Daily security scan

Date · 2026-10-15 (UTC — plugins first indexed that day)

Static scan · new today

rule heuristics · shape only

critical

high

medium

low

Tier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low.

Dynamic audit · subset of new today

model reads source · no execution

critical

high

medium

low

Only entries static-flagged ≥ warn are audited; tier = highest finding. Of 110 new entries, 99 are out of the queue or have no conclusion yet.

Plugin	Static	Dynamic	Findings C/W/I	Manifest	Indexed
@qqmqq/dsh-live2d-pet Live2D 桌宠挂件 for DSH Web: 可拖动吸附/滚轮缩放/待机呼吸眨眼, 单击显示 DeepSeek 余额	medium	not audited	0/4/12	0/0	2026-10-15 00:16
@WangDouble-Dev/procuremate 开源采购助手插件，为 DSH 提供 Excel 需求导入、询价文本生成、供货商管理、询价进度标记与采购提醒。	high	medium	1/4/10	0/0	2026-10-15 00:16
@lb290/dsh-db-connections Named database connections for DSH - configure MySQL in a settings page, then refer to them by name in chat. Read-only by default, writes opt-in per connection.	medium	not audited	0/1/7	0/0	2026-10-15 02:15
@NeoHotaru/dsh-read-animation DSH plugin: a pasted animated GIF or WebP keeps playing in the UI, and the model receives a labelled sheet of frames sampled across the animation.	low	not audited	0/0/3	0/0	2026-10-15 02:15
@jiangluoyiyi/dsh-quota-pill DSH plugin: DeepSeek account balance and per-Session spend in the composer dock	high	low	1/0/0	0/0	2026-10-15 02:15
@The-Data-Galaxy/dsh-dpia-workbench A versioned DPIA workbench for DSH: trace facts, resolve gaps, reassess risks, and produce reviewable reports.	low	not audited	0/0/2	0/0	2026-10-15 02:15
@23bear/dsh-plugin-qq-bot QQ 官方机器人通道插件 for DSH — talk to your DSH sessions from QQ groups and private chats.	low	not audited	0/0/5	0/0	2026-10-15 04:17
@mengwEX/dsh-block-ptc Model-controlled context blocks for DSH PTC mode	low	not audited	0/0/0	0/0	2026-10-15 04:17
@youran0faust/dsh-cache-report See what ate your prompt cache. Hit-rate & tool-block cost report for DSH — zero deps, registers no tools.	medium	not audited	0/1/4	0/0	2026-10-15 04:17
@beex-labs/dsh-knowledge Give your AI a project memory: /init makes it read the codebase and write .dsh docs, then every later turn gets them injected back automatically.	low	not audited	0/0/1	0/0	2026-10-15 04:17
@cander0815/dsh-computer-mcp 通过 MCP 让 DSH 操作另一台电脑：文件读写、搜索、编辑、回收与可选命令执行，支持 Windows/macOS 和内网/Tailscale。	low	not audited	0/0/4	0/0	2026-10-15 04:17
@funswe/dsh-resizable-settings	low	not audited	0/0/3	0/0	2026-10-15 04:17
@eeFrank123/dsh-snowflake-shutdown Snowflake shutdown button for DSH - desktop-fixed fork of dsh-shutdown-after-task: auto shutdown after tasks complete, cancellable countdown.	medium	not audited	0/1/6	0/0	2026-10-15 04:17
@Fleey/deepseek-harness-acp DSH 桌面插件：用 ACP（Agent Client Protocol）把 Codex、Claude Code 等外部 Agent 注册成模型提供方	low	not audited	0/0/3	0/0	2026-10-15 06:16
@r-ayin/dsh-skill-commands Smarter slash-command matching for skills: suffix, contains and alias matching (e.g. /studio finds autonomous-studio).	low	not audited	0/0/0	0/0	2026-10-15 06:16
@xiray-xia/dsh-remote-vs VSCode-style remote SSH development for DSH: host manager, helper deploy pipeline, remote files/terminal/git, transparent remote execution.	critical	low	2/1/1	0/0	2026-10-15 06:16
