Daily security scan
Date · 2026-10-24 (UTC — plugins first indexed that day)
Static scan · new today
rule heuristics · shape only2
critical
8
high
73
medium
83
low
Tier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low.
Dynamic audit · subset of new today
model reads source · no execution0
critical
0
high
0
medium
0
low
Tier = highest finding. Of 166 new entries: 0 with a conclusion, 83 queued, 0 failed (no conclusion), 83 low-risk not queued.
Data file updated 2026-10-25 07:42 (UTC+8)
| Plugin | Static | Dynamic | Findings C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|
| @Exagone313/dsh-draft-prompts Adds a right-sidebar tab for drafting prompts in DSH | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 00:16 |
| @hrygo/dsh-speechrail-bundle Independent DSH voice-input bundle: browser recording transcribed by a local SpeechRail service over the OpenAI-compatible file-transcription API (loopback only). | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 02:16 |
| @Ayowait/dsh-official-reasoning-effort Official-style model + reasoning-effort control for the DSH composer: Off/Low/High/Max. | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 02:16 |
| @Idun233/dsh-gen DSH 的技能（Gem）管理器：把可复用的指令与本地知识文档打包成模型可调用的技能，并提供设置面板里的 Dsh-Gen 页面。 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 02:16 |
| @lingr7/dsh-reversed-chat Reverses the conversation reading layout for DSH: the composer pins to the top of an active conversation and the transcript plus turn navigator render newest-first. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 02:16 |
| @Leni-More/dsh-conv-calendar 把「每天发了多少条对话」画成 GitHub 提交日历那样的方格图，挂在 DSH Web 界面左侧栏里。A GitHub-style contribution calendar for DSH — see how many prompts you sent, how many conversations you had, and how many tokens you burned, one square per day. | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 02:16 |
| @379385796-sys/dsh-environment-packer Local DSH private backups, conservative config export, and verified restoration into a fresh compatible home. | medium | queued | 0/9/5 | 0/0 | 2026-10-24 02:16 |
| @saul-dsh/dsh-siri-voice Siri-style running-light visualizer for the DSH composer: a glowing wave band appears above the input while voice recording is active. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 02:16 |
| @gitend/dsh-usd-brep dsh-usd-brep | high | queued | 1/2/2 | 0/0 | 2026-10-24 02:16 |
| @topkie/dsh-lattice DSH 的本地记忆插件：把值得长期复用的知识写成带主题与关联的条目，之后按语义召回；数据存在本地 SQLite 库里，向量模型首次使用时下载，之后离线可用。 | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-10-24 04:16 |
| @zx2021210538/dsh-skills-mcp-manager DSH 插件：在设置面板里管理技能（SKILL.md）与 MCP 服务器，全局 / 项目级分层，改完即生效。Manage skills and MCP servers from the DSH settings panel. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 04:16 |
| @ivanant/dsh-workspace-sidebar 让 DSH 的侧边栏按工作区共享 | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-10-24 04:16 |
| @liu-joy2026/dsh-selective-memory | medium | queued | 0/3/3 | 0/0 | 2026-10-24 04:16 |
| @qwqasdna/dsh-plugin-auto-vision DSH 智能视觉模型增强插件：自动注入图片输入模态，解决第三方 Claude / GPT-4o / Gemini 识图降级与无法识别图片问题 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 04:16 |
| @SnailMann/dsh-quick-model-selector quick model selector for DSH | medium | queued | 0/1/8 | 0/0 | 2026-10-24 04:16 |
| @SnailMann/dsh-credit-checkin-hub workbuddy\qoder\trae\minimax daily credit checkin | high | queued | 1/1/6 | 0/0 | 2026-10-24 04:16 |
| @ZHUBAI0528/dsh-client-ui-aqua-community-fix Aqua 玻璃质感主题 · 适配 DSH V0.2.1-rc.2 · glassmorphism theme for DSH: adjustable blur/frost, fluid or wallpaper backdrop, unified corners; toggle off for the stock UI, no source changes | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 04:16 |
| @yimengsuper2432/dsh-agent-personality 这是一个DSH的情感人格插件 | medium | queued | 0/1/6 | 0/0 | 2026-10-24 04:16 |
| @cholot-Zhou/dsh-ui-overrides User-owned CSS overrides for the DSH Web UI — restyle any plugin without patching it. | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 04:16 |
