Daily security scan
Date · 2026-11-02 (UTC — plugins first indexed that day)
Effective tier · new today
dynamic first · this report2
critical
5
high
58
medium
98
low
0 of 163 new entries take their tier from a dynamic audit conclusion; the rest use the static scan tier. Where a conclusion exists it is authoritative (it may raise or lower the tier).
Static scan · new today
rule heuristics · fallback2
critical
5
high
58
medium
98
low
Tier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low. Used only when no dynamic conclusion exists.
Dynamic audit · subset of new today
model reads source · no execution0
critical
0
high
0
medium
0
low
Tier = highest finding. Of 163 new entries: 0 with a conclusion, 64 queued, 1 failed (no conclusion), 98 low-risk not queued.
Data file updated 2026-11-03 07:30 (UTC+8)
| Plugin | Effective | Static | Dynamic | Findings C/W/I | Manifest | Indexed |
|---|---|---|---|---|---|---|
| @TLNing260310/dsh-summary-index Non-invasive structured compaction index, deterministic anchor guard, and probe tools for DSH. AI-assisted alpha/demo. | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 00:16 |
| @Carrick-K7/dsh-carrick-optimize Warm DSH session discovery so the history list is ready before the first request. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 00:16 |
| @lucagiftzek/dsh-orchestrator Agent swarm and task orchestration for DSH: Orchestrate tab, orch_* tools, runners, provider cards, machine API. | medium | medium | queued | 0/6/19 | 0/0 | 2026-11-02 00:16 |
| @lucagiftzek/dsh-voice Read-aloud, dictation and language-aware speech for the DSH web UI: 23 TTS and STT providers, per-language routing, word highlighting. | medium | medium | queued | 0/1/5 | 0/0 | 2026-11-02 00:16 |
| @LotusPrimeUmbra/dsh-plugin-tts DSH 的 TTS 语音合成插件：小米 MiMo / Breeze 双协议合成、试听、克隆音色、唱歌，并可直接通过 OneBot 发 QQ 语音。 | medium | medium | queued | 0/13/15 | 0/0 | 2026-11-02 00:16 |
| @YunaAloft/dsh-rtk-workbench Cuts tool-output tokens in DSH: rewrite, compress, rtk bundled. | medium | medium | queued | 0/1/3 | 0/0 | 2026-11-02 00:16 |
| @Practice019/dsh-fingerprint DSH插件：勾选已配置的模型跑 LM 指纹检测，出排名表 + 检测历史；后台运行、随时接回 | critical | critical | queued | 1/3/16 | 0/0 | 2026-11-02 00:16 |
| @bona11122/dsh-skill-peek 轻量化的侧栏 skills 快速检索插件，仅检索及查看 SKILL.md 原文。 · A lightweight sidebar plugin for quickly searching the skills on this machine — search and read SKILL.md, nothing else. | medium | medium | queued | 0/1/11 | 0/0 | 2026-11-02 02:16 |
| @xiaoran0829/dsh-session-deliverables DSH Web 插件：会话顶栏「文件」视图，列出本会话交付的文件（Word/Excel/PPT/图片/视频），一键按附件下载，内外网一致。 | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 02:16 |
| @easun-zhu/dsh-cap-manager One panel for MCP servers, skills & Claude Code plugins in the DSH Web UI — scope-grouped cards with live status, import/export, and the official claude-plugins-official market. | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-11-02 02:16 |
| @FelixJiashengFu/dsh-academic-switch 学术模式开关 for DSH: three-pass source verification, three-pass logic review, pre-delivery verification gate, max reasoning effort | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 02:16 |
| @xiaoran0829/dsh-credential-vault DSH Web 插件：本地加密凭证库，保存密码与 API Token；浏览器查看需主密码，Agent 可通过 vaultctl 查阅。 | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 02:16 |