@rumilhz/dsh-pylon-workbuddy DSH plugin: supervise a workbuddy2api gateway and register its models as an editable LLM provider. Self-hosted, no upstream wrapping.	medium	not audited	0/1/7	0/0	2026-10-15 06:16
@r-ayin/dsh-super-injector Runtime plugin injector: inject, hot-reload and uninstall local plugin packages in a running dsh without restarts, with plugin scaffolding, self-test and a management panel.	low	not audited	0/0/1	0/0	2026-10-15 06:16
@r-ayin/dsh-en2zh Live English-to-Chinese translation of model output in the web UI - translation above, original kept aside - with an optional local MT engine and LLM fallback.	low	not audited	0/0/10	0/0	2026-10-15 06:16
@r-ayin/dsh-web-search-duck Web search provider that bridges an OpenAI Responses-API-compatible endpoint with the web_search_preview tool into the dsh web seam.	low	not audited	0/0/4	0/0	2026-10-15 06:16
@r-ayin/dsh-web-search-bing Keyless Bing HTML search provider plus a relay-aware fetch provider with per-hop redirect validation for the dsh web seam.	low	not audited	0/0/0	0/0	2026-10-15 06:16
@07210905/crop-zoom Makes small text in a screenshot readable before a model reads it: crop a region, magnify it with a chosen kernel, hand back a new image. DSH plugin + standalone CLI.	low	not audited	0/0/0	0/0	2026-10-15 06:16
@r-ayin/dsh-harness-suite Session hygiene suite: strips leaked thinking tags, adds retry cooldown budgets, blocks plaintext credentials before execution, runs a daily health-check loop with a health panel, and auto-tunes agent instruction hints from error statistics.	medium	not audited	0/1/3	0/0	2026-10-15 06:16
@FideFeiPlane/dsh-auto-maximize DSH 桌面版插件：启动自动最大化主窗口（等同于手动点击最大化按钮） \| DSH Desktop Plugin: Auto‑maximize main window on launch (same as clicking the Maximize button manually)	medium	not audited	0/2/0	0/0	2026-10-15 06:16
@r-ayin/dsh-stream-index-guard Patches the LLM assistant-stream accumulator at runtime to clamp invalid chunk indices, downgrading hard stream failures to dropped or merged chunks; ships a stats tool.	low	not audited	0/0/2	0/0	2026-10-15 06:16
@r-ayin/dsh-guild-bridge Bridges a guild expert-team board into dsh: routes guild tasks to one-shot dsh subagents, visible in the GUI.	low	not audited	0/0/0	0/0	2026-10-15 06:16
@r-ayin/dsh-approval-watch Floating overlay that surfaces pending approvals, plan reviews and user questions from any session, with click-through to the session.	low	not audited	0/0/3	0/0	2026-10-15 06:16
@CH3SH-LC/dsh-better-wechat 本地优先的微信消息整理助手：把电脑微信聊天变成可检索、可筛选、可追溯的私人消息工作台，免打扰群一键忽略，聊天内容不出本机。	low	not audited	0/0/2	0/0	2026-10-15 06:16
@r-ayin/dsh-context-budget Ports the Codex CLI TokenBudget mechanism to dsh: remaining-context awareness, archive rollover, and notes/history retrieval tools for past sessions.	medium	not audited	0/3/0	0/0	2026-10-15 06:16
@neil-ji/dsh-plugin-sidebar-tabs Browser-style tab management for the DSH right sidebar: batch close, float/dock, reopen closed tabs, and a tab overview panel.	low	not audited	0/0/0	0/0	2026-10-15 06:16
@panqing0313/dsh-plugin-weixin 微信（iLink）通道插件：在微信里给 DSH Agent 发消息，在本机跑会话并把回复发回微信。Text, images, files and voice notes.	medium	not audited	0/5/7	0/0	2026-10-15 06:16