| @mkingyixing/AI-QR-code-scanning- QR/barcode scanner for DSH: decode images, the live screen or a webcam with zxing-cpp (WASM), and generate QR codes. 4 model tools, ~14 ms per decode. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 04:16 |
| @zz12hui/dsh-local-writing-suite DSH 本地插件：小说写作流水线（状态落盘、写前门禁、三视角审稿）+ 文档去 AI 味审查（七维打分、8 体裁、blocking 分级） | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 04:16 |
| @chameleonn4/dsh-codex-history DSH 插件：自动读取本地 Codex 会话历史，让 DSH 与 Codex 无缝衔接 | medium | queued | 0/2/6 | 0/0 | 2026-10-24 04:16 |
| @lhmlhmlhm11/resume-crafter 口述经历 → 可投递简历 → JD 定制 → 投递体检 → 面试准备 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 04:16 |
| @godcide/dsh-sidebar-organizer 本插件用于将 DSH 左侧栏工作区上方和下方的按钮/面板折叠成可展开分组，并允许手动调整排序；特定按钮/面板可通过「显示 / 摘要 / 悬浮」方式避免折叠，（预期）能对复合条目与图表整块生效。 | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 04:16 |
| @lvsun080403/local-voice-oneclick 给 AI 编程助手装上耳朵和嘴：Qwen3-ASR 转写 + Qwen3-TTS 音色克隆，全程离线，双击 install.bat 装完，DSH 输入框旁边点一下就能说。 | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 04:16 |
| @AlbertZJ/dsh-penpot Penpot inside DSH as a native plugin — REST/RPC tools (no MCP) + design-review and handoff skills | low | not queued (low risk) | 0/0/8 | 0/0 | 2026-10-24 04:16 |
| @shudaozhang/dsh-connect-zcode | medium | queued | 0/8/12 | 0/0 | 2026-10-24 04:16 |
| @aldveylor/dsh-intellisense A plugin implemented for namespace-based tool calls for DSH. | medium | queued | 0/8/0 | 0/6 | 2026-10-24 04:16 |
| @toyangshome/dsh-cradle Cradle — sovereign agent diplomacy with a pixel room and agency: DSH plugin (host + web), the dsh-net/1.0 Discovery Server in Go, a multi-agent simulator and tests. | medium | queued | 0/1/4 | 0/0 | 2026-10-24 04:16 |
| @SeekAfterSeek/dsh-chrome-only DSH bundle: every browser navigation goes to Google Chrome - tools, guard, prompt rule, and a Chrome handoff so dsh web never opens the OS default browser. | medium | queued | 0/4/4 | 0/0 | 2026-10-24 04:16 |
| @GGGengXXX/make-dsh-better DSH setup notes and reusable agent skills | low | not queued (low risk) | 0/0/9 | 0/0 | 2026-10-24 04:16 |
| @0avatar0/dsh-ai-book-shelf AI Book Shelf / AI 书架：书籍与论文阅读、AI 解释、全文搜索、论文翻译与中英对照 | medium | queued | 0/4/5 | 0/0 | 2026-10-24 06:16 |
| @Imzl-zl/dsh-redo DSH 插件：编辑或重试已发送的消息并原地重新生成。Edit or retry sent messages and regenerate in place for DSH. | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 06:16 |
| @Sheep1x/dsh-aimy dsh-Aimy — DSH 插件：用 Aimy 中转站的模型并真实切换分组（兼容 new-api / sub2api） | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 06:16 |
| @FelixJiashengFu/dsh-muse-code Muse Code for DSH：输入框开关打开右侧边栏 Muse Code 面板，聊天工具共享同一会话，默认 $10 硬性花费上限 | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-10-24 06:16 |
| @samir2015dzh/dsh-skill-studio-plus Self-improving skill pipeline for DSH: per-turn judgement, auto-accept, semantic merge, DSH-native models | medium | queued | 0/4/28 | 0/0 | 2026-10-24 06:16 |
| @TangerineSplendor/dsh-screenshot Windows screenshot plugin for DSH: live desktop selection, annotations, global hotkey, and direct image insertion. | medium | queued | 0/6/9 | 0/0 | 2026-10-24 06:16 |
| @Zhucy123/dsh-delegation Delegate work to a local DSH instance from any coding agent: persistent conversations, push-based replies, native image input. Zero dependencies. | medium | queued | 0/3/9 | 0/0 | 2026-10-24 06:16 |
| @penguinbing/dsh-alk-pet | medium | queued | 0/1/6 | 0/0 | 2026-10-24 06:16 |
| @regrevia/dsh-fast-mode DSH 自己的 fast 模式：按步骤自适应思考档位 + 按档位批量并行工具调用，零依赖；只使用当前路由真正声明过的档位，官方 API 与自建网关都支持。 | medium | queued | 0/1/4 | 0/0 | 2026-10-24 06:16 |
| @yangstarkone/dsh-default-workspace-session-dir DSH plugin: one timestamped output folder per session in the default workspace, removed when the session is archived. | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-10-24 06:16 |
| @hj9178/dsh-throwtomatoes-plugin Throw tomatoes at the model: the send key becomes a tomato key while a task runs. A DSH plugin. | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-10-24 06:16 |