| @Leonlee114514/dsh-local-trim Give small local models a light harness in DSH: per-provider tool mask, prompt-section trimming, light instruction injection, tool-schema slimming. Cloud providers untouched. | medium | medium | queued | 0/10/19 | 0/0 | 2026-11-02 02:16 |
| @0xyxy/dsh-purge DSH 宿主策略补丁、提示词与规则管理、诊断、校验更新与本机备份回滚 · DSH 插件 | medium | medium | queued | 0/9/0 | 0/9 | 2026-11-02 02:16 |
| @RayrunOS/dsh-rayrun-computer Rayrun cloud computers for DSH: create, manage and open remote Linux desktops (noVNC) in the sidebar, and hand agent tasks to the same machines with rayrun_* tools. Per-session cloud/local routing, password or WeChat login, token kept in the Harness vault. | high | high | queued | 3/3/23 | 0/0 | 2026-11-02 02:16 |
| @vaniawang/dsh-trigger-hub Event sources for DSH agents: cron/interval schedules, authenticated webhooks, file watchers and deterministic procedures — one ledger, one console, one concurrency limit. | medium | medium | queued | 0/2/7 | 0/0 | 2026-11-02 04:16 |
| @Ffwjl010831/dsh-plugin-kassel-boot 卡塞尔学院风格的 DSH 启动动画，六屏点击推进，结尾金色交接 | medium | medium | audit failed | 0/4/0 | 0/0 | 2026-11-02 04:16 |
| @anbulang/dsh-connect-teleagent 把本机登录的 TeleAgent（天翼 AI 星辰超级智能体桌面端）模型接入 DSH 的插件：OpenAI 兼容 shim、真流式、多轮、图片、工具调用、思维链、积分。 | medium | medium | queued | 0/8/9 | 0/0 | 2026-11-02 04:16 |
| @WhXcjm/dsh-cost-bar DSH 插件：输入栏成本条，显示本轮与会话的估算花费，点开看双栏明细。Composer-bar cost pill for DSH. | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 04:16 |
| @PluckSlugSorrow/dsh-session-history-search Sidebar search across every past Session for DSH: literal substring matching that also works for Chinese, results grouped per Session with highlighted snippets, one click to reopen that conversation. | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 04:16 |
| @icrefin/dsh-session-monitor A live grid for every active and recently used DSH session: transcript, pending questions and queued prompts in one panel. | medium | medium | queued | 0/2/4 | 0/0 | 2026-11-02 04:16 |
| @starry-sky-blip/dsh-tri-model 多模型分层协同插件 for DSH：规划 → 执行 → 审查 → 自动返工，端点/协议/模型/层级全在设置面板里配。 | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 04:16 |
| @Asern-l/dsh-plugin-test-controller-public Read-only public snapshot of a disposable test-run controller for DSH plugins (v1.11.3) | medium | medium | queued | 0/2/5 | 0/0 | 2026-11-02 04:16 |
| @undefineken/dsh-theme-matrix-glass Matrix-style binary (0/1) digital rain theme for DSH, gated on task run state, with a frosted-glass token layer. | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 04:16 |
| @G-Grant/dsh-worktree-manager DSH 会话头部环境/分支 chip：本机切换检出，Worktree 在 .agents/worktrees 创建隔离工作区，支持合并、压缩提交、删除与自动清理。 | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 04:16 |
| @Xun209/dsh-fatfish-pet-xun209 DSH 大肥魚桌寵 · 勛 —— DSH 的大肥魚（鯨魚娘）桌寵。本機版修正：在 DSH 0.2.1-rc.5 上修好了桌面透明窗渲染不出角色的問題。角色形象為社群二創，美術 CC BY-NC-SA 4.0（禁商用）。 | medium | medium | queued | 0/1/0 | 0/0 | 2026-11-02 04:16 |
| @icrefin/dsh-session-title Title every DSH session from the work it actually did, and keep it current as later rounds move it on. | medium | medium | queued | 0/2/5 | 0/0 | 2026-11-02 04:16 |
| @fuchen9/dsh-token-usage Token-usage panel for DSH: totals every stored session's token spend, broken down per model, provider, session type and time window. Offline, zero dependencies. | medium | medium | queued | 0/7/25 | 0/0 | 2026-11-02 04:16 |