@mqnu00/dsh-undici-timeout A configurable direct channel for the DSH LLM egress: a keep-alive undici Agent with adjustable connect/headers/body/keep-alive timeouts, IPv4-forcing, HTTP/2 off by default, automatic stand-down behind a proxy, and a read-only status route. A minimal patch, one file, zero dependencies.	medium	not audited	0/4/10	0/0	2026-10-15 08:16
@po-et/dsh-har-triage Offline HAR diagnostics with minimal evidence for DSH	medium	not audited	0/1/1	0/0	2026-10-15 08:16
@juanbaiing/dsh-alert-inject 给 DSH agent 一个"回答前会出声"的机制：目标锚点、似曾相识检索、重复检测、引用核对、按语境分块的警报判据。零第三方依赖，核心不调 LLM。	medium	not audited	0/4/24	0/0	2026-10-15 08:16
@coolwyz/dsh-skill-map DSH skill map: browse every loaded skill through your own categories in a right-sidebar tab.	low	not audited	0/0/3	0/0	2026-10-15 08:16
@foreee/dsh-app-restart DSH desktop plugin: restart the whole application from Settings (graceful quit + automatic relaunch)	medium	not audited	0/3/2	0/0	2026-10-15 08:16
@kang200862/dsh-firefly-spring-skin DSH 的流萤「春日手信」主题皮肤样板 · Firefly 'Spring Missive' theme skin for the DSH web GUI	medium	not audited	0/1/6	0/0	2026-10-15 08:16
@diwer/dsh-codex-adapter ChatGPT subscription / GPT provider for DSH desktop: image input, host tools and DeepSeek/GPT switching. Harness 桌面版 ChatGPT 订阅适配器，支持图片、工具调用和模型切换。Community MIT plugin.	low	not audited	0/0/5	0/0	2026-10-15 08:16
@chenyifawan-cell/dsh-litellm-extra-headers DSH plugin: inject a body-level extra_headers entry into OpenAI-compatible chat/completions requests for listed providers and upstream hosts (the only injection point that survives a LiteLLM relay).	low	not audited	0/0/0	0/0	2026-10-15 08:16
@stefanydevitoqz-creatorPPP/dsh-edit-resend DSH plugin: edit an already-sent user prompt and resend it - forks a child session whose inherited prefix stops just before that message.	low	not audited	0/0/0	0/0	2026-10-15 08:16
@xt765/dsh-milestone-guard Milestone progress soft-enforcement guard plugin for DSH (阶段性结论软强制守卫插件)	low	not audited	0/0/0	0/0	2026-10-15 08:16
@swdwm5nr4k-sketch/dsh-netflow-dock DSH 服务器流量监测插件：宿主半边采样 /proc/net/dev，浏览器半边在输入框下方显示实时上下行速率。	low	not audited	0/0/1	0/0	2026-10-15 08:16
@yidao2000/dsh-local-background dsh用本地图片做背景图	low	not audited	0/0/6	0/0	2026-10-15 08:16
@chimneyQ/dsh-model-rotator Model auto-ranking and transparent failover for DSH: ranks discovered models and switches to the next candidate when the current one fails with no output.	medium	not audited	0/1/5	0/0	2026-10-15 08:16
@molanxuan-del/DSH-MOTU 墨图 MoTu — 把对话里的代码块渲染成真正的图。DSH 可视化套件：Mermaid / Graphviz / nomnoml / ECharts（含交互）/ Vega-Lite / 手写 SVG，六引擎本地伺服、离线可用、完整性校验。	medium	not audited	0/1/8	0/0	2026-10-15 08:16
@Seren-715/dsh-token-heatmap A daily Token-usage heatmap for the DSH settings page. Aggregated entirely from local session logs; no external requests and no separate usage ledger. ｜ DSH 设置中的每日 Token 用量热力图，数据完全取自本机会话日志，不发起外部请求，亦无需另行记录用量。	low	not audited	0/0/3	0/0	2026-10-15 10:17
@HumXC/dsh-nestquay Workspace groups for the DSH sidebar	low	not audited	0/0/5	0/0	2026-10-15 10:17
@GuanYang14700/dsh-hermes-panel Hermes in the DSH sidebar: gateway + dashboard control, Hermes own health report, and the DSH <-> Hermes bridge. Generated mirror of plugins/hermes-panel - do not edit here.	medium	low	0/17/27	0/0	2026-10-15 10:17
@RaganaBloodedge/dsh-lmmarr DSH 长期记忆插件：分层任务记忆 + 关系图谱 + 索引常驻稳定前缀；零运行时依赖，另附同源的 Agent skill 形态	low	not audited	0/0/1	0/0	2026-10-15 10:17