| @nwasvsad/dsh-task-digest DSH plugin: nightly per-task token, cost, and result digest for the previous day's Sessions | medium | queued | 0/3/7 | 0/0 | 2026-10-24 06:16 |
| @YumenoSayuri/dsh-reasoning-efforts 给第三方 provider 的模型按关键词自动挂上思考强度档位（off/low/medium/high/max），新增模型后无需手动配置 | medium | queued | 0/1/2 | 0/0 | 2026-10-24 06:16 |
| @lishinho/dsh-quality-lens Quality and topic-coverage radar for every DSH answer: evidence-backed reports plus copy-ready prompt fixes. Observational, local-first, optional Jev review. | medium | queued | 0/4/7 | 0/0 | 2026-10-24 06:16 |
| @QinLuza/dsh-aisketch AISketch for DSH: semantic conversation cards (table, flowchart, draw, teaching figures) + expression-driven function plots. MIT, zero base changes. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 06:16 |
| @Janrilw/dsh-gear-mode 会话级行动档位：P/R/N/M/D/A + 手刹 H，换挡即注入行为约束提示词 | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 06:16 |
| @codeora-Kayson/dsh-cost-meter DSH 插件：输入框下方显示峰谷时段、本会话/本轮费用与账户余额 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 06:16 |
| @chisato-lycoreco/dsh-serene Persona, emotion & memory for DSH. 人格是数据，情绪是状态，记忆是文件——把「一个会记得你的角色」接进 DSH。 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 06:16 |
| @nwasvsad/dsh-task-plan DSH plugin: off-peak task plan table that runs pending tasks as concurrent Sessions | medium | queued | 0/2/6 | 0/0 | 2026-10-24 06:16 |
| @Eveneve-night/dsh-plugin-steward Manage DSH plugins from the chat composer: list, switch, configure, and gate tools per conversation. | medium | queued | 0/1/7 | 0/0 | 2026-10-24 06:16 |
| @xiaoxiaomoyu/dsh-next-suggestion DSH Web 输入框「下一句」预测：每轮回复后给候选，点击 / Tab / → 填入。 | medium | queued | 0/1/8 | 0/0 | 2026-10-24 06:16 |
| @MingHuanYue/dsh-iter-memory ????:???????????? + ???????? DSH ?? | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-10-24 06:16 |
| @Awenforever/dsh-ustc-quota Live 3h/12h/24h USTC token quota card for DSH and USTC TokenWorks | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-10-24 06:16 |
| @nwasvsad/dsh-plugin-market Custom DSH plugin market index for dsh-task-plan and dsh-task-digest | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 06:16 |
| @limingyao-xx/dsh-sidebar-mobile-browser | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 06:16 |
| @Mw-HbCK/dsh-knowhub 知枢 KnowHub — DSH 全局知识中心与项目长期记忆：知识库、Repo Wiki、审核与版本、增量更新、检索与上下文注入、自动提炼、备份恢复、中文面板 | medium | queued | 0/1/1 | 0/0 | 2026-10-24 06:16 |
| @xyzzing/dsh-minder-hooks | medium | queued | 0/1/0 | 0/0 | 2026-10-24 08:16 |
| @zengxiaolou/dsh-session-rail | medium | queued | 0/2/6 | 0/0 | 2026-10-24 08:16 |
| @zengxiaolou/dsh-annotate-browser DSH 标注浏览器插件：自己实现的零依赖 CDP 客户端 + 输入框上方标注面板（点选元素→写备注→插入对话），不依赖任何第三方浏览器插件 | medium | queued | 0/4/10 | 0/0 | 2026-10-24 08:16 |
| @L050110/dsh-vx-workbench Visual X-Space workbench for DSH: signature-based CAD import repair, parameterised factory layouts, self-maintaining skill ledger | medium | queued | 0/5/10 | 0/0 | 2026-10-24 08:16 |
| @Idun/dsh-gen DSH 的技能（Gem）管理器：把可复用的指令与本地知识文档打包成模型可调用的技能，并提供设置面板里的 Dsh-Gen 页面。 | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 08:16 |
| @zengxiaolou/dsh-device-mirror | medium | queued | 0/1/5 | 0/0 | 2026-10-24 08:16 |
| @Dongze502/dsh-session-to-doc Reorganize a DSH session into a structured Markdown document with outline and TOC (model tool + composer button + loopback endpoint) | medium | queued | 0/2/3 | 0/0 | 2026-10-24 08:16 |
| @MingTXin/dsh-remote-workstation Mount remote SSH/SFTP servers as DSH workspaces - a VS Code Remote-SSH style remote workspace panel for DSH. | critical | queued | 2/0/5 | 0/0 | 2026-10-24 08:16 |
| @zengxiaolou/dsh-github-link | medium | queued | 0/1/6 | 0/0 | 2026-10-24 08:16 |
| @HimA6652/dsh-workbuddy2api-hub 把本地 workbuddy2api-hub 接进 DSH：模型路由 + 额度与用量徽标 | medium | queued | 0/5/12 | 0/0 | 2026-10-24 08:16 |
| @cherish-ltt/dsh-dev-workflow /dev-pre-check 、 /dev-feat 、 /dev-fix 、 /dev-refactor 、 /dev-test 与 dev_ask 结构化提问工具。 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 08:16 |
| @JHees/dsh-unattended Unattended mode for DSH Auto review: reviewer denials become final with no human approval prompt | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 08:16 |