| @Lin-AxiomSight/dsh-zh-layer A toggleable bilingual layer for DSH: Chinese names + English originals for plugins, commands and skills · DSH 的双语覆盖层：为插件、命令与 Skill 叠加中文名和功能说明，三种显示模式，英文原版一键开关。 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 04:16 |
| @v-hiker/dsh-message-export DSH 插件：把助手回答导出为 PNG / PDF / HTML，保留代码高亮、表格、公式与内联图片 | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 04:16 |
| @QIFANAI/dsh-startup-elisa DSH 冷启动动画 + 毛玻璃皮肤插件（ELISA · FLOW 0.6.0）：黑幕开幕 / HUD 冷启动 / 交接转场 / 程序化音轨 / 四档皮肤；公开仓库不含第三方人物素材，缺失时按降级链运行。 | medium | medium | queued | 0/1/17 | 0/0 | 2026-11-02 04:16 |
| @amd47802574/dsh-session-fulltext-search DSH plugin: enable full-text search over session history (SQLite FTS5) in the web sidebar | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 04:16 |
| @v-hiker/dsh-session-time-absolute DSH 插件：把侧边栏会话行的时间从相对时间换成绝对时间（来源与格式可配，带总开关） | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-11-02 04:16 |
| @icrefin/dsh-remote-control Drive a DSH host from any browser through one outbound WebSocket relay — the real client, not a cut-down remote. | medium | medium | queued | 0/8/21 | 0/0 | 2026-11-02 04:16 |
| @icrefin/dsh-feishu-session-manager Turn one Feishu chat into the interface of every DSH session: model-written summaries out, model-routed replies back. | medium | medium | queued | 0/2/7 | 0/0 | 2026-11-02 04:16 |
| @Xun209/dsh-fatfish-usage-xun209 DSH 大肥魚記賬掛件 · 勛 —— DSH 右下角的記賬掛件。本機版改造：單次點擊顯示「當前會話模型」的餘額與會員訂閱週期剩餘用量，而不是固定顯示 DeepSeek。角色形象為社群二創，美術 CC BY-NC-SA 4.0（禁商用）。 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 04:16 |
| @MrLsss/cyber-self cyber-self —— 赛博镜像：为每个身份建一座本地资料库，收集、整理、索引你的数据，随时用提问的方式复用它。 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 04:16 |
| @Edison-A-N/dsh-remote-editor DSH Web plugin: open the session workspace in your local Cursor / VS Code over Remote-SSH | low | low | not queued (low risk) | 0/0/8 | 0/0 | 2026-11-02 04:16 |
| @Aquarius07212/dsh-plugin-effort-panel Codex-style single-panel model and effort picker for the DSH composer | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 04:16 |
| @NingYuanLee/dsh-jev-mcp | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 04:16 |
| @Wang341223/dsh-umbrella-startup DSH 启动动画插件 · 生化危机保护伞公司主题（含音频素材） | medium | medium | queued | 0/1/10 | 0/0 | 2026-11-02 04:16 |
| @c4i890/dsh-wetflow A biological research workbench plugin for DSH | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 04:16 |
| @hanranCode/dsh-loopscope LOOPScope — agent loop & trajectory visualization for DSH: interactive LOOP cards, phase rings, waterfall timing, token accounting, tool-call inspection and agent observability in the web UI. 中文：DSH 轨迹可视化 / 循环观察插件。 | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-11-02 04:16 |
| @aoyamabf-max/dsh-obsidian-memory Obsidian-backed long-term memory for DSH: sidebar panel, BM25 search, token-budgeted context, optional GitHub sync. | low | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-11-02 06:16 |
| @Simon-Kuo/dsh-sync-ui DSH cross-machine sync panel plugin | medium | medium | queued | 0/1/4 | 0/0 | 2026-11-02 06:16 |
| @zeus300/dsh-locale-es Paquete de idioma espanol (es) para DSH: 62 namespaces, 2879 cadenas de UI y 165 mensajes del shell nativo | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 06:16 |