@dingchenhui0618-arch/dsh-turing-table 图灵圆桌：若干座位由不同模型配置的 agent 扮演，靠提问与交叉印证找出哪些座位是 AI，每局导出逐席位对话 JSONL 与判定记录	low	not audited	0/0/0	0/0	2026-10-15 10:17
@Joe-0202/dsh-archive-manager DSH 归档管理插件：双 Tab 面板管理已归档会话，支持归档/取消归档/彻底删除	low	not audited	0/0/4	0/0	2026-10-15 10:17
@bbskye5008/dsh-task-runner DSH task launcher combining PUA and Completion Guard with frozen acceptance, candidate-bound certificates, and an 8-round / 90-minute cap.	medium	not audited	0/3/4	0/0	2026-10-15 10:17
@Wanyi424/dsh-markdown-notes DSH 桌面端 Markdown 笔记插件：本地保存、公式与图表、拖拽导入和目录迁移。	low	not audited	0/0/1	0/0	2026-10-15 10:17
@dingchenhui0618-arch/dsh-doudizhu Three-player LAN Doudizhu as a DSH floating-window plugin: 54 cards, bidding for landlord, clockwise play and landlord rotation.	medium	not audited	0/5/24	0/0	2026-10-15 10:17
@F1yBear/dsh-open-workspace-any-app dsh,支持自定义应用打开工作区	medium	not audited	0/3/4	0/0	2026-10-15 10:17
@dingchenhui0618-arch/dsh-launch-card 发布卡片：从本地仓库真实产物生成 hero 图、特性网格与双语文案，导出前 lint 掉无法证实的说法	low	not audited	0/0/8	0/0	2026-10-15 10:17
@liuhaolong16/dsh-quote-reply Quote reply layer for DSH: quote a passage into an editable tray above the composer; it rides into the next turn as model context (never into the message body) and shows as an expandable row under that turn. 引用回复层：选中一段进引用行，随下一回合作为上下文注入模型（不进消息正文），回合尾部显示可展开的引用(N)。	high	medium	2/4/9	0/0	2026-10-15 10:17
@liuhaolong16/dsh-hot-refresh One-click hot refresh for DSH client plugins: detect which plugin bundles changed and reload only those; guard whole-graph reloads behind an explicit flag; expose replay counters. 面板一键热刷新：只重载变化的那几个插件，整图重载需显式确认。	high	medium	1/3/7	0/0	2026-10-15 10:17
@fegnze/dsh-browser-computer 让 DSH 直接操作浏览器与电脑：以插件形式装配 playwright-mcp 与 peekaboo-mcp，附一键依赖安装、macOS 系统权限引导与 MCP 连接自检。	medium	not audited	0/2/5	0/0	2026-10-15 12:15
@youchai2016/dsh-plugin-auto-compact 上下文占用达到 50% 时自动压缩（DSH 插件）。Auto-compact a DSH session at 50% context usage.	low	not audited	0/0/6	0/0	2026-10-15 12:15
@Maple-Yoli/dsh-notice-card Focus-free notification cards for DSH on Windows: turn finished, approval pending, question pending.	medium	not audited	0/2/1	0/0	2026-10-15 12:15
@Vincent-chk/dsh-plugin-auxiliary-chat Sidebar auxiliary chat for DSH: right-column panel hosting temporary auxiliary sessions that one-way mirror the main session's context and are deleted when closed · DSH 侧边栏辅助会话插件	low	not audited	0/0/5	0/0	2026-10-15 12:15
@YunLiZeMeng/dsh-window-control	medium	not audited	0/3/9	0/0	2026-10-15 12:15
@JunYingLingLan/dsh-sylphiette-agent 希露菲（Sylphiette）· DSH 角色扮演预设：中文人设 + 453 条六面世界设定按需注入	medium	not audited	0/3/3	0/0	2026-10-15 12:15
@kissfirembx/dsh-skill-map DSH skill map: browse every loaded skill through your own categories in a right-sidebar tab.	low	not audited	0/0/0	0/0	2026-10-15 12:15
@LightingHa/dsh-cc-switch 把 cc-switch 配置的模型供应商接入 DSH（转成 llm-pi-ai 路由，附连通性体检）	low	not audited	0/0/3	0/0	2026-10-15 12:15
@YUYU276/dsh-blue-whale-balance DSH 插件｜DeepSeek 余额动画桌宠：余额卡片、逐密钥观测账目、历史趋势与低余额提醒	low	not audited	0/0/8	0/0	2026-10-15 12:15
@HelloQingTao/dsh-railist Unified rail for the DSH sidebar: sort the top panels and the bottom actions as one list. / DSH 左侧栏统一排序插件：顶部面板与底部动作混排成同一条序列。	low	not audited	0/0/0	0/0	2026-10-15 12:15