| @WU079/dsh-memory-keeper Cross-session memory for DSH: exports every session to readable Markdown with provenance, keeps a MEMORY.md you curate, and gives the agent mem_wake / mem_search / mem_write — memory that survives windows. | medium | queued | 0/8/7 | 0/0 | 2026-10-24 08:16 |
| @propzhang/dsh-memory-unlocked Memory-unlocked: a DSH plugin that recalls earlier workspace history through the official session-query service. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 08:16 |
| @7gzgn/dsh-frame See what a conversation actually costs: how many model requests, how big the system prompt and tool table are, cumulative tokens, estimated spend, and how far you are from automatic context compaction. Reads the local session log only; never calls a model, never adds a word to the system prompt. | medium | queued | 0/1/2 | 0/0 | 2026-10-24 08:16 |
| @ck99998888/dsh-video-reader DSH plugin: watch, listen to, and look at video/audio files and the live desktop — local only (whisper.cpp + sherpa-onnx + ffmpeg). | medium | queued | 0/5/9 | 0/0 | 2026-10-24 08:16 |
| @HugoOu/dsh-opencode-go-eta OpenCode Go quota forecast for DSH: projected exhaustion ETA, renewal-date comparison and renew-vs-API cost advice. | medium | queued | 0/3/7 | 0/0 | 2026-10-24 08:16 |
| @wuzhican/dsh-qbittorrent DSH plugin: qBittorrent WebAPI v2 tools | medium | queued | 0/1/5 | 0/0 | 2026-10-24 08:16 |
| @JularDepick/dsh-question-timeout-protection A plugin for dsh: once ask_user_question times out, the content you entered will remain in the UI or model context. | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 08:16 |
| @abyss2021/dsh-glass-skin | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-10-24 08:16 |
| @hongdougao111/dsh-archive-trash DSH 归档会话清理：把已归档的会话移进可还原的回收站，或彻底删除。 | medium | queued | 0/1/2 | 0/0 | 2026-10-24 08:16 |
| @Limooning/DSH-API-Hub Manage local API providers and skills inside DSH: probe, balance, models, and register them as DSH model routes | medium | queued | 0/1/10 | 0/0 | 2026-10-24 08:16 |
| @7gzgn/dsh-tool-gate Park whole tool packs out of the session's tool surface and mount them back with one command. Cuts the tool table from 99,789 to 48,082 characters (51.8%) without uninstalling plugins or restarting. Reversible per group, per agent. | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 08:16 |
| @CurrentRajAdapt/Deepseek-Harness-2026 ⭐️ DSH: an AI agent where every module can be replaced ⭐️ | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 08:16 |
| @rvaim/dsh-preset-manager | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 10:16 |
| @marya505/dsh-fs-compact Token-lean filesystem tools for DSH (fs_read / fs_grep / fs_glob / fs_replace). | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 10:16 |
| @ztlovelsw/dsh-ui-picker 点选前端页面任意 UI 控件，自动把控件详情（CSS 选择器/XPath/组件名/样式）写入 DSH 输入框，让 AI 精准定位要改的界面元素。 | medium | queued | 0/4/17 | 0/0 | 2026-10-24 10:16 |
| @ZSF-2026/qq-memory DSH 长期记忆 + 遗忘曲线插件：让 AI 记住跨会话的事、按需回顾上下文，用艾宾浩斯遗忘曲线让旧记忆自然淡出以节约 token | medium | queued | 0/1/2 | 0/0 | 2026-10-24 10:16 |
| @yiyunet/dsh-proxy-egress 本地出口代理（egress）桥：给只接受无凭据代理地址的消费方一个本地地址，账号密码在上游那一跳注入。失败即断联，无直连降级。 | DSH plugin: a local egress proxy that hands a credential-free proxy URL to consumers that reject credentials, then injects the upstream auth on the hop that needs it. Fail-closed — no direct fallback, ever. | medium | queued | 0/1/17 | 0/0 | 2026-10-24 10:16 |
| @imyelo/dsh-web-search-auto 🔎 A DSH web search plugin that routes across several search backends, with automatic failover. | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 10:16 |
| @ugg-ki/dsh-skill-manager Standalone Skills page for DSH: every skill listed with an enable switch at global, project and session scope; custom categories; Chinese descriptions. | high | queued | 1/0/2 | 0/0 | 2026-10-24 10:16 |
| @ccsert/dsh-subagent-hub Named roles, model route guards, and request-model visibility for official DSH subagents. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 10:16 |