| @thomasly/dsh-web-search-brave Brave Search provider for DSH: model-agnostic web_search on the official ctx.web seam. 零依赖，复用你自己的 Brave key。 | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 06:16 |
| @339006900/dsh-coding-discipline | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 06:16 |
| @lin114514-desng/dsh-chat-gutter DSH 聊天区双侧标识带：右侧回合编号路标，左侧按回合合并的过程徽标（⚙️工具 ⌨️命令 🧐思考）、🤔 提问标识与回答段弧线，输入区两列「快速移动」跳转面板。纯客户端插件。 | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 06:16 |
| @SolvasHQ/dsh-theme Lightweight theme colors, DIY palettes, fonts, and appearance personalization for the DSH Web GUI. 轻量主题配色/字体个性化插件。 | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 06:16 |
| @alanzhao0128/dsh-web-search-gemini DSH web_search provider: Gemini Google Search grounding via CLIProxyAPI, with grounding redirect links resolved to real URLs | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-11-02 06:16 |
| @herenfor/dsh-sentinel DSH 主程序之外的照看：任务完成提醒、托盘启动；崩溃提醒和救援开发中。 | medium | medium | queued | 0/7/8 | 0/0 | 2026-11-02 06:16 |
| @w756568942/dsh-ptc-router PTC router for DSH: picks PTC or native tool presentation per task and switches it live for the model or the user. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 06:16 |
| @wangjiaxi/dsh-scheduled-send 在 DSH 输入框里定时发送消息：发送按钮旁的箭头 → 选时间 → 由宿主到点投递一条真实的用户消息（关掉页面、重启宿主都照发）。 | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 06:16 |
| @floatDreamWithSong/dsh-lifecycle DSH 的锁屏、密码/OTP/Passkey 认证与服务生命周期管理插件 | medium | medium | queued | 0/1/5 | 0/0 | 2026-11-02 06:16 |
| @zhukeu2-lang/dsh-takeover 会话移交：右键任意会话「移交会话」，新建一个上下文干净的会话接手，老会话原样保留；附清理页管理交接文档 | medium | medium | queued | 0/1/5 | 0/0 | 2026-11-02 06:16 |
| @Elias1222/deepseek-brain DSH 插件：可持久化、可查看、可交互的五层记忆大脑 + 3D 记忆观测仪 | medium | medium | queued | 0/1/7 | 0/0 | 2026-11-02 06:16 |
| @zhanglin-doudou/dsh-notifier DSH 的提示音插件：任务完成、任务中断、需要你介入时，各响一段不同的声音，并在设置页里开关和挑选。 | medium | medium | queued | 0/1/4 | 0/0 | 2026-11-02 06:16 |
| @LINGTIAN303/dsh-agents-visualization | medium | medium | queued | 0/1/4 | 0/0 | 2026-11-02 06:16 |
| @DrizzleGig/dsh-novel-beat Novel fork decision gate for DSH · 小说剧情决策闸 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 06:16 |
| @Cindy-ponoiyvhj/dsh-search-first Makes DSH agents look for existing work before they build. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 06:16 |
| @wangjiaxi/dsh-peak-valley 在 DSH 输入框下方、上下文指示器右边显示峰时 / 谷时倒计时：北京时间工作日 9–12、14–18 点为峰时，其余（含周末与中国法定节假日）为谷时。 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 06:16 |
| @xinstart-1/dsh-rollback DSH 对话回退插件：回退到任意一条历史消息，并同时还原工作区文件，包括渲染、ffmpeg、构建脚本等命令产出的文件 | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 06:16 |
| @HotAntOne/dsh-ui-fit DSH Web GUI 界面精简插件：左栏导航三态、输入条精简、手机端密度压缩，三块独立开关。 | low | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-11-02 06:16 |
| @woniuniuniu/dsh-media-desk DSH 自媒体工作台插件：一句话记灵感，一键生成脚本、封面、配图和分镜 | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 06:16 |
| @easychen/dsh-workspace-recent-sort DSH sidebar plugin: order WorkSpaces by their latest conversation, show compact conversations with a hover reveal, and scroll to the selected session. | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 06:16 |