@windrover/dsh-prompt-optimizer Prompt optimizer for DSH: rewrite the conversation input draft in place with 15 templates (basic / context / image). 0.2.0-rc.2 adaptation of zhang-jiazhi/dsh-prompt-optimizer, which ports linshenkx/prompt-optimizer.	low	not audited	0/0/6	0/0	2026-10-15 12:15
@HanMaXiao/dsh-hub A floating TODO, Note and Prompt panel for the DSH harness — three tabs, full CRUD, edge docking, grid and list views.	low	not audited	0/0/3	0/0	2026-10-15 12:15
@Lumos0121/dsh-deepseek-chat DSH Desktop sidebar plugin: open chat.deepseek.com in the right sidebar or the system browser, read the conversation back into the current session, and edit its own hover texts. 91 offline tests.	medium	not audited	0/2/5	0/0	2026-10-15 12:15
@lucas07814-hub/dsh-pet-guardian-dragon An AI-agent-assisted DSH desktop pet plugin, built as a personal learning project for development, debugging, and open-source sharing.	low	not audited	0/0/8	0/0	2026-10-15 12:15
@wei125775-lab/dsh-whale-run dsh-whale-run — a hidden mini-game plugin for DSH desktop. 把 dsh 界面上那只鲸鱼摘下来，放到输入框上方的跑道上跑一局。	medium	not audited	0/1/3	0/0	2026-10-15 12:15
@DriverWangNB/dsh-model-manager 控制dsh会话界面显示的模型	medium	not audited	0/1/3	0/0	2026-10-15 14:16
@xinyang20/dsh-campus-seu 东南大学校园主题插件：校园配色、九龙湖与四牌楼风景、可选叮东，适配 DSH Web。	medium	not audited	0/1/5	0/0	2026-10-15 14:16
@theroi/dsh-bg-panel DSH 个性化插件：自定义背景 + 半透明玻璃 + 主题色	medium	medium	0/5/6	0/0	2026-10-15 14:16
@ygnstudio/dsh-plugin-session-cost DSH 会话费用估算、账号余额与额度监控插件	medium	not audited	0/1/7	0/0	2026-10-15 14:16
@youchai2016/dsh-plugin-token-bucket 余额水桶：水位就是你的 DeepSeek API 余额，出水口流出的是正在花的钱。A bucket that drains while your DeepSeek API balance is being spent (DSH plugin).	low	not audited	0/0/2	0/0	2026-10-15 14:16
@henrikdukefoss/dsh-standardcompute Standard Compute provider for DSH: OpenAI-compatible route with a cost router and direct model pins	low	not audited	0/0/1	0/0	2026-10-15 14:16
@DDDMUC/dsh-preset-workbench 在 DSH设置页里创建/编辑 agent 预设的可视化工作台：分段提示词 + 能力开关 + 内置模板。A visual agent-preset workbench for DSH.	high	low	1/7/7	1/7	2026-10-15 14:16
@R1145141919810/dsh-vulnclaw-pentest VulnClaw penetration-testing mode for the DSH: nmap, HTTP probing, directory/JS recon, traffic evidence, reports and PoCs as native Harness tools. Based on VulnClaw (MIT) by UncleC.	medium	medium	0/6/23	0/0	2026-10-15 14:16
@jonah791/dsh-agent-quant-cn	medium	not audited	0/2/1	0/0	2026-10-15 14:16
@var-lin/dsh-plugin-layout-organizer dsh插件，整理dsh里插件按钮的布局	low	not audited	0/0/2	0/0	2026-10-15 14:16
@taxueseek/dsh-models 模型选择 · 子代理路由 · 推理层级 — DSH Web GUI 的三分区模型菜单插件	medium	low	0/1/6	0/0	2026-10-15 14:16
@jonah791/dsh-agent-reconstruction	low	not audited	0/0/1	0/0	2026-10-15 14:16
@ygnstudio/dsh-plugin-title-oil DSH 会话自动命名插件：类别 emoji + 对象｜目标	low	not audited	0/0/2	0/0	2026-10-15 14:16
@Makk9609/dsh-find-viewer Find bar for DSH sidebar text previews: whole-file match count, highlighted hits, and jumps.	low	not audited	0/0/0	0/0	2026-10-15 14:16
@oliblue-evan/dsh-peakclock 峰谷倒计时：在 DSH 模型名称中显示 DeepSeek 峰谷状态与倒计时，支持实时预览与紧凑设置。	medium	not audited	0/3/8	0/0	2026-10-15 14:16
@InoriMutsumi/dsh-grill-first	low	not audited	0/0/2	0/0	2026-10-15 14:16
@nvjaasouid/dsh-pending-session DSH 插件：未发送的会话草稿留在侧边栏标为「待执行」，可随时修改发送删除。删除不可恢复。	low	not audited	0/0/6	0/0	2026-10-15 14:16