| @feely0208/dsh-image-batch 图片批量处理：压缩 / 改尺寸 / 加水印 / 转格式 / 去 EXIF（Pillow） | medium | queued | 0/2/2 | 0/0 | 2026-10-24 10:16 |
| @dafantong01/dsh-memory-palace DSH plugin: archive conversation turns into a workspace-local, searchable memory palace. | medium | queued | 0/8/5 | 0/0 | 2026-10-24 10:16 |
| @CoCoCoDeDeDe/dsh-session-notifier | medium | queued | 0/7/6 | 0/0 | 2026-10-24 10:16 |
| @only-one-over/robocasa-control Chat-driven RoboCasa simulation control plugin for DSH | medium | queued | 0/3/8 | 0/0 | 2026-10-24 10:16 |
| @Elysia-laoda/dsh-creativity-nudge DSH 插件：在模型锁定路线的那一刻注入一次「先发散」提醒 —— 低频、硬预算、只落在决策点。Advisory creativity nudge for DSH. | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 10:16 |
| @Mys12word/dsh-file-tracker DSH plugin: shows which files and directories the agent touched (directory view + timeline) | medium | queued | 0/2/8 | 0/0 | 2026-10-24 10:16 |
| @feely0208/dsh-csv-lab CSV 数据工具箱：切分 / 去重 / 字段校验 / 清洗 / 合并 / 转 Excel，自动识别编码与分隔符 | medium | queued | 0/1/2 | 0/0 | 2026-10-24 10:16 |
| @lukeinx/dsh-remote-wecom DSH plugin: control Desktop sessions from WeCom (企业微信) on your phone | high | queued | 2/18/6 | 0/0 | 2026-10-24 10:16 |
| @lenrendre/dsh-screenshot-native ??????? for DSH(Windows):???????????????????Shift ??????? | medium | queued | 0/2/2 | 0/0 | 2026-10-24 10:16 |
| @BOOK-4-1/dsh-highlight-link 让 DSH Web UI 里的链接和 `@` 引用更醒目：统一成一种颜色 `#7b97d9`，链接常驻下划线。 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 10:16 |
| @lukeinx/cursor-to-dsh DSH plugin: Cursor models as the cursor LLM provider, one Cursor agent per DSH session | low | not queued (low risk) | 0/0/7 | 0/0 | 2026-10-24 10:16 |
| @Gorkaseto/dsh-plugin-updater A plugin updater for DSH. It finds the plugins in your profile that were installed from GitHub, compares versions and updates them — one at a time or all at once. | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 10:16 |
| @csukingzq/dsh-pdf-translator AI vision PDF translation and LaTeX reconstruction for DSH | medium | queued | 0/3/7 | 0/0 | 2026-10-24 10:16 |
| @MrChengl11/Stop-That-Shit-DSH 二次开发 (derivative work)：Stop That Shit 的 DSH 适配层。上游 lennney/stop-that-shit v0.2.5 (MIT)，判定引擎原样收录于 vendor-sts/，本仓库仅新增宿主粘合层。 | medium | queued | 0/3/2 | 0/0 | 2026-10-24 10:16 |
| @Limnal-Ash/dsh-skill-manager dsh的一个关于skill管理的插件 | low | not queued (low risk) | 0/0/7 | 0/0 | 2026-10-24 10:16 |
| @luckyunhao/dsh-memory-wbh DSH 记忆库 + Workbench 插件：自动沉淀/召回、技能、新闻、记忆审核、RAG 问答、成本估算、会话导出与代码文件预览。 | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 10:16 |
| @JiuRiWu/dsh-restart Restart button for DSH Desktop. Requires the companion shell patch in this repository.DSH桌面的重启按钮。需要此仓库中的配套shell补丁 | medium | queued | 0/4/1 | 0/0 | 2026-10-24 10:16 |
| @bmhty123/dsh-sketchpad 给DSH界面添加一块画板。 | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 10:16 |
| @Coolwyd/dsh-staff Persistent employee roster, task ledger, group chat and an in-UI staff center that turn DSH Agent Teams into a managed team. | medium | queued | 0/2/11 | 0/0 | 2026-10-24 10:16 |
| @rootryanlau-art/dsh-voice-transcribe Offline audio/video transcription for DSH — SenseVoice int8, composer panel + CLI + agent skill | medium | queued | 0/3/10 | 0/0 | 2026-10-24 10:16 |
| @WuYiBaiZhi/dsh-font-studio DSH 字体工坊：给 DSH 换正文/代码字体与字号，预设画廊 + 自定义字体栈 + 实时预览；字体清单由宿主进程直读字体文件，支持 TTC / 超级 TTC / OTC | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-10-24 10:16 |
| @feely0208/dsh-pptx-batch PPT 批量处理：填模板占位符 / 替换图片 / 提取文本 / 查看结构信息（python-pptx） | medium | queued | 0/2/2 | 0/0 | 2026-10-24 10:16 |
| @feely0208/dsh-markdown-kit Markdown 工具箱：批量转 Word / 生成目录 / 提取链接 / 合并（不依赖第三方 Markdown 库） | medium | queued | 0/2/1 | 0/0 | 2026-10-24 10:16 |
| @2228293026/dsh-model-usage 在左侧栏加入「模型用量」入口，打开一个按模型统计 Token 消耗与请求次数的面板。 | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 10:16 |
| @fhghth/dsh-notify-toast | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-10-24 10:16 |
| @387617119/mimo-voice-report 基于mimo的DSH语音汇报 | medium | queued | 0/1/12 | 0/0 | 2026-10-24 10:16 |
