Daily security scan

Date · 2026-10-25 (UTC — plugins first indexed that day)

Static scan · new today

rule heuristics · shape only
0
critical
4
high
80
medium
116
low

Tier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low.

Dynamic audit · subset of new today

model reads source · no execution
0
critical
0
high
1
medium
0
low

Tier = highest finding. Of 200 new entries: 1 with a conclusion, 83 queued, 0 failed (no conclusion), 116 low-risk not queued.

Data file updated 2026-10-26 07:31 (UTC+8); latest conclusion audited 2026-10-26 07:31 (UTC+8)

PluginStaticDynamicFindings C/W/IManifestIndexed
@jeremytenjo/dsh-plugin-always-on-top
Pin the DSH desktop window above every other app from a button beside source control.
mediumqueued0/1/50/02026-10-25 00:16
@dhdkfkfkf/dsh-pulltosend
DSH plugin: press the composer, pull up, release to send. With FLIP flight animation.
lownot queued (low risk)0/0/00/02026-10-25 00:16
@JaMoLpE88/dsh-desktop-chat
Official DeepSeek Chat inside DSH Desktop: one sidebar panel, the real chat.deepseek.com page, and a session that survives restarts. No Electron internals, no chat reimplementation.
lownot queued (low risk)0/0/120/02026-10-25 00:16
@WhatCannotBeSaid/dsh-im-workspace-buttons
DSH plugin: one channel entry per @xmanrui/dsh-im channel in the sidebar 工作区 header row, filtering the session list to that channel. Extracted from eva-inspired-theme.
lownot queued (low risk)0/0/60/02026-10-25 00:16
@gpteth/dsh-onchain-arbitrage-radar
Read-only on-chain arbitrage radar for DSH: cross-venue spreads, funding crowding, tokenized-stock clock, cost model and execution gate.
lownot queued (low risk)0/0/30/02026-10-25 00:16
@wsxuyue/dsh-prompt-slim
DSH plugin: shrink the tool-definition block sent on every request (~39% fewer tokens) without changing tool behaviour
lownot queued (low risk)0/0/00/02026-10-25 00:16
@TABmk/dsh-theme-ascetic
ASCetic — compact ASCII / terminal theme for DSH: 19 palettes, 3 densities, vim-style status line, ascii.rest art
lownot queued (low risk)0/0/40/02026-10-25 02:16
@SeyanaA/dsh-token-usage
Token 用量面板 for DSH Desktop:热力消耗图、每日趋势折线图、模型消耗百分比环形图(provider-aware)
mediumqueued0/1/60/02026-10-25 02:16
@Tests4gptplay/dsh-video-vision
让 DSH 中的 AI 直接看视频:支持 B 站、YouTube 等在线链接、时间戳画面、字幕、本地转写与原生缓存管理。
mediumqueued0/3/80/02026-10-25 02:16
@jeremytenjo/dsh-plugin-terminal-upgrades
Terminal upgrades for DSH: option-click a link in the terminal to open it in your browser.
lownot queued (low risk)0/0/30/02026-10-25 02:16
@DDTomTom/dsh-code-pipeline
DSH 复合代码开发流水线插件:Sol/Opus/DeepSeek 分阶段协作、独立验收、进度浮窗、逐环节模型与推理等级设置、中英双语
lownot queued (low risk)0/0/70/02026-10-25 02:16
@jeremytenjo/dsh-plugin-infinite-split-tabs
Infinite split tabs for the DSH right sidebar — split down, nest both ways, persist layouts.
lownot queued (low risk)0/0/00/02026-10-25 02:16
@a3079566007-pixel/dsh-forage
采源 Forage — 视频知识采集:快扫、转写、抽帧 OCR、摘要与本地检索(DSH 插件)
mediumqueued0/2/20/02026-10-25 02:16
@Chaiyahang/dsh-scratchpad
Scratchpad panel for DSH: tagged notes, image/file attachments, Markdown task lists, send-to-chat, wake-up shortcut, JSON export/import, and Agent tools.
lownot queued (low risk)0/0/60/02026-10-25 02:16
@FireflyLover520/dsh-game-uid
DSH 插件:按 UID 查原神 / 星铁 / 绝区零的角色练度与汇总面板(只展示数据,不打分)
lownot queued (low risk)0/0/50/02026-10-25 02:16
@luxueliu/dsh-luxueliu-update
一个稳健的DSH更新器。 彻底解决DSH更新问题:掉模型、掉订阅套餐、掉插件、掉补丁、掉DSH(更新报错还起不来)
lownot queued (low risk)0/0/00/02026-10-25 02:16
@wall1234567/dsh-rofm
DSH 长期记忆插件:上下文超过阈值时把最早的一段对话归档到 memory/ 回忆文件夹,之后按关键词与重要度概率自动回忆。Host-only, zero-dependency memory engine for DSH.
mediumqueued0/2/00/02026-10-25 02:16
@Tuiltex-0216/dsh-wechat-share
Forward WeChat chat records into DSH sessions — share target + inbox watcher + GUI delivery overlay
lownot queued (low risk)0/0/40/02026-10-25 02:16
@ecbob/dsh-ctx-meter
DSH plugin: a /ctx slash command that prints session context occupancy for zero model tokens, plus one collapsed notice each time occupancy crosses 25% / 50% / 75%. Host-only, zero runtime dependencies.
lownot queued (low risk)0/0/00/02026-10-25 04:16
@Starlit-Sky-code/dsh-prompt-starlight
Prompt optimizer for the DSH composer: one star button, two sliders, model switching, 11 toggleable rules. 星芒 · DSH 提示词一键优化插件。
mediumqueued0/4/180/02026-10-25 04:16
@keyblues/dsh-plugin-everything
DSH plugin — instant whole-disk file search through the local voidtools Everything index. DSH 插件:接入本机 Everything 索引,全盘秒级搜索文件。
mediumqueued0/1/00/02026-10-25 04:16
@acae2w3/dsh-kards-pilot
DSH ??:????? + ???????,???????,??????????? KARDS?
mediumqueued0/3/20/02026-10-25 04:16
@QiDouZu/dsh-retcon
DSH 插件:写记忆时只检查一件事——这条有没有写「什么情况下它是错的」,没写就不许写。回溯性重构(retcon)。
lownot queued (low risk)0/0/10/02026-10-25 04:16
@newgacker/dsh-strata-ai-center