@blacktaoK/dsh-skill-zh-overlay 给 dsh-skill-mcp-panel 的技能卡片加中文说明浮层，中英对照，9 个技能已收录。	low	not audited	0/0/0	0/0	2026-10-15 16:22
@yutao8/dsh-custom-style 给 DSH 注入你自己的 CSS：在设置界面里新增的「自定义样式」一栏直接编辑样式文件，即可调整弹窗宽度、导航宽度、字号与内容居中；约两秒生效，不改应用本体、无需重启。｜ Inject custom CSS into the DSH GUI from a new Custom CSS section in Settings — dialog width, nav width, font size and content centering; applied in about two seconds, no app patching or restart.	medium	not audited	0/4/12	0/0	2026-10-15 16:22
@wmk66ds/dsh-vision-unlock 去掉 DSH「当前模型不支持图片」的拒绝限制：不改 app.asar，用运行时接缝放行未声明多模态能力的模型	low	not audited	0/0/0	0/0	2026-10-15 16:22
@puyokura/dsh-1tempo DSH plugin: convert a request into MiL with Sarashina, review it, then hand it to the model dsh is running (TUI and Web UI)	low	not audited	0/0/4	0/0	2026-10-15 16:22
@mimetics-ai/mimetics-dsh-weekly-report DSH 工具插件：一句「帮我生成本周周报」即得固定四模块 Markdown 周报；内置流水线，装上即用。	medium	not audited	0/4/6	0/0	2026-10-15 16:22
@yusunz/dsh-plugin-noworkspace-session Adds sessions without a workspace to DSH	low	not audited	0/0/0	0/0	2026-10-15 16:22
@ztl0001/dsh-notify Windows notifications when a DSH task finishes	low	not audited	0/0/3	0/0	2026-10-15 16:22
@lishuo4096/dsh-wch-debug Drive WCH CH32 microcontrollers from the CLI through an isolated private copy of WCH's OpenOCD plus WCH-Link. DSH plugin: 20 tools + an agent skill. MIT.	medium	not audited	0/3/9	0/0	2026-10-15 16:22
@jonah791/dsh-session-handoff	low	not audited	0/0/1	0/0	2026-10-15 16:22
@BoxMiao007/dsharbor 一个 DSH Web 的轻量启动器	medium	low	0/8/12	0/0	2026-10-15 16:22
@Elysia126/dsh-video-grab	medium	not audited	0/4/4	0/0	2026-10-15 16:22
@shuang-ying/dsh-ThirdApi-ThinkingMode "DSH bundle that syncs per-model thinking levels from each endpoint's own model listing	low	not audited	0/0/11	0/0	2026-10-15 16:22
@immortal-akx/dsh-session-tool	low	not audited	0/0/4	0/0	2026-10-15 16:22
@fffcodefox/dsh-opencode-doctor Availability-probed OpenCode Go / Zen model routes for DSH — ships an availability-annotated catalog so you can see which models actually work (region blocks, empty balance, client-only free tiers) before you pick one.	medium	not audited	0/3/11	0/0	2026-10-15 16:22
@reaxlll/dsh-workspace-memory DSH工作区内跨会话记忆插件	low	not audited	0/0/2	0/0	2026-10-15 16:22
@tomandpotato/dsh-chess-board 在 DSH右侧边栏里下国际象棋：完整规则、八档内置对手、lichess 云端评估 / 复盘 / 战术题，中英双语。· A chess tab for DSH: full rules, built-in opponent, lichess eval, review and puzzles.	medium	not audited	0/3/14	0/0	2026-10-15 16:22
@ShirohaChan/dsh-session-artifacts Delete a DSH session together with the workspace artifacts that session produced - the file list is reconstructed from the session log and previewed with its total size. The artifacts can also be deleted on their own, keeping the conversation.	low	not audited	0/0/3	0/0	2026-10-15 16:22
@lishuo4096/dsh-mcu-debug DSH 插件：STM32 / PY32 调试与烧录（CMSIS-DAP / DAPLink / openocd）+ 串口收发。内置独立 openocd 副本，不碰你的 IDE 树。	low	not audited	0/0/0	0/0	2026-10-15 16:22
@shellexy/dsh-manuscript 稿本：给 DSH 补上回答署名、修订分支与常驻大纲侧栏	low	not audited	0/0/5	0/0	2026-10-15 16:22
@Salty-Mocha/dsh-ops-mac macOS (Apple Silicon) port of dsh-ops — Rust-powered file tools & PTC batching for DSH. Ported from T-Auto/dsh-ops.	medium	not audited	0/1/2	0/0	2026-10-15 16:22