| @CorgiCorner/bisibility-dsh-plugin Bisibility plugin for DSH - SEO rank tracking and AI visibility tools in the DSH sidebar. | medium | medium | queued | 0/2/11 | 0/0 | 2026-11-02 06:16 |
| @Sakura025/dsh-skill-picker Skill picker and in-app installer for the DSH composer: browse by lifecycle phase, search in Chinese or English, insert as /name, install from repo, URL, pasted text, or the skills.sh registry. | high | high | queued | 2/0/11 | 0/0 | 2026-11-02 06:16 |
| @BH8GCJ/dsh-xp-luna Windows XP Luna skin for DSH — Bliss desktop, blue taskbar sidebar, glass window and Luna titlebar. | low | low | not queued (low risk) | 0/0/7 | 0/0 | 2026-11-02 06:16 |
| @LIghtJUNction/dsh-file-context Immutable file and diff context snapshots for DSH | medium | medium | queued | 0/1/1 | 0/0 | 2026-11-02 08:16 |
| @wodaimnd/dsh-offload Offload quick "just think it through" sub-questions to web chat.deepseek.com to save local model thinking tokens. Ships a DSH panel for bridge status, self-tests and budget settings, plus a ds_offload agent tool callable in conversation. | medium | medium | queued | 0/4/6 | 0/0 | 2026-11-02 08:16 |
| @EVA09/dsh-codebuddy-acp 把本机 CodeBuddy CLI（ACP 模式）接入 DSH：模型选择、工具卡片、积分控制台 | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 08:16 |
| @Moontail-Ling/dsh-time-memory 按时间归档 + 分层回忆的 DSH 聊天记忆插件 | Time-based memory for DSH: recall the period first, widen twice, then say "I forgot". | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 08:16 |
| @simular-ai/box-plugin box by Simular: plugins that add box (a cloud computer your agent drives over MCP) to Claude Code, DSH and other agents | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 08:16 |
| @kesha4/dsh-site-bridge Hands and eyes for DSH in your own browser: page markup and BFF traffic capture, trusted input, virtual cursor. DSH plugin + MV3 extension. | medium | medium | queued | 0/8/39 | 0/0 | 2026-11-02 08:16 |
| @xuex991/dsh-working-changes See files changed from HEAD in the current DSH workspace and inspect each diff in the native right sidebar. | high | high | queued | 2/0/1 | 0/0 | 2026-11-02 08:16 |
| @13052293681-blip/dsh-facet-cards Facet cards (persona cards) for DSH sessions | low | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-11-02 08:16 |
| @HtO404/screenshotpro 实测 UI 截图：捕获窗口或网页，保持矩形尺寸与实测值完全一致，绘制框体、数字、箭头、像素化效果并附带图例，通过 15 项断言验证该图像，可用于制作使用手册、操作说明、流程文档、软件工具功能演示等场景 | medium | medium | queued | 0/2/1 | 0/0 | 2026-11-02 08:16 |
| @Bismuth-209/DSHCmdGuard Review every command submitted by your agents, would take effect under all permission level except auto review. The plugin is focusing on preventing accidental deletion after deepseek-flash trying to delete my $home. | critical | critical | queued | 2/3/2 | 0/0 | 2026-11-02 08:16 |
| @LIghtJUNction/dsh-notes Revision-checked Markdown notes for DSH | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 08:16 |
| @LIghtJUNction/dsh-rewind Non-destructive Git checkpoints and file rewind for DSH | medium | medium | queued | 0/1/3 | 0/0 | 2026-11-02 08:16 |
| @LIghtJUNction/dsh-recall Searchable project conversation excerpts for DSH | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 08:16 |
| @Zylog82568/dsh-persona-slot Per-session persona slot for DSH: one persona per session, a global persona every session inherits, a /persona command and an Installed-page panel. | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 08:16 |