AI管理中心 — DSH 的本地 Strata 引擎管理插件:strata launch 启停、strata-<model>.json 参数编辑、组件升级回滚、真实监控数据
mediumqueued0/11/120/02026-10-25 04:16
@iQingke/dsh-quick-restart
mediumqueued0/8/100/02026-10-25 04:16
@xalor888/dsh-unlimited-retry
Unbounded model-request retry for the DSH agent loop, with a live Settings panel.
lownot queued (low risk)0/0/30/02026-10-25 04:16
@Clmzz-gra/dsh-zen-mode
Zen mode for DSH: a full-screen minimal countdown that hides DSH while tasks run.
lownot queued (low risk)0/0/20/02026-10-25 04:16
@NanQing233/dsh-rimlight
为你的 DeepSeek 添加沿窗口边缘流动的流星式光带 —— 最多四条并行、按会话模型配色、等待回复时反向流动。 Add comet-like light bands that flow along your DeepSeek window edge — up to four in parallel, colored by each session's model, and flowing in reverse while waiting for input.
lownot queued (low risk)0/0/00/02026-10-25 04:16
@PILIHU2022/dsh-proxy-failover
DSH plugin: a loopback failover relay becomes the process-wide proxy route, so web_fetch works under Mihomo/Clash TUN fake-ip and falls back to direct inside the same request when the local proxy stops. / DSH 插件:把容错 relay 装成进程级代理路由,修复 TUN fake-ip 下的 web_fetch;本地代理关闭时同一请求内改走直连。
mediumqueued0/6/230/02026-10-25 04:16
@shenj13/dsh-book-library
mediumqueued0/12/130/02026-10-25 04:16
@soliecho/dsh-anime-follow
DSH 插件:搜索番剧、订阅字幕组,自动用 qBittorrent 下载并按模板归档
mediumqueued0/8/120/02026-10-25 04:16
@AntonyLang/dsh-workflow-forge
Author, validate, compile, trial-run and package DSH scenario plugins from a restricted WorkflowSpec.
lownot queued (low risk)0/0/00/02026-10-25 04:16
@XJYzhengshuai/dsh-desktop-pet
A tiny desktop pet for the DSH Web UI — it idles, bounces while the agent works, and calls out when a task finishes. 桌宠
lownot queued (low risk)0/0/00/02026-10-25 04:16
@dongasai/dsh_debug_web
让 DSH 的 agent 在页面里执行 JS、读控制台 —— 一个模型工具 dsh_debug_web,走既有 Cordis Host→Client Inspect 通道 | Let the agent run JS inside the live DSH web page and read its console, over the existing inspect channel
lownot queued (low risk)0/0/10/02026-10-25 04:16
@Fireawa/dsh-convo-tally
DSH 侧栏会话记账:本对话今日/累计花费,人民币与美元双币,按官方峰谷价目表逐次计价。Per-conversation cost tally for DSH (CNY/USD, peak/off-peak).
lownot queued (low risk)0/0/30/02026-10-25 04:16
@stlin256/harness-pocket
Native HarmonyOS companion for DSH — Passkey pairing, private session control, and durable Push Kit notifications.
mediumqueued0/3/100/02026-10-25 04:16
@KiiiiiG/dsh-harness-restart
One-click restart for DSH: a sidebar entry plus an out-of-process helper that quits and relaunches the desktop app.
mediumqueued0/7/110/02026-10-25 04:16
@yuna78/dsh-deck-studio
mediumqueued0/2/20/02026-10-25 04:16
@yinghan-123/dshm-keep-screen-on
DSHM 屏幕常亮桥:有 agent / 后台任务在跑时,ArkWeb 页面持有 Screen Wake Lock,让 HarmonyOS 不自动熄屏。
lownot queued (low risk)0/0/40/02026-10-25 04:16
@Jimxinfang/dsh-theme-neo-brutalist
Neo-Brutalist theme for the DSH Web UI: paper & ink palettes, 4px hard rules, 8px offset shadows, zero radius, hazard stripes, instant apply with factory restore.
lownot queued (low risk)0/0/30/02026-10-25 04:16
@Lstions/dsh-web-password-auth
Username and password sign-in for the DSH Web UI, with persistent sessions, an in-app security settings page, and optional TOTP two-factor authentication
lownot queued (low risk)0/0/30/02026-10-25 04:16
@WU079/dsh-sts2-agent
Let an AI play Slay the Spire 2 inside DSH: screenshot + mouse/keyboard tools, a local card database, and a readable play log. No mods, no memory reading.
mediumqueued0/1/60/02026-10-25 04:16
@2000HINA/dsh-crash-backup
Directory-copy DSH environment backups with a crash-safe restore script.
mediumqueued0/5/60/02026-10-25 04:16
@glentao-dev/dsh-pdf-toolbox
PDF 结构操作 DSH 插件:合并/拆分/压缩/加水印/提取-删除-旋转-插入页面/元数据/加密检测/文本提取(9 个工具 14 项操作,纯本地 pdf-lib + pdfjs-dist)
lownot queued (low risk)0/0/00/02026-10-25 04:16
@qibo30/dsh-worklog
DSH plugin: give the agent a cross-session development worklog (worklog_add / worklog_list). Cordis service + agent tools + bundle patch.
mediumqueued0/1/10/02026-10-25 04:16
@OuQiL/dsh-pinned-panel
A dedicated Pinned area for DSH: a pinned group atop the sidebar session list plus a full Pinned page, opening every conversation in its original workspace.
lownot queued (low risk)0/0/20/02026-10-25 04:16
@Dogtiti/dsh-plugin-provider-icons
在 DSH 的模型选择器里显示供应商品牌 logo(24 个厂商图标 + 前缀匹配 + 灰点兜底)
lownot queued (low risk)0/0/30/02026-10-25 04:16
@SwordX-Lu/dsh-agent-settings
lownot queued (low risk)0/0/20/02026-10-25 04:16
@H-Y-1-1/dsh-watch-history
跨平台观看历史 DSH 插件:把 Agent 看过的内容记成本地账本,在设置页用卡片墙回看;支持任意平台、Provider/声明式元数据补全和本地 token 鉴权。
mediumqueued0/4/220/02026-10-25 06:17
@LeeeWM/dsh-session-notifier
Windows 11 toast notification when a DSH session turn finishes, with focus-aware suppression.
mediumqueued0/1/30/02026-10-25 06:17
@xiaoxiangzima/dsh-plugin-guide-zh
DSH 的插件与技能中文说明:中文列表、一键插入,模型自动翻译并本地缓存。
