，也可以彻底删除 | low | pending | 0/0/0 | 0/0 | 2026-10-10 10:15 |
| @NINKCH/dsh-artcraft Drive the open-source ArtCraft studio apps — PhotoCraft, FilmCraft, EffectCraft... — from DSH, in chat or from your own UI. | medium | warn | 0/6/5 | 0/0 | 2026-10-10 10:15 |
| @mirelconstantin/dsh-postgres-expert PostgreSQL expertise for DSH: 11 curated pg-aiguide skills from Tiger Data registered natively, plus the pg-aiguide MCP server for version-exact manual search. | low | pass | 0/0/4 | 0/0 | 2026-10-10 10:15 |
| @B1aZerr/dsh-net-switch Runtime network switch for DSH: flip Harness's own outbound traffic between a local Clash Verge proxy and direct/LAN without restarting, driven from a top-right status pill, the network_mode agent tool and the /net command. | medium | warn | 0/4/26 | 0/0 | 2026-10-10 12:15 |
| @YubaiLoving/dsh-followup-suggestions Follow-up suggestion chips under a DSH session's last completed reply, generated with that session's own selected model. | low | pass | 0/0/2 | 0/0 | 2026-10-10 12:15 |
| @jiang-yang/dsh-ai-worker | medium | warn | 1/0/7 | 0/0 | 2026-10-10 12:15 |
| @casteadelqui/dsh-go 围棋模式 for DSH — a playable Go (Weiqi/Baduk) board tab, complete rules engine, five AI levels, and a tutor that plays with you. | medium | warn | 0/2/8 | 0/0 | 2026-10-10 12:15 |
| @loyalchiiina/dsh-archive-favorites-forge Favorites, copy id+path, per-session delete, idle batch archive and a favourites filter for DSH conversations — additive slot extensions over the shipped archive feature, editing no official file. 为 DSH 对话增加收藏、复制 ID+路径、单条删除、超时批量归档与收藏筛选。 | medium | warn | 0/4/7 | 0/0 | 2026-10-10 12:15 |
| @czpGhost/dsh-glm-web-search Z.AI (GLM) web search, web reader and vision for DSH, authenticated by a Z.AI email (OAuth) login instead of an API key | medium | warn | 0/1/6 | 0/0 | 2026-10-10 12:15 |
| @Herbert-wang820/dsh-image | medium | warn | 0/2/4 | 0/0 | 2026-10-10 12:15 |
| @ysefu/dsh-sidebar-tags Colored session tags for the DSH sidebar - tag a session from its row, see it at a glance, and filter history by tag. | medium | warn | 0/5/20 | 0/0 | 2026-10-10 12:15 |
| @CyberQin/dsh-ohos-shell | low | pass | 0/0/6 | 0/0 | 2026-10-10 12:15 |
| @rayyugz/dsh-plugin-hunyuan-image Native DSH plugin for Tencent Hunyuan image generation. v1.0: two models (Hy-Image-3.5-preview up to 4K / 3.0), official resolution × aspect-ratio picker, batch 1/2/4, local gallery with search + regenerate, custom output folder, official advanced parameters, model-callable tool. Zero native deps; macOS/Windows/Linux. Docs in 8 languages. | medium | warn | 0/2/6 | 0/0 | 2026-10-10 12:15 |
| @MoruTeaven/dsh-model-quickslots 在 DSH 输入框上方添加一排模型快捷切换按钮：左键切换模型，右键编辑预设，支持自定义备注 | low | pass | 0/0/2 | 0/0 | 2026-10-10 12:15 |
| @YubaiLoving/dsh-pinned-session-bar A DSH Web GUI client plugin: a dedicated Pinned bar above the sidebar workspace list, collecting every pinned session with cross-container drag and drop. | low | pass | 0/0/3 | 0/0 | 2026-10-10 12:15 |
| @tuanzi0v0/dsh-search-picture 一款用于DSH的插件，可以直接使用DSH搜索并下载图片 | low | pass | 0/0/6 | 0/0 | 2026-10-10 12:15 |
| @godlike985/dsh-sidebar-editor 在 DSH 右侧栏预览代码文件、按名字搜索工作区文件，并把选中行一键引用进对话框 ｜ Preview code files in the DSH sidebar, search workspace files by name, and reference the selected lines into the composer | low | pass | 0/0/4 | 0/0 | 2026-10-10 12:15 |
| @baigei0710/dsh-remote-frp Remote access for the DSH Web GUI via your own cloud server: frp reverse tunnel managed as a macOS LaunchAgent, plus the server-side setup script. | medium | warn | 0/15/14 | 0/0 | 2026-10-10 12:15 |
| @YSwo-fei/dsh-api-heal DSH 插件：界面报「API 密钥无效」时，自动定位并续期真正失效的那条凭据链（qoder / workbuddy-ai / our-free-model），然后重发请求。Self-healing credentials for DSH. | medium | warn | 0/2/9 | 0/0 | 2026-10-10 12:15 |
| @was35/dsh-reclaim 审计并安全回收 DSH 占用的空间：看清会话、附件与缓存各占多少、还被谁引用，清理一律进可恢复的隔离区（DSH 插件） | medium | warn | 0/5/4 | 0/0 | 2026-10-10 12:15 |
| @JianHeShui/dsh-desktop-glass Frosted-glass look for the DSH desktop app (translucent page + Windows acrylic window material) | low | pass | 0/0/2 | 0/0 | 2026-10-10 12:15 |
| @LUDIWUSI12138/dsh-rewind Rewind a DSH session to before a turn you already sent. | low | pass | 0/0/9 | 0/0 | 2026-10-10 12:15 |
| @mirelconstantin/dsh-ponytail-sync Ponytail lazy-senior-dev mode as a native DSH skill, system-prompt section and six slash commands. Always available, level-switchable, no external process. | low | pass | 0/0/3 | 0/0 | 2026-10-10 12:15 |
| @Charaaah/dsh-web-api-balance DSH Web 插件：输入框旁常驻显示 DeepSeek API 余额；悬停展开左栏账户余额、右栏本次对话消耗（缓存命中/未命中/输出分档，峰谷自动判断），胶囊右半滑出可充值。 | low | pass | 0/0/6 | 0/0 | 2026-10-10 12:15 |
Static heuristic scan + manifest audit — not a full security audit; no code execution or dependency resolution. Risk tiers match the site model: critical in secrets/exfil/destructive/mining is "critical"; other critical-level findings and warnings are "medium" (needs review).
Daily report archive
56 reports2026-10-110 added0 crit0 medium2026-10-10current104 added0 crit40 medium2026-10-098 added0 crit1 medium2026-10-08100 added0 crit39 medium2026-10-070 added0 crit0 medium2026-10-060 added0 crit0 medium2026-10-050 added0 crit0 medium2026-10-0472 added0 crit30 medium2026-10-0388 added0 crit36 medium2026-10-0299 added1 crit47 medium2026-10-010 added0 crit0 medium2026-09-30182 added3 crit51 medium2026-09-2969 added0 crit22 medium2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-10-10. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
Source: dsh.so security standards · Maintained by dsh.so · Published