| @bowmark-ai/dsh-bowmark DSH plugin for the Bowmark MCP server | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 08:16 |
| @wjlfish/dsh-subscription-sim Claude/ChatGPT-style subscription quota simulator for the DSH Web UI | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 08:16 |
| @dok4everak47/dsh-backends | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 08:16 |
| @a307608689-afk/dsh-session-trash DSH 会话回收站插件：删除会话可恢复、文件留档、到期自动清理 | low | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-11-02 08:16 |
| @LIghtJUNction/dsh-hashline Stale-safe hash-anchored line editing for DSH | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 08:16 |
| @lyy-hast/dsh-coros-plugin | medium | medium | queued | 0/2/8 | 0/0 | 2026-11-02 08:16 |
| @LIghtJUNction/dsh-rtk-optimizer RTK command optimization for DSH | medium | medium | queued | 0/1/0 | 0/0 | 2026-11-02 08:16 |
| @kocor01/dsh-model-auto-retry DSH host plugin: keep agents alive through model rate limits (HTTP 429) - in-loop retry, then an automatic 继续 follow-up. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 08:16 |
| @LIghtJUNction/dsh-caffeinate Keep the computer awake while DSH agents run | medium | medium | queued | 0/1/0 | 0/0 | 2026-11-02 08:16 |
| @xiachuyoufeng/dsh-soul-evolve 人格状态与缓慢演化插件：反射弧驱动的状态层 + 场景切面 + 带权重预算的演化条目 | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 08:16 |
| @Charles516z/dsh-autocompress Scheduled context compaction for DSH: compress every idle session each morning, catch up on the next launch, or run /compact-all on demand. | medium | medium | queued | 0/1/2 | 0/0 | 2026-11-02 08:16 |
| @mhxy13867806343/dsh-plugin-select-model | low | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-11-02 08:16 |
| @LIghtJUNction/dsh-red-green Evidence-driven RED GREEN REFACTOR workflow for DSH | medium | medium | queued | 0/1/0 | 0/0 | 2026-11-02 08:16 |
| @xinstart-1/dsh-any-rollback DSH 对话回退插件：回退到任意一条历史消息，并同时还原工作区文件，包括渲染、ffmpeg、构建脚本等命令产出的文件 | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 08:16 |
| @LIghtJUNction/dsh-dotenv Explicit dotenv loading without overwriting inherited variables | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 08:16 |
| @LIghtJUNction/dsh-compass Repository code maps and navigation for DSH | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 08:16 |
| @wszw142857-beep/dsh-word-master Word Master for DSH — agent preset 形式把素材做成规范 Word 文档：素材转换 → 规格冻结 → 逐节写作 → 质检门 → 审阅界面 → 渲染闸门 → 导出。架构范式学习自 PPT Master。 | medium | medium | queued | 0/2/4 | 0/0 | 2026-11-02 08:16 |
| @Sunday530/dsh-sidebar-panel-collapse Collapsible sidebar panel list for DSH — one chevron toggle gives the workspace its height back. | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 08:16 |
| @xnwang1999/dsh-dragon-maid-pet | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-11-02 08:16 |
| @qiubai-di/dsh-chatgpt-subscription OAuth-only ChatGPT subscription model provider for DSH. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 08:16 |
| @little-fire9552/dsh-healthkit-report DSH plugin for healthkit-report: adds a healthkit_report agent tool. | medium | medium | queued | 0/1/4 | 0/0 | 2026-11-02 08:16 |
| @bingomu/dsh-image-zoom In-chat image viewer for DSH: zoom, pan, gallery, auto-named downloads, open in default app. ｜ 聊天图片查看器：缩放、平移、图集、自动命名下载、系统默认应用打开。 | low | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-11-02 08:16 |