lownot queued (low risk)0/0/10/02026-10-25 06:17
@gitByteFree/dsh-pomodoro-pet
dsh plugin
lownot queued (low risk)0/0/00/02026-10-25 06:17
@0Junze0/dsh-mem0
mem0-backed long-term memory plugin for DSH: auto recall, session capture, nightly dedupe/conflict resolution, topic cards, user profile, settings panel.
mediumqueued0/4/60/02026-10-25 06:17
@zszzlzm/dsh-env-facts
DSH plugin: structured environment facts with an as-of timestamp in the runtime-context snapshot
lownot queued (low risk)0/0/00/02026-10-25 06:17
@Dax233/dsh-codex-bridge
Codex bridge for DSH: list local Codex threads, dispatch headless turns, read transcripts, monitor goal state and liveness.
lownot queued (low risk)0/0/40/02026-10-25 06:17
@LUgABeEEE/dsh-sidebar-density
Sidebar density control centre for DSH: five fold switches, three density presets, three width presets — one foot entry plus a settings section.
lownot queued (low risk)0/0/30/02026-10-25 06:17
@Alice-Marx/dsh-fixed-port-bridge
给 DSH 一个固定的本地端口:在宿主进程内转发到 DSH 每次启动都会变的随机 web 端口
mediumqueued0/1/100/02026-10-25 06:17
@wooxi/dsh-plugin-feishu
Feishu/Lark channel for DSH: CardKit 2.0 streaming cards, thinking folds, tool-call tracking, waterfall approvals and multimodal I/O over an outbound WebSocket — no public endpoint required.
lownot queued (low risk)0/0/20/02026-10-25 06:17
@Dax233/dsh-provider-aliases
DSH pi-ai route aliases: multiple credential routes over one installed catalog (e.g. several OpenCode Go plans) plus a Model aliases settings page.
lownot queued (low risk)0/0/40/02026-10-25 06:17
@suj1e/dsh-promptsmith
DSH 插件:输入框一键润色草稿,回答结束后预测下一句
lownot queued (low risk)0/0/10/02026-10-25 06:17
@Touhouywn/dsh-nx
Siemens NX 2512 for DSH — MCP bridge for NXOpen journals in the open NX window, plus a left-sidebar NX panel.
lownot queued (low risk)0/0/30/02026-10-25 06:17
@Tkxyz1122/DSH_Agents_md
在 DSH 里管理 AGENTS.md:可在会话标签行编辑当前项目规则,设置页编辑全局规则
lownot queued (low risk)0/0/20/02026-10-25 06:17
@Ahrunda/dsh-notify-kde
KDE desktop notification + KDE Connect phone ping for DSH
mediumqueued0/1/40/02026-10-25 06:17
@scientificmaniac/dsh-turn-cost
按 DeepSeek 官方价目显示对话费用的 DSH Desktop 插件——每轮、每会话、每工作区三处人民币金额;token 三档计价 + 北京时间峰谷分时,2026-11-01 起网页搜索/抓取按次计费。
lownot queued (low risk)0/0/00/02026-10-25 06:17
@BlueX888/dsh-plugin-auto-contrib
AutoContrib: unattended GitHub open-source contributions for DSH
lownot queued (low risk)0/0/40/02026-10-25 06:17
@weiVc/dsh-session-tidy
会话整理:删除 DSH 会话,或只删除会话中的某一轮(二次确认 / 物理删除 / 自动备份)。Delete sessions or a single turn in DSH.
lownot queued (low risk)0/0/20/02026-10-25 06:17
@woshishujiedegou/dsh-plugin-wallpaper
Full-window still and live wallpapers for the DSH Web GUI, with an importer that probes what each local Wallpaper Engine project really contains.
mediumqueued0/1/60/02026-10-25 06:17
@nomxy/dsh-balance
DSH 侧栏账号后余额与峰谷胶囊
lownot queued (low risk)0/0/40/02026-10-25 06:17
@Aression/dsh-maend
DSH plugin for MaaEnd (MXU): agent tools + dashboard panel, startup-mute and success-gated close-game hooks.
mediumqueued0/9/110/02026-10-25 06:17
@ten-feng/dsh-plugin-office-fill-tool
DSH plugin: batch-generate Office files from templates and data ledgers
mediumqueued0/2/00/02026-10-25 06:17
@yutaosheng004-bit/dsh-memory-curve
四层记忆插件 for DSH(移植自 astrbot_plugin_memory_curve)
mediumqueued0/9/80/02026-10-25 06:17
@dd2003-460/dsh-structured-output
DSH/Claude Code 插件:用强制工具调用把 subagent 输出焊死成固定结构(choice/open_choice/json),模型只有一个,每个 agent 配不同 schema。
mediumqueued0/2/40/02026-10-25 06:17
@hesheng01/dsh-pele
pele-powered inline Mermaid diagrams for DSH sessions
mediumqueued0/3/10/02026-10-25 06:17
@Harua79/dsh-balance-ledger
DSH 余额账本 — 余额常驻显示,并按会话记录钱花在了哪里
lownot queued (low risk)0/0/20/02026-10-25 06:17
@XiaoPb/dsh-roboto-mono
DSH 字体插件:为代码块与 SSH 终端装 Roboto Mono,并用 DejaVu + Nerd Font 子集补齐框线符号与 Oh My Posh 图标。
lownot queued (low risk)0/0/00/02026-10-25 06:17
@jasonchan2026/dsh-lan-chat
局域网聊天助手 — DSH 插件,隔离内网的即时通讯:单聊 / 群聊 / 文件传输 / 网段扫描加好友(零运行时依赖)
lownot queued (low risk)0/0/90/02026-10-25 06:17
@Jimxinfang/dsh-theme-stripe-style
Stripe Style theme for the DSH Web UI: 40px purple grid, layered soft shadows, 12px cards, instant light/dark switch with factory restore.
lownot queued (low risk)0/0/20/02026-10-25 06:17
@wonderandyou/dsh-memo
给 DSH 加一组按需查备忘录的工具:目录 / 按节 / 全文搜索 / 项目卡 / 速查 / 精简,一次几百 token 就能查到事实,不用把整份 MEMO.md 读进上下文;附带分类面板与三维书架动画。
mediumqueued0/4/80/02026-10-25 06:17
@QiaoSchoco/dsh-lit-shot
仿照Wechat为dsh加上最便捷的桌面截图功能!
mediumqueued0/2/60/02026-10-25 06:17
@hualuo520-h/dsh-proteus-bridge
DSH 插件:让 Agent 控制 Proteus 8/9 交互仿真并保存工程(COM / UI 双传输)
lownot queued (low risk)0/0/00/02026-10-25 06:17
@wilsonchengassistant/dsh-file-download