| @codeora-Kayson/dsh-peak-meter DSH 插件：输入框下方显示峰谷时段、本会话/本轮费用与账户余额 | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-10-24 10:16 |
| @mrkeyoe/dsh-hello-plugin A minimal DSH plugin that registers one host tool. A copyable skeleton that shows exactly which files a dsh plugin needs and what each one is responsible for. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 10:16 |
| @taozhuowei/dsh-muse-sidebar One-click Muse website access in the official DSH right sidebar | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 10:16 |
| @FallnStrelitzia/dsh-chat-settings | medium | queued | 0/2/2 | 0/0 | 2026-10-24 10:16 |
| @NekoDD-wow/dsh-creator-plus 创造模式增强：一键在临时纯净 profile 中启动 DSH 分身，用无头浏览器检查前端能否正常启动，避免改坏本体客户端。 | medium | queued | 0/4/8 | 0/0 | 2026-10-24 10:16 |
| @QIFANAI/dsh-startup-moss DSH 零点击启动动画「MOSS CORE 550W」：大鲸鱼背景 + Dune 仪表层 + 550W 核心，8.8 秒自动开幕 | medium | queued | 0/1/12 | 0/0 | 2026-10-24 10:16 |
| @JiayuREN1127/dsh-file-drag DSH plugin: drag files and folders from the Sidebar Files pane into the composer as @ mentions. | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 10:16 |
| @LEw1sin/dsh-smoothness | medium | queued | 0/3/11 | 0/0 | 2026-10-24 10:16 |
| @DEVVE-1/dsh-windows-approval-notify DSH plugin: pop a Windows toast the moment an approval is requested, so you notice even when DSH is in the background. | DSH插件：任务需要审批或跑完时弹 Windows 原生通知，只在 DSH 不在前台时提醒。 | medium | queued | 0/2/0 | 0/0 | 2026-10-24 10:16 |
| @ZhangShurong/dsh-vista Visual memory and active inspection for DSH: revisit any image, inspect any region, read exact pixels. | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 10:16 |
| @SQHLnb666/mindsea 给 DSH 的长期记忆插件：每轮聊完自动沉淀，数据存在本机 SQLite | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-10-24 10:16 |
| @ohlygod/dsh-jiuling-remote-android DSH 远程目录（安卓端）：6 位配对码接入电脑端 dsh-jiuling-remote-desktop，凭据只留在引擎进程，提供 RPC / SSE 桥接与设置页。 | medium | queued | 0/1/10 | 0/0 | 2026-10-24 10:16 |
| @HHHHHH233333/dsh-session-delete Permanently delete a DSH session: chat log, projection cache, spill files, and the subagent sessions it spawned. Sidebar menu entry + confirm dialog. | medium | queued | 0/1/4 | 0/0 | 2026-10-24 10:16 |
| @hongjunt50-afk/dsh-hooks DSH 通用钩子框架：用 Claude Code 风格的 hooks.json 驱动 DSH 原生事件（SessionStart / UserPromptSubmit / PreToolUse / PostToolUse / Stop） | critical | queued | 2/1/5 | 0/0 | 2026-10-24 10:16 |
| @accomplish07zrh-eng/dsh-aurabot-qq DSH 插件：让 AI 以「大肥鱼」的身份住进 QQ（SnowLuma / OneBot v11） | high | queued | 1/0/7 | 0/0 | 2026-10-24 10:16 |
| @Jaylor-Wang/dsh-fast-loop High-performance streaming agent loop plugin for DSH | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 10:16 |
| @WenQ-cloud/dsh-cutewhale-h DSH Web/软件端 插件：住在输入框左边的像素鲸鱼娘，A pixel whale maid for DSH Web&software | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 10:16 |
| @18383337799/dsh-happy Ten animated backgrounds for the DSH conversation pane: starfield, code rain, circuit, sword, cat, girl, fighter jet, racer, snow, bubbles. | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-10-24 12:15 |
| @mengqinlol/dsh-mobile-shell Mobile shell layer for the DSH Web GUI: drawer overlay, page lock, no iOS focus zoom, keyboard-aware composer, crypto.randomUUID polyfill. | medium | queued | 0/1/2 | 0/0 | 2026-10-24 12:15 |
| @RestartBaiYe/dsh-share DSH conversation sharing with account-free 1/3/7/30-day links, local redaction and revocation. | medium | queued | 0/1/7 | 0/0 | 2026-10-24 12:15 |
| @howIdobetter/dsh-deepseek-web-embed 把 chat.deepseek.com 原样嵌进 DSH：本机回环反代 + 独立站点 iframe，登录一次即可在界面里直接对话，不必再开浏览器。 | medium | queued | 0/1/10 | 0/0 | 2026-10-24 12:15 |
| @NethielChou/dsh-reasoning-effort-sniffer DSH plugin: sniffs which thinking levels a third-party provider actually accepts, declares them, and adds per-provider sniff/strength switches. | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 12:15 |
| @Venshell/dsh-zcode-startplan DSH接入 ZCode 赠送免费 plan：多账号池 + Web UI 管理面板 + bigmodel/zai 双渠道登录，零运行时依赖 | low | not queued (low risk) | 0/0/8 | 0/0 | 2026-10-24 12:15 |