| @mwk719/dsh-restart 给 DSH Desktop（Windows）的标题栏加一个「重启」按钮。点一下弹出确认框，确认后应用关闭并重新打开。 | medium | medium | queued | 0/4/9 | 0/0 | 2026-11-02 10:16 |
| @oooplz/dsh-stitch-mcp Integrate Google Stitch via MCP to enable the assistant to list, create, edit, and generate Stitch projects, interfaces, and design systems. | medium | medium | queued | 0/3/6 | 0/0 | 2026-11-02 10:16 |
| @zach-bworld/dsh-mermaid DSH 插件：会话内 Mermaid 图表渲染 | medium | medium | queued | 0/2/1 | 0/0 | 2026-11-02 10:16 |
| @ASUKAq01/dsh-background-image Custom background image for the DSH Web UI: upload an image, tune opacity and blur, no layout changes. | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-11-02 10:16 |
| @KrimsonSun/dsh-result-check DSH plugin: checks the answer against tool output before a turn ends (unreported tool failures, numbers with no source) | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 10:16 |
| @dongfangxy/dsh-archive-cleaner DSH 插件：清理已归档的对话/会话，移到隔离区或直接删除，释放磁盘空间。Clean up archived DSH sessions and reclaim disk space. | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 10:16 |
| @devzer0o0/dsh-grok-buddy Grok Bot's own face in your DSH sidebar — the original GrokBot avatar expressions draw each session's status, no extra UI. | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 10:16 |
| @gavinff1990/dsh-context-map Turn a conversation's context into a layered architecture map - goals, decisions, risks - exported as SVG, interactive HTML and Mermaid. | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 10:16 |
| @jerentpan-lab/dsh-source-ledger Source-tagged assertion ledger for DSH: inspectable source pointers + reproducible audit sampling. | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 10:16 |
| @jerentpan-lab/dsh-attention-router Attention router for DSH: alert / decide / inform routing so agents stop over-notifying. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 10:16 |
| @CresBigB/dsh-oracle-gate Freeze the acceptance criteria first, then honor only execution receipts. An acceptance gate for DSH. | medium | medium | queued | 0/1/0 | 0/0 | 2026-11-02 10:16 |
| @Aonysen/dsh-memory-rag Long-term RAG memory for DSH: cloud, local Ollama, or offline BM25. | medium | medium | queued | 0/2/8 | 0/0 | 2026-11-02 10:16 |
| @nobodyhere34/dsh-session-subagent-models Per-session editable subagent model allowlists for DSH — experimental, known design flaws, not maintained | medium | medium | queued | 0/1/3 | 0/0 | 2026-11-02 10:16 |
| @Charles516z/dsh-win-pronounce Speak aloud in DSH with the local Windows voices (SAPI + OneCore): one speaker button beside the permission control, voices switchable at runtime. / 用本机 Windows 语音朗读：对话输入栏权限控件右边一枚喇叭键，SAPI 与 OneCore 音源随时切换。 | medium | medium | queued | 0/2/5 | 0/0 | 2026-11-02 10:16 |
| @Limtide/dsh-agent-lab Agent 行为回归实验台：把会话录成运行记录，并排对比两次运行的工具序列、参数、结果与用量 | low | low | not queued (low risk) | 0/0/4 | 0/0 | 2026-11-02 10:16 |
| @zhangyahao/dsh-context-curator 把 DSH 每轮模型请求里那些冗长但偶尔才用得上的提示词段，折叠成一行索引； 原文留在插件内存里，模型（或你）确实需要细节时再按名字取回。 | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 10:16 |
| @jerentpan-lab/dsh-task-heartbeat Task heartbeat for DSH: progress beats and stall detection, not mere liveness. | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 10:16 |