Download any file the DSH Sidebar previews (PDF, XLSX, DOCX, images, binaries) to a remote browser: an authenticated streaming attachment route plus a Download control in the preview header and the unpreviewable state.
lownot queued (low risk)0/0/00/02026-10-25 06:17
@davidLi17/dsh-startup-animation
DSH 开机启动动画插件:shell.overlay 覆盖层,3 秒,支持自定义开场
lownot queued (low risk)0/0/00/02026-10-25 06:17
@yimeng-life/dsh-happy
Ten animated backgrounds for the DSH conversation pane: starfield, code rain, circuit, sword, cat, girl, fighter jet, racer, snow, bubbles.
lownot queued (low risk)0/0/30/02026-10-25 06:17
@wufa-cat/dsh-qq-bot
QQ 群聊/私聊机器人插件(DSH,macOS/Windows 开箱即用):OneBot v11 / NapCat 接入、人设、表情包、界面化服务启停。基于 ezoiLZH/QQ-bot,经原作者许可发布。
mediumqueued0/4/120/02026-10-25 06:17
@abbaababa/dsh-mobile-access
让 iPhone/iPad 用 Safari 安全访问 Mac 或 Windows 10/11 上的 DSH Web;无需安装 App,不影响电脑原有使用。
lownot queued (low risk)0/0/80/02026-10-25 06:17
@fenglangyj/dsh-account-hub
Native DSH account workspace with isolated persistent Camoufox browser profiles
lownot queued (low risk)0/0/00/02026-10-25 06:17
@Beeasy-L/dsh-watchman
守夜人告警:把 DSH 的待审批/报错/任务结束推到手机(Server酱/Bark/企业微信群机器人),设置页可视化配置。
mediumqueued0/1/50/02026-10-25 06:17
@yuanshuoSY/dsh-coder-preset
Coder agent preset for DSH, bundling 35 Matt Pocock engineering skills scoped to Coder sessions. Configuration and Markdown only.
mediumqueued0/2/30/02026-10-25 06:17
@ddssh/dsh-joplin
Joplin notes plugin for DSH: search, read and (opt-in) edit notes via the local Web Clipper API. Zero runtime dependencies.
mediumqueued0/5/100/02026-10-25 06:17
@NewSpringWei/dsh-subagent-acp-ui
基于官方 ACP provider 接入任意 ACP agent,提供配置页、握手测试与路由 skill。
mediumqueued0/1/40/02026-10-25 06:17
@ROYLeXJ/dsh-notify-tray
DSH 通知 + 状态栏插件:系统通知、macOS/Windows/Linux 托盘图标、任务进度与花费
mediumqueued0/2/80/02026-10-25 06:17
@aliez656/pre-optimization-audit
让ai把任务做的更深入,而不是更广
lownot queued (low risk)0/0/00/02026-10-25 06:17
@mlkgrnt/dsh-junimo
DSH bundle for Stardew Valley: bridges Junimo-MCP's 37 tools into dsh and adds doctor, game lifecycle and prompt discipline
mediumqueued0/3/120/02026-10-25 08:16
@ityyq777/dsh-progress-tick
Tell the DSH main agent to report progress every N minutes.
lownot queued (low risk)0/0/30/02026-10-25 08:16
@ComeCaramelos/dsh-mcp-manager
Manage several external MCP connections from the Web GUI
lownot queued (low risk)0/0/00/02026-10-25 08:16
@ztan4706/dsh-whale-waker
mediumqueued0/4/100/02026-10-25 08:16
@whybebabo/dsh-recent-sessions
Recent sessions across every workspace in one panel for DSH, plus deferred notes that come back when you reopen the conversation.
lownot queued (low risk)0/0/40/02026-10-25 08:16
@ztan4706/dsh-sensorium
lownot queued (low risk)0/0/90/02026-10-25 08:16
@lcx19970714/dsh-limob-runner
DSH 客户端插件:在 DSH 内置终端里运行 Limob 项目命令,支持 GitHub 更新提示。
mediumqueued0/1/80/02026-10-25 08:16
@HAN102300/dsh-bot
这是一个在DSH harness当中,用一句自然语言,把重复性的守护工作交给一个有记忆、有预算、可回滚的 AI 队友的插件
lownot queued (low risk)0/0/20/02026-10-25 08:16
@GGBound-1229/dsh-session-reaper
删除会话的插件,dsh默认不让删除会话,该插件可用于删除会话,删除的会话会将进入回收站,在回收站可恢复或删除
mediumqueued0/1/20/02026-10-25 08:16
@suj1e/dsh-anvil
DSH 输入框增强:一键润色、预测下一句、挡位式模型与推理等级选择
lownot queued (low risk)0/0/30/02026-10-25 08:16
@phfb/dsh-qq-bot
把 QQ 私聊接进 DSH:私聊陪伴向的 DSH 插件(dsh-qq-bot + dsh-alive)
lownot queued (low risk)0/0/30/02026-10-25 08:16
@mihomooo/dsh-persona-panel
Per-workspace persona, user profile, event and diary memory for DSH, with a panel to review and retract every entry.
mediumqueued0/2/110/02026-10-25 08:16
@YokiMohan/dsh-webview
在 DSH 桌面端直接打开 chat.deepseek.com:会话视图标签、左上角面板、主区域面板三处入口共享同一已登录页面,切走不卸载、重启保持登录;仅放行 deepseek.com,零注入、不代发请求。仅桌面端。English README: README.en.md
lownot queued (low risk)0/0/60/02026-10-25 08:16
@saibei404/dsh-prompt-optimize
DSH 提示词优化插件:输入框旁一键把草稿改写成清晰可执行的提示词(DeepSeek V4.1 Flash)
lownot queued (low risk)0/0/10/02026-10-25 08:16
@svoemesto/dsh-web-search-searxng
Поиск в интернете через SearXNG для DSH: плагин сам поднимает контейнер и даёт агенту web_search без ключей вендора. · SearXNG-backed web search for the DSH, with its own container and no vendor key.
mediumqueued0/4/60/02026-10-25 08:16
@scientificmaniac/dsh-faremeter
给 AI 对话打表 · A fare meter for DSH chats — token tiers + peak/off-peak, and per-request Search/Fetch billing from 2026-11-01
lownot queued (low risk)0/0/00/02026-10-25 08:16
@zy12342/dsh-approval-toast
Windows toast notifications for DSH approvals: approve or reject a pending approval from the notification while DSH is in the background, with an in-app fallback; also reports turn completion and errors.
mediummedium0/3/20/02026-10-25 08:16
@regrevia/dsh-lite-memory
Zero resident memory for the DSH: reads only on a hit, costs nothing when nothing matches.
mediumqueued0/1/20/02026-10-25 08:16
@kirkchinese/DSH-Recollect
为 DSH 打造的兼容 Claude Code 的记忆系统:CLAUDE.md/AGENTS.md 分层指令 + MEMORY.md 持久记忆,所有模型同一套完整指导。