Site-wide fused risk

Static + vet fused, dynamic raises applied (raise-only); 23166 entries in total

2026-10-21

266

critical

high

195

medium

22354

low

Critical-tier plugins (266)

claude-paper dsh-sentinel dsh-review-loop deepseek-harness-fnos dsh-for-vsc pi-mm-vision dsh-plugin-verify ds-web-ui deepseek-harness-desktop-7 dsh-plugin-manager dsh-fff deepseek-harness-plugins dsh-desktop-pet-2 dsh-science-workbench dsh-lan-2 dsh-workshop deepseekharnessremotegateway dsh-lorebookmd dsh-plugin-market-5 dsh-file-panel dsh-np-ppt deepseek-harness-android-app dsh-web-remote dsh-self-harness-tools dsh-change-review dsh-hotswap makocode dsh-skill-mcp-panel dsh-tavern-2 dsh-mc-agent dsh-web dsh-doctor-4 dsh-design-studio dsh-tailscale-console dhs-theme-plugin deepseek-harness-molt dsh-command-check-update dsh-auth-gate dsh-silly-plugin opendsh dsh-tool-code-review dsh-task-console dsh-agent-eval-2 deepseek-harness-plugins-3 dsher-bbs-plugin deepseek-harness-plugs-manage dsh-dev-server dsh-about-updater dsh-toolbox-web dsh-remote-public dsh-notifier-2 dsh-plugin-container dsh-desktop-huacai deepseek-herness-desktop paperlab chromex-browser dsh-github-tool dsh-lan-access-3 dsh-custom-ui dsh-pet-6 desk-harness dsh-plugin-lark dsh-webgate dsh-tavern-3 dsh-anchored-monitor dsh-neutrino living-dream-dsh dsh-comfyui dsh-desktop-68 dsh-wechatclawbot orbit-dsh-plugin dsh-perm-guard dsh-cc-plugins dsh-tool-generate-image dsh-routed-subagent dsh-swarm dsh-nuphus-mcp dsh-lark-all dsh-ide-panels chat-deepseek-vision deepseek-harness-liquid-glass-theme dshscan dsh-pwsh-direct dsh-capcheck dsh-minecraft-theme dsh-plugin-market-20 dsh-diffgeom dsh-remote-7 dsh-logcat dsh-ide-bridge dsh-mail-connector dsh-fleet dsh-desktop-tools-2 dsh-usage-6 dsh-mobileshare dsh-plugin-market-22 dsh-profile-port tavern-launcher dsh-file-links pdfreader dsh-publish-plugin dsh-workshop-3 dsh-qq-remote dsh-settings-pro dsh-github-push dsh-web-remote-frp dsh-pentester dsh-tool-lens dsh-testsuite codereader dsh-webroad weave-for-dsh dsh-tool-git-3 dsh-memory-eternal dsh-capability-manager dsh-arbitrary-host dsh-plugins-76 dsh-store dsh-lanchat dsh-k8s dsh-worktable dsh-tts-player dsh-agent-browser-2 dsh-image-read dsh-stats-expand dsh-usage-stats-11 dsh-input-enhancement dsh-safe-launch dsh-balance-plugin-6 atri-for-dsh convoport dsh-experience-library deepseek-harness-desktop-54 dsh-relay-2 dscoder dsh-inline-images-2 dsh-community-plugins-2 dsh-process-board dsh-rtk-tools dsh-plugin-offline-packager dsh-asset-manager dsh-vsceditor dsh-suhuang-scroll dsh-free-models-hub dsh-freeroute dsh-bg-plugin dsh-sandbox-permissions-not-strictly-wider-justification-empty-fix dsh-applauncher dsh-public-access dshessentialtools dsh-qrcode-hassle-free dsh-call-shrink dsh-automation-3 dsh-skill-hub-3 dsh-desktop-102 dsh-kit-4 dsh-plugin-ollama-monitor dsh-smart-reminder dsh-plugins-94 dsh-4-role-workflow