| @1015677515/dsh-theme-holo 为 DSH 打造的《狼与香辛料》赫萝主题：12 秒开场动画、浮动字标、偷看的她、动态档案卡、侧栏麦田、右栏待机画面与小鲸鱼联动——每个组件都能单独关掉。 | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-10-24 12:15 |
| @LCG24-ux/dsh-skill-market Skill Market plugin for DSH: browse, install, create and import agent skills from GitHub - live install progress, built-in catalog of 1196 skills from 23 repos, multi-route acceleration. Zero dependencies. | low | not queued (low risk) | 0/0/10 | 0/0 | 2026-10-24 12:15 |
| @ukakbdh091/dsh-model-fallback 模型超时/断连时自动切到备用模型并在同一步重试，不让整轮对话红字报错。设置页里从模型列表直接挑，改完即生效。安装：dsh plugin --profile desktop add dsh-model-fallback | medium | queued | 0/1/2 | 0/0 | 2026-10-24 12:15 |
| @saibei404/dsh-prompt-polish DSH 提示词优化插件：输入框旁一键把草稿改写成清晰可执行的提示词（DeepSeek V4.1 Flash） | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 12:15 |
| @liuzhihao-min/dsh-answer-timing Answer-level timing breakdown for DSH: model thinking, first token, decode time, per-tool cost — and everything else. | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-10-24 12:15 |
| @KKoishi-514514/dsh-qzone-diary 本插件基于DSH开发，仅仅为了让大肥鱼能够更加鲜活 | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-10-24 12:15 |
| @rrkyd/dsh-ca-image-console 把 dsh-ca-image 的控制台链接放进设置 → 插件区，省得记网址 | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-10-24 12:15 |
| @cyhddyx/dsh-qq-tools DSH QQ group/private chat tools: groups, history, send, faces, favorites, private chat, pokes (OneBot 11 / SnowLuma) | medium | queued | 0/1/9 | 0/0 | 2026-10-24 12:15 |
| @Morn1nStar/dsh-academic-research-plugin DSH 学术研究插件：文献核验、论据核验表、复现记录与投稿前准入门槛（11 个工具 + 3 个方法论 skill，零运行时依赖）。Literature verification, claim–source register, reproduction runs and pre-submission gates. | high | queued | 1/3/3 | 0/0 | 2026-10-24 12:15 |
| @tkctly/dsh-auto-continue Pure-client DSH plugin: sends "continue" on output-token truncation, with configurable error codes, context compaction recovery, loop guards, and statistics. | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-10-24 12:15 |
| @DyingWallet/dsh-pet-configurable-llm 为 dsh-pet 提供的可配置 LLM 接入层：OpenAI 兼容 API，把桌宠对话接到专用 DSH 会话，复用 AGENTS.md 人格与 memories/ 长期记忆，并注入召回与回顾。 Configurable OpenAI-compatible LLM bridge for dsh-pet: routes pet chats into a dedicated DSH session, reusing AGENTS.md persona and memories/ long-term memory with recall + review injection. | medium | queued | 0/8/22 | 0/0 | 2026-10-24 12:15 |
| @KristoffLiu/dsh-advisor 在 DSH 输入框中提供行内写作建议与下一句建议。Inline ghost-text suggestions and next-message advice for the DSH composer. | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 12:15 |
| @Zcc-777/dsh-deepseek-usage-panel-c Custom fork of dsh-deepseek-usage-panel: peak/off-peak price hint, today's spend, and detailed token usage for DSH Web. | low | not queued (low risk) | 0/0/8 | 0/0 | 2026-10-24 12:15 |
| @wuwo1979/dsh-qqbot-muu DSH QQ bot: memory, persona, B站运营 | medium | queued | 0/1/5 | 0/0 | 2026-10-24 12:15 |
| @rrkyd/dsh-ca-image CA cards 出图插件 — Phase 3（host 半边：加载探针 + 媒体/回合存储 + 落盘接线） | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 12:15 |
| @Wfssll/dsh-three-pane DSH 三栏工作区：独立左侧文件列表、中间聊天、右侧原生 PDF/文件预览，兼容可收缩的对话历史栏。 | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 12:15 |
| @PonyDevAI/dsh-tailscale DSH Web 插件：把 DSH Web GUI 发布到 tailnet，并把 tailnet 设备与可达性暴露为 ctx.tailscale 服务 | high | queued | 1/3/14 | 0/0 | 2026-10-24 12:15 |
| @KurohaneKaoruko/DSH-Myosotis 用于DSH的记忆插件 | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-10-24 12:15 |
| @pairun325/dsh-ai-relay Ask other AI models to help with the work — OpenAI-compatible and Anthropic routes as agent tools in DSH. | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 12:15 |
| @wlllyj/dsh-prompt-forge DSH plugin Prompt Forge: rewrite the composer draft by the AI-usage doctrine (AI使用心法) and toggle between original and optimized prompt | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-10-24 12:15 |
| @drowsylazy/dsh-thinking-effort-rheostat 为 DSH 提供模仿 Claude Desktop 的推理强度控件 | medium | queued | 0/1/6 | 0/0 | 2026-10-24 12:15 |