lownot queued (low risk)0/0/20/02026-10-25 08:16
@GGBound-1229/dsh-vision-all
dsh添加三方API后,配置默认没有image参数,安装插件后,已有的三方和后续添加到三分都会自动配置好
mediumqueued0/1/30/02026-10-25 08:16
@Willmylife/dsh-model-connection-test
DSH plugin: connection tests for the models configured in Settings -> Models - one minimal chat round-trip per model with failure codes and latency.
lownot queued (low risk)0/0/20/02026-10-25 08:16
@micln/dsh-mcp-autoload
lownot queued (low risk)0/0/00/02026-10-25 08:16
@xyzYaeMiko/dsh_tab_status_light
把 DSH 的浏览器标签页图标变成会话状态灯
lownot queued (low risk)0/0/00/02026-10-25 08:16
@holy-ovo/dsh-startup
DSH 的深海下潜启动开屏:深度尺与探测器、角色出场视频、海底地形与珊瑚礁、气泡与生物荧光
lownot queued (low risk)0/0/00/02026-10-25 08:16
@PinBoDHua/dsh-time-machine
为 DSH 提供可逆的 Agent 工作区还原点:影子 Git 快照、覆盖/精确回滚、恢复前安全点与失败自动回滚。
mediumqueued0/5/130/02026-10-25 08:16
@bingzhu44-blip/brutal-monkey
DSH会话暴力删除插件:单条 / 跨工作区批量永久删除,清理磁盘日志、投影缓存、附件与子会话,不可恢复。
mediumqueued0/1/20/02026-10-25 08:16
@java-hue/dsh-census
Plugin census for DSH: what is loaded, what it costs (KV cache), what collides
lownot queued (low risk)0/0/10/02026-10-25 08:16
@Plyhi/dsh-explain-note
选中 AI 回答里的词,右键「解释」,在侧栏与会话之间开一张可拖拽/折叠/固定的便利贴。
lownot queued (low risk)0/0/30/02026-10-25 08:16
@bigfatdsh/dsh-wechat-media-turbo
DSH 插件:给 dsh-wechat-media 的微信聊天层 —— 鲸鱼娘·大肥鱼人设 + 接梗规则 + 精简工具集 + 短回复约定,含对照测评数据。
lownot queued (low risk)0/0/00/02026-10-25 08:16
@acae2w3/dsh-soviet-console
苏联指挥台 — Soviet-styled command console UI plugin for DSH: two custom themes, Moscow clock, theme and language levers.
lownot queued (low risk)0/0/00/02026-10-25 08:16
@Murphy2000-cyk/dsh-asr-xiaomi
基于小米 MiMo 云端识别给 DSH 加语音输入的插件
lownot queued (low risk)0/0/30/02026-10-25 08:16
@abluefan/dsh-session-grid
多会话同屏网格 —— 一个页面并排 n 条独立会话,每格完整原生 UI
lownot queued (low risk)0/0/20/02026-10-25 10:16
@ly14278/dsh-prompt-brief
给 DSH 输入框加「优化」按钮:口语需求 → 结构化产品需求(定位 / 核心功能 / 视觉参考 / 设计规范)
lownot queued (low risk)0/0/00/02026-10-25 10:16
@ShiLaiM/dsh-persona-L
为每个 DSH 会话绑定独立人格卡:结构化的自我认知,可在聊天中持续完善。
lownot queued (low risk)0/0/10/02026-10-25 10:16
@acttk/dsh-bili-interactor
DSH 插件:让 AI 替你逛 B站 并真的产生互动 —— 点赞 / 投币 / 弹幕 / 评论 / 回评论 / 回复监听,带可视化面板
mediumqueued0/5/240/02026-10-25 10:16
@abluefan/dsh-session-user-id
每条会话独立、持久、随机的 DeepSeek API user_id
lownot queued (low risk)0/0/10/02026-10-25 10:16
@nickzhangcomes/dsh-doc-review
DSH 文档审阅插件:多处批注、文档阅读、评论对话与正文修订
lownot queued (low risk)0/0/30/02026-10-25 10:16
@Dclef/dsh-agent-foreman
DSH plugin: the parent agent splits work into orders, hands each to a contractor you picked (own provider/model/effort), and reviews the result.
mediumqueued0/3/40/02026-10-25 10:16
@Gwenlita52299/Augean
Project Memory Framework: spec-driven 文档治理 —— 代码是 ground truth,测试是承重墙,文档按需而生、按时而死。DSH 插件 @gwenlita52299/augean
mediumqueued0/1/00/02026-10-25 10:16
@qzz19970504/dsh-model-picker-control
Model picker control for DSH: rename, regroup, sort, hide and badge models across providers, with cross-provider partitions. 统一管理 DSH 模型选择器的显示。
lownot queued (low risk)0/0/10/02026-10-25 10:16
@drinkMornTea/dsh-rabbit-skin
木屋白兔皮肤(DSH 0.2.1 client plugin):白兔站在深棕木隔板前,0–4 档体重滑块喂胖它。
lownot queued (low risk)0/0/40/02026-10-25 10:16
@maerd610/dsh-comfy-imagegen
Conversational image generation for DSH, backed by your local ComfyUI.
mediumqueued0/5/160/02026-10-25 10:16
@abluefan/dsh-rhine-switch
给 dsh-rhine-splash 提供折叠式皮肤开关面板
lownot queued (low risk)0/0/00/02026-10-25 10:16
@zaofan-make/dsh-qqbot-plugins
DSH QQ 机器人插件市场索引 · 收录扩展包(extension packs)
lownot queued (low risk)0/0/60/02026-10-25 10:16
@100759/dsh-fuulea-report
辅立码课(智慧教学云)教学数据报告工作台 — DSH 插件:管理看板取数、三版报告(正式版/简报版/交互版)、版本检查与一键更新
mediumqueued0/13/170/02026-10-25 10:16
@abluefan/dsh-live-docs
让若干绝对路径的文件改动后自动以尾部追加方式到达模型
lownot queued (low risk)0/0/00/02026-10-25 10:16
@SShiRkiT/dsh-quick-backup
Local-only backup controls and workflow for DSH
mediumqueued0/1/40/02026-10-25 10:16
@abluefan/dsh-injection-list
会话界面显示本轮上下文注入清单,补 0.2.1 UI 把 context 行折叠掉的缺口
lownot queued (low risk)0/0/20/02026-10-25 10:16
@534056668/dsh-systemd-restart
DSH plugin: a restart row in Settings -> General that ends the host gracefully and lets the systemd unit's Restart=always bring it back. No detached helper, so KillMode=control-group cannot break the restart.
mediumqueued0/2/60/02026-10-25 10:16
@QwQBiG/dsh-re-lab
Offline PE/ELF/Mach-O version comparison with SHA-256 byte evidence, CLI and DSH tools
lownot queued (low risk)0/0/00/02026-10-25 10:16
@wangtheme-coder/dsh-greeting
给 DSH 主页 / 新会话界面加一行按时段变化的问候语(傲娇鲸鱼娘口吻,可自定义台词)
lownot queued (low risk)0/0/20/02026-10-25 10:16
@bestlike093/dsh-gh-vault
在 DSH 里加密保存 GitHub 令牌,让 Agent 代发 GitHub REST API 请求而不接触明文。DSH 插件。
lownot queued (low risk)0/0/00/02026-10-25 10:16
@abluefan/dsh-font-picker
设置页的 UI 字体 / 代码字体选择 —— 枚举系统字体、即时套用、持久化