dsh-raw-html-v2 dsh-gb dsh-git-review-2 dsh-plugin-canvas-pro dsh-search-pro dsh-git-9 dsh-tmwebdriver dsh-fleet-2 dsh-cc-backup dsh-token-pulse phone-tunnel-pool see-the-screen deepseek-harness-minimal-omni dsh-plugin-forge-5 dsh-session-progress dsh-move-rag dsh-cad-viewer dsh-agentic-proxy dsh-wechat-bridge-5 dsh-windows-remote-ssh dsh-remote-file-system dsh-better-display-2 dsh-better-uiux dsh-default-prompt dsh-agent-cluster dsh-sidebar-plus vscode-dsh-sidebar dsh-agnes-studio dsh-youdaonote dsh-plugin-repo-snapshot dsh-netease-music-2 dsh-lobsterai-daddy dsh-cua-preview dsh-buddy-spike dsh-novel-app dsh-desktop-settings dsh-zcode-connector anoslide-plugins dsh-destinywind-tpm dsh-waker voice-input dsh-draw-plugin dsh-ipynb-preview dsh-ask-form dsh-remote-access-cidr dsh-genbox-plugin dsh-wsl-projects dsh-mcp-unified-panel dsh-archive-keeper-plugin dsh-nutstore-backup dsh-kp-notes dsh-flow-3 dsh-aoci dsh-service-board cad-ppt-skills dsh-wb dsh-web-app dsh-text-explain dsh-ledger-memory dsh-artcraft dsh-remote-13 zadloop-ultimate-toolkit dsh-ai-ball dsh-mcp-manager-19 dsh-deploy-web dsh-plugin-cdp dsh-upgrade-2 dsh-envkit dsh-desktop-app-4 dsh-pwa-launcher dsh-steal-code dsh-tools-5 dsh-helper-plugin-workspace-browser dsh-console-plugin dsh-olivia-bridge dsh-obsidian-sync-2 dsh-git-server dsh-android-scrcpy zcode-dispatch dsh-armor-switch dsh-tool-suite pi-control-chrome dsh-skill-market-4 dsh-chatsync dsh-liquid-glass-theme-2 dsh-remote-gui dsh-plugins-151 dsh-plugin-30 dsh-skill-creator-5 dsh-xl-free-model dsh-browser-agent-4 dsh-plugin-market-30 dsh-maplestory-wz dsh-tool-mathfig dsh-phone-bridge-3 dsh-latex-studio dsh-6 dsh-brand-text mindie-agent-dsh dsh-bili-scroll-2 wa-agent dsh-opencode-free-3 dsh-phone-remote-2 dsh-android-phone dsh-dispatch-2 dsh-pocket-oauth

Static heuristic scan + manifest audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.

Daily report archive

66 reports

← Back to security reports

What does this daily report cover?

This report covers plugins first indexed by dsh.so on 2026-10-15. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.

How are the risk tiers assigned?

Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.

Why is this not a full security audit?

The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.

What does the "Manifest" column mean?

Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.

Is the static scan the only layer?

No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusions can raise a verdict but never exempt one. The verdict shown across the site is the stricter of the two (max of static and dynamic). This daily report reflects the static layer. As of the latest run: 1898 dynamic audit records, 1767 with a model conclusion, 258 raised above the static verdict, 0 lowered below it.

Source: dsh.so security standards · Maintained by dsh.so · Published 2026-10-15