| @Joshua1ya/dsh-tray-restart Restart the DSH desktop app and its host process from a session header button or the system tray (Windows). | medium | queued | 0/3/2 | 0/0 | 2026-10-24 12:15 |
| @Beership/dsh-download-progress DSH 下载进度插件：实时百分比 / 速度 / ETA / 断点续传 | medium | queued | 0/3/21 | 0/0 | 2026-10-24 12:15 |
| @nlflora/dsh-workspace-heal Recreate deleted workspace folders and import session context as a summary | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 12:15 |
| @rootsbymenda/dsh-second-angle A second angle on a finished DSH turn: checks the answer against the tool output the turn read. | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-10-24 12:15 |
| @snakejohn/dsh-hindsight-local | high | queued | 1/0/7 | 0/0 | 2026-10-24 12:15 |
| @starash07/dsh-file-menu 在 DSH 桌面端右键对话中的文件：打开、用默认应用打开、选择其他应用、复制路径、在资源管理器中打开 | medium | queued | 0/1/1 | 0/0 | 2026-10-24 12:15 |
| @Cai-kunkun/dsh-workspace-fork Fork a DSH conversation from one workspace into another. | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-10-24 12:15 |
Dynamic audit results · new today (0 with a conclusion)
The model reads redacted source context and never executes plugin code. When a dynamic conclusion exists it is authoritative (it may raise or lower the level); otherwise the static tier applies. The audit never writes the exemption list.
No completed dynamic audit conclusion for this day yet (queued or failed — see the table above).
Site-wide fused risk
Static + vet fused, dynamic conclusions applied (authoritative when present, raise or lower); 24197 entries in total
26
critical
441
high
1147
medium
22231
low
Critical-tier plugins (26)
dsh-plugin-managerdeepseekharnessremotegatewaydsh-desktop-huacaidsh-lan-access-3orbit-dsh-plugindsh-cc-pluginsdsh-lark-alldsh-cloud-connectordsh-tts-playerdsh-image-readdsh-stats-expanddsh-usage-stats-11dsh-input-enhancementdsh-tmwebdriverdsh-cc-backupphone-tunnel-pooldsh-agnes-studiovoice-inputdsh-wsl-projectscad-ppt-skillsdsh-remote-13dsh-upgrade-2dsh-plugin-remote-access-2dsh-chatsyncdsh-opencode-free-3dsh-relay-isolation
Static heuristic scan + manifest audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.
Daily report archive
69 reports2026-10-24current166 added2 crit81 medium2026-10-23218 added4 crit90 medium2026-10-22193 added1 crit55 medium2026-10-21220 added0 crit69 medium2026-10-200 added0 crit0 medium2026-10-190 added0 crit0 medium2026-10-18609 added1 crit221 medium2026-10-17306 added0 crit0 medium2026-10-160 added0 crit0 medium2026-10-15110 added1 crit47 medium2026-10-1499 added1 crit33 medium2026-10-13102 added1 crit36 medium2026-10-120 added0 crit0 medium2026-10-110 added0 crit0 medium2026-10-10104 added0 crit40 medium2026-10-098 added0 crit1 medium2026-10-08100 added0 crit39 medium2026-10-070 added0 crit0 medium2026-10-060 added0 crit0 medium2026-10-050 added0 crit0 medium2026-10-0472 added0 crit30 medium2026-10-0388 added0 crit36 medium2026-10-0299 added1 crit47 medium2026-10-010 added0 crit0 medium2026-09-30182 added3 crit51 medium2026-09-2969 added0 crit22 medium2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-10-24. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
What does the "Manifest" column mean?
Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.
Is the static scan the only layer?
No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusion is authoritative when there is one — it can raise a verdict or lower it; the static/vet fused tier applies only when there is no dynamic conclusion. Exemptions stay manual and the script never writes the suppression list. This daily report shows both layers: every new entry is marked with its dynamic state (conclusion / queued / failed / out of the queue because it is low risk), and all conclusions of the day are listed below with their tier, model summary and findings. As of the latest run: 2859 dynamic audit records, 2284 with a model conclusion, 323 stricter than the static verdict, 788 softer.
Source: dsh.so security standards · Maintained by dsh.so · Published