highqueued1/0/50/02026-10-25 10:16
@MrJiaGe/dsh-auto-review-route
把自动审查的模型请求发往你指定的渠道与模型,让审查不再和工作模型抢同一个并发额度。官方自动审查插件不会被修改。
highqueued1/0/10/02026-10-25 10:16
@kx2398/dsh-session-mesh
Cross-session mesh for DSH: list every session in every workspace, message any session as a real agent message, create/rename/archive/cancel sessions, and wait for session changes.
lownot queued (low risk)0/0/00/02026-10-25 10:16
@Elisoar111/dsh-anime
追番 — an anime tracker plugin for DSH: seasonal charts, airing schedule, search, watchlist, detail pages, bilibili / FQDM / AniCh streaming, torrents, downloads, OP/ED themes, and its own MSE player (PrismFlow) with libass subtitles and Anime4K.
lownot queued (low risk)0/0/60/02026-10-25 10:16
@AkotaP/dsh-layout-memory
lownot queued (low risk)0/0/10/02026-10-25 10:16
@abluefan/dsh-floating-editor
浮窗文本编辑器 —— CodeMirror 6 内核、文件树、透明度/字体可调
lownot queued (low risk)0/0/30/02026-10-25 10:16
@TWLiLon/dsh-persona
为每个 DSH 会话绑定独立人格卡:结构化的自我认知,可在聊天中持续完善。
lownot queued (low risk)0/0/10/02026-10-25 10:16
@cdllI/dsh-gee
Google Earth Engine agent plugin for DSH
highqueued1/8/60/02026-10-25 10:16
@XiaoOu2024/dsh-self-review
Holds each DSH final answer before delivery, has an independent minimal-context model call verify it, and releases only the verified text.
mediumqueued0/1/30/02026-10-25 10:16
@LuoZIren/dsh-deepseek-web
DeepSeek web chat inside DSH: sidebar panel, drag-to-send files, and a web_review tool that turns the page into a code-review subagent
lownot queued (low risk)0/0/80/02026-10-25 10:16
@GuanYunMao/dsh-plugins
DSH 自研插件集合:本地知识库(可离线 embedding)、会话分支树、工作区地图、进程监视、配置快照、文件守卫(7 个包,可单独安装)
mediumqueued0/4/220/02026-10-25 10:16
@wuzhican/dsh-credential-panel
dsh credential pannel plugin
mediumqueued0/1/80/02026-10-25 10:16
@15217814598/dsh-kanban
DSH 任务看板插件 — 自动任务、kanban_* 原生工具、飞书同步
lownot queued (low risk)0/0/00/02026-10-25 10:16
@duyanta123/dsh-change-impact
Evidence-backed change impact analysis and verification plans for DSH.
mediumqueued0/1/00/02026-10-25 10:16
@abluefan/dsh-palette
DSH 调色盘 —— 逐项覆盖语义色与原材料色,写进 inline custom property
lownot queued (low risk)0/0/70/02026-10-25 10:16
@regrevia/dsh-inner-browser-use
mediumqueued0/2/160/02026-10-25 10:16
@Verisw/rea-dsh
Reverse-engineering preset for DSH: one preset that mounts ~139 REA tools (Ghidra / Hopper / IDA), a reverse-engineer persona, and an evidence-first analysis workflow. Installs as a dsh bundle into the desktop, web, headless and dsh-tui profiles.
mediumqueued0/2/170/02026-10-25 10:16
@bestlike093/dsh-cyrene-balance
在 DSH 里查询 DeepSeek API 余额与今日消费,支持今日额度上限、超限提醒与只看今日额度 / 只看余额。DSH 插件。
mediumqueued0/4/60/02026-10-25 10:16
@Ianzhyh/qoder-to-dsh
把 Qoder 的模型额度原生接进 DSH 的纯 dsh 插件
mediumqueued0/7/170/02026-10-25 10:16
@Kadima-code/dsh-session-mirror
Per-conversation backup / restore / cleanup plugin for DSH.
lownot queued (low risk)0/0/30/02026-10-25 10:16
@LCG24-ux/ds-skillmarket
Skill Market plugin for DSH: browse, install, create and import agent skills from GitHub - live install progress, built-in catalog of 1196 skills from 23 repos, multi-route acceleration. Zero dependencies.
lownot queued (low risk)0/0/00/02026-10-25 12:17
@changzheng-Loji/dsh-peak-guard
DSH 强制峰谷模式:DeepSeek 高峰时段拦截新提问(可切换只提醒),聊天页常驻时段/模式/倒计时与本次会话花费估算
mediumqueued0/1/20/02026-10-25 12:17
@YiZhiQvQ/dsh-remote
DSH 桌面 Web GUI 的单管理员局域网远程访问插件 + Android WebView 外壳
lownot queued (low risk)0/0/50/02026-10-25 12:17
@regrevia/dsh-unlag
Clear a sluggish DSH workbench without restarting: rebuild the interface and swap plugin code in place, keeping running turns, queued messages and unsent drafts.
lownot queued (low risk)0/0/60/02026-10-25 12:17
@Stijnus/dsh-moodboard
Visual reference moodboard plugin for DSH: drag-and-drop images, tags, notes, and pinned style guides the agent reads before generating UI.
lownot queued (low risk)0/0/10/02026-10-25 12:17
@CXk253-chenxing/dsh-chunk-download
给 AI Agent 用的 HTTP Range 分片下载器(DSH 插件):多连接并发、断点续传、暂停/恢复、限速与队列,比 curl 单连接快数倍;Linux / macOS / Windows 通用,Android 可一键存进 Download。
mediumqueued0/2/80/02026-10-25 12:17
@JaMoLpE88/dsh-opencodego-usage
OpenCode Go subscription usage in the DSH composer: 5-hour, weekly and monthly windows with a click-open details panel. Zero configuration.
lownot queued (low risk)0/0/20/02026-10-25 12:17
@adithyanraj03/dsh-cite-lens
Cite Lens for dsh: select text in a PDF in the Files tab to quote or ask about it in the current chat, and turn the model's [main.pdf p.7 "exact words"] citations into links that open the PDF and highlight the passage; /cite-links makes a chat cite every claim.
lownot queued (low risk)0/0/10/02026-10-25 12:17
@HLhhh/dsh-skill-stats
Skill usage statistics panel for DSH: every installed skill with its use count, session coverage, and share of all skill use.
lownot queued (low risk)0/0/40/02026-10-25 12:17
@JoblessJoe/dsh-ping-me
Push-only phone notifications for DSH via ntfy: turn results, approvals, questions, failures, and alerts from automation tasks. Nobody can talk back to your agents.
lownot queued (low risk)0/0/40/02026-10-25 12:17
@9178159/dsh-napcat-bot
DSH 插件:内置 NapCat 的 QQ 机器人(识图 / 智能语音 / 随缘主动发言 / 联网搜索)
mediumqueued0/8/150/02026-10-25 12:17
@EnderBull/dsh-mist-ink-theme
Mist Ink — a softer graphite dark theme with frosted glass for the DSH Web GUI.
lownot queued (low risk)0/0/40/02026-10-25 12:17
@kgmkm/dsh-rustxng
DSH plugin: answer the built-in web_search with your own RustXNG metasearch instance (Windows / macOS / Linux)
mediumqueued0/8/180/02026-10-25 12:17
@Liaoyun666/dsh-android-portability
DSH 插件安卓可移植性静态体检:17 条规则查一个插件装到 DSHA(Linux arm64 + glibc proot)上会不会直接跑不起来。Static portability audit for DSH plugins targeting Android.
lownot queued (low risk)0/0/30/02026-10-25 12:17
@YiZhiQvQ/dsh-plugin-update
Check npm for newer versions of a DSH plugin and update it in one click, from the plugin's own detail page.
lownot queued (low risk)0/0/20/02026-10-25 12:17
@zenVibeCoding/dsh-ai-gateway-provider
Any OpenAI-compatible gateway for DSH: probe, save, manage models; known backends report quota.
mediumqueued0/1/90/02026-10-25 12:17
@Nemushio/dsh-gpt-tutor
Diagnosis-first tutoring for DSH: physics, probability, calculus and programming, with live adjustable figures.
lownot queued (low risk)0/0/00/02026-10-25 12:17
@ljxdsg12/dsh-composer-polish
Polish button for the DSH composer: rewrite your draft prompt, then cancel back to the original text.
lownot queued (low risk)0/0/10/02026-10-25 12:17
@pangxie985/dsh-desktop-yida
基于开源 CLI OpenYida制作的DSH desktop插件,用 AI 创建、修改钉钉宜搭(Yida)应用,右侧栏「宜搭工作台」直接查看。
highqueued3/2/100/02026-10-25 12:17
@Liaoyun666/dsha-capability-map
DSHA 设备能力地图:一条命令问清这台安卓手机上 agent 到底能用哪些能力,逐项分清没开开关 / 没给权限 / 时机不对 / 真坏了。
mediumqueued0/7/100/02026-10-25 12:17
@doyokol/dsh-wechat-bridge
把个人微信接进 DSH:自建 reader 收消息 + 自编译 hook 发消息,不依赖第三方客户端
mediumqueued0/18/160/02026-10-25 12:17
@doyokol/dsh-model-star
DSH 插件:模型收藏(星标常用 provider/model 组合,一键切换)
lownot queued (low risk)0/0/50/02026-10-25 12:17
@MingoYung/dsh-awakening
鲸启:DSH 鲸鱼主题22秒启动动画,原声欢迎语、窗口适配与独立设置。
lownot queued (low risk)0/0/40/02026-10-25 12:17
@cctv2333/dsh-vidlens
DSH plugin: 18 local tools that watch a public video the way a person does - metadata, chapters, timestamped frames, subtitle-first transcripts, and 527-class sound events - without downloading the whole video.
mediumqueued0/2/30/02026-10-25 12:17
@M4rkzzz/dsh-decisiontools
Optional bounded Decision API assistance for DSH: tool discovery, per-session DecisionBoost and search-source prefetch.
mediumqueued0/3/60/02026-10-25 12:17
@tianhengzhibei/dsh-approval-ding
Play a short ding whenever DSH asks for tool approval.
mediumqueued0/1/00/02026-10-25 12:17
@coldgust/dsh-translation-assistant
A DSH plugin that adds a translation workspace to the Web GUI: translate text, an image, or a whole file, compare source and translation segment by segment, edit the output, switch the model per session, and keep every document on this device.
mediumqueued0/1/10/02026-10-25 12:17
@PonyDevAI/dsh-system-hud
DSH Web 插件:把本机 CPU / 内存 / 磁盘 / 网络 / I/O / 温度显示在对话顶栏、输入框底部、侧边栏底部,点开右侧「系统」详情
mediumqueued0/1/50/02026-10-25 12:17
@BEIDAOU/dsh-boot-animation-custom
DSH 启动动画定制插件:8 段短片随机或固定播放,支持片尾淡入、分时问候、可选欢迎语和素材管理。
mediumqueued0/1/70/02026-10-25 12:17
@Saln137/dsh-balance
在 DSH 桌面端侧边栏常驻显示 DeepSeek 账号余额的插件(宿主统一取数 + 浏览器浮层)
mediumqueued0/4/100/02026-10-25 12:17
@eatone9254/dsh-balance-badge
在 DSH 主界面右下角显示账户余额的插件
lownot queued (low risk)0/0/00/02026-10-25 12:17
@pucco-OD/dsh-sumika-widget
A desktop character for DSH: shows the agent's state, plays waiting and completion sounds, and turns its questions and approvals into a pixel-art card you can answer without switching windows.
mediumqueued0/4/30/02026-10-25 12:17
@sunbigfly/dsh-multi-user-service
DSH 多用户服务:在公司或团队服务器上运行一套 DSH,供多人通过浏览器登录;成员拥有独立会话与文件,管理员统一管理账号、权限、用量与并发。服务端业务扩展,适配 DSH 0.2.1-rc.2,支持 Linux/WSL。
lownot queued (low risk)0/0/40/02026-10-25 12:17
@HuaLQIn/dsh-annotation-jump
Fork of dsh-annotation by omdsh-dev (MIT). Click an "Annotation N" chip in a reply to jump back to the annotated passage, highlight it briefly, and report clearly when the passage cannot be found.
lownot queued (low risk)0/0/30/02026-10-25 12:17
@taxueseek/plugin-fast-adapt
DSH 插件适配与破坏性变更核查,兼从零造插件脚手架:直连官方升级指南与 npm dist-tags 自动跟进新版,一条命令出五形态骨架并当场验证,零外部依赖。dsh-plugin-upgrade-skill 的独立衍生项目
lownot queued (low risk)0/0/140/02026-10-25 12:17
@joshua05100413-cmd/dsh-AcidCore-plugins
DSH Web 客户端插件:酸性科技风 WebGL 线框晶体背景 + Acid-Mono 主题 + 设置页控制面板;另有输入框字数/token 计量。零依赖、零构建、自带离线自检。
mediumqueued0/1/170/02026-10-25 12:17

Dynamic audit results · new today (1 with a conclusion)

The model reads redacted source context and never executes plugin code. When a dynamic conclusion exists it is authoritative (it may raise or lower the level); otherwise the static tier applies. The audit never writes the exemption list.

latest conclusion 2026-10-26 07:31 (UTC+8)
@zy12342/dsh-approval-toaststaticmedium→dynamicmedium2026-10-25

Loopback approval endpoint is 128-bit token-gated, but the plugin silently installs a persistent HKCU PowerShell protocol handler and runs unaudited .ps1 files with ExecutionPolicy Bypass.

  • mediumSilent, persistent HKCU protocol handler launches hidden PowerShell with ExecutionPolicy Bypass · index.js:78
  • mediumBundled toast.ps1 / decision.ps1 are executed with ExecutionPolicy Bypass but are not in the reviewed source · index.js:60
  • lowApproval token travels in the activation URI/command line, so any same-user process can settle the approval · index.js:264

Site-wide fused risk

Static + vet fused, dynamic conclusions applied (authoritative when present, raise or lower); 24543 entries in total

2026-10-25
19
critical
347
high
1195
medium
22629
low
Critical-tier plugins (19)

Static heuristic scan + manifest audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.

Daily report archive

70 reports
2026-10-25current200 added0 crit84 medium2026-10-24166 added2 crit81 medium2026-10-23218 added4 crit90 medium2026-10-22193 added1 crit55 medium2026-10-21220 added0 crit69 medium2026-10-200 added0 crit0 medium2026-10-190 added0 crit0 medium2026-10-18609 added1 crit221 medium2026-10-17306 added0 crit0 medium2026-10-160 added0 crit0 medium2026-10-15110 added1 crit47 medium2026-10-1499 added1 crit33 medium2026-10-13102 added1 crit36 medium2026-10-120 added0 crit0 medium2026-10-110 added0 crit0 medium2026-10-10104 added0 crit40 medium2026-10-098 added0 crit1 medium2026-10-08100 added0 crit39 medium2026-10-070 added0 crit0 medium2026-10-060 added0 crit0 medium2026-10-050 added0 crit0 medium2026-10-0472 added0 crit30 medium2026-10-0388 added0 crit36 medium2026-10-0299 added1 crit47 medium2026-10-010 added0 crit0 medium2026-09-30182 added3 crit51 medium2026-09-2969 added0 crit22 medium2026-09-2864 added0 crit23 medium2026-09-2763 added0 crit23 medium2026-09-2684 added0 crit29 medium2026-09-2545 added1 crit24 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit29 medium2026-09-2259 added1 crit18 medium2026-09-2165 added0 crit23 medium2026-09-20104 added1 crit34 medium2026-09-1981 added0 crit36 medium2026-09-1872 added0 crit14 medium2026-09-1770 added1 crit24 medium2026-09-1567 added2 crit32 medium2026-09-1482 added1 crit30 medium2026-09-1343 added0 crit15 medium2026-09-1284 added0 crit29 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit17 medium2026-09-0948 added0 crit15 medium2026-09-08922 added2 crit301 medium2026-09-0743 added0 crit15 medium2026-09-0614 added0 crit3 medium2026-09-0565 added0 crit20 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit30 medium2026-09-0285 added0 crit19 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit87 medium2026-08-2733 added0 crit15 medium2026-08-26253 added0 crit74 medium2026-08-25336 added1 crit106 medium2026-08-24327 added4 crit79 medium2026-08-23370 added2 crit119 medium2026-08-2212 added0 crit6 medium2026-08-212656 added8 crit509 medium2026-08-20597 added5 crit160 medium2026-08-191301 added12 crit402 medium2026-08-184003 added22 crit1352 medium2026-08-17142 added1 crit49 medium2026-08-16189 added0 crit80 medium2026-08-15348 added5 crit166 medium
← Back to security reports

What does this daily report cover?

This report covers plugins first indexed by dsh.so on 2026-10-25. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.

How are the risk tiers assigned?

Risk tiers follow the same public model used across the site. Critical is reserved for secrets, exfiltration, destructive commands, or mining; other critical-level findings and warnings are reported as medium (needs review), and low for plugins with no meaningful findings.

Why is this not a full security audit?

The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.

What does the "Manifest" column mean?

Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.

Is the static scan the only layer?

No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusion is authoritative when there is one — it can raise a verdict or lower it; the static/vet fused tier applies only when there is no dynamic conclusion. Exemptions stay manual and the script never writes the suppression list. This daily report shows both layers: every new entry is marked with its dynamic state (conclusion / queued / failed / out of the queue because it is low risk), and all conclusions of the day are listed below with their tier, model summary and findings. As of the latest run: 2864 dynamic audit records, 2289 with a model conclusion, 321 stricter than the static verdict, 789 softer.

Source: dsh.so security standards · Maintained by dsh.so · Published

Was this page helpful?