| @Zhuang-YiQing/dsh-search-outline 基于dsh-better-sidebar，在文件预览时提供搜索功能和idea的structure列表。structure列表目前仅支持java、js、html、python。 | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 10:16 |
| @lucakaneshiro1/worldpulse Live world news, situation analysis, and conflict-aware travel planning for DSH. | low | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-11-02 10:16 |
| @wzciczw/dsh-worktree-toggle One-click git worktree launcher for DSH: start a session in a fresh worktree, with automatic cleanup of idle worktrees. | medium | medium | queued | 0/1/1 | 0/0 | 2026-11-02 10:16 |
| @astephengoo-arch/dsh-task-deck Task Deck — a personal multi-session mission control for DSH Desktop. | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 10:16 |
| @Ganglith/dsh-wayland-use Wayland的控制电脑，screenshot、带坐标的 OCR、按文字点击、批量动作 | medium | medium | queued | 0/5/2 | 0/0 | 2026-11-02 10:16 |
| @hangdingding/breezetts-dsh-0.2-archive Official BreezeTTS plugin for DSH — read replies aloud, powered by Breeze CLI with the Breeze API as fallback. | high | high | queued | 2/1/11 | 0/0 | 2026-11-02 10:16 |
| @yoinchen23-oss/dsh-message-branch Inline editing of text prompts into new DSH conversation branches. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 10:16 |
| @ZhSM27/dsh-waymark Local agent workflow diagnostics and opt-in live reminders for DSH. Alpha — feedback welcome. | low | low | not queued (low risk) | 0/0/1 | 0/0 | 2026-11-02 10:16 |
| @ZhongYiSS/body-of-fish 本鱼陪伴 · 身体：一只住在 Windows 桌面上的蓝色大肥鱼（Electron 独立小窗，可接 DSH） | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 10:16 |
| @4444Hao/qiaodoc-dsh 在 DSH 当前对话侧边栏打开文档，边阅读、边翻译、边提问。 | medium | medium | queued | 0/1/1 | 0/0 | 2026-11-02 12:16 |
| @zsenpro/DSH-Quickly-clear DSH插件：在已归档对话的菜单里删除对话，连会话日志、投影缓存和工作区记账一起清掉。 | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 12:16 |
| @ThomasTZh/dsh-mcp-auto-permission DSH bundle adding the Workspace Write + MCP permission preset and MCP approval auto-claim. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 12:16 |
| @Joker2377/dsh-taskbar-status Windows taskbar indicator for DSH Desktop: grey while an agent turn runs, amber when it is waiting for you, latched red after a failed turn. | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 12:16 |
| @ThomasTZh/dsh-chat-preset DSH bundle that adds a chat preset with web tools, skill loading, and no filesystem or shell access. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 12:16 |
| @yukimiracle/dsh-vision-capability DSH plugin · prove which models really read images, then declare vision support per model (图片能力检测) | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 12:16 |
| @13576751971/dsh-memory-band Local three-band memory plugin for DSH: 24h protection band, query recall, scene replay, zero embedding/model calls. | medium | medium | queued | 0/1/3 | 0/0 | 2026-11-02 12:16 |
| @nuet9/dsh-internal-folder-browser Harness internal folder browser with native file icons, thumbnails, and eight view modes | medium | medium | queued | 0/2/2 | 0/0 | 2026-11-02 12:16 |
| @xiaobaga281/dsh-rea 逆向分析 · DSH 插件：把 REA 的 207 个逆向工具延迟加载进 Agent 工具表，自带运行时解包、环境侧栏与 Ghidra/JADX/Apktool 一键准备 | medium | medium | queued | 0/3/6 | 0/0 | 2026-11-02 12:16 |
| @UniMars/dsh-whale-widget-dock Companion plugin for dsh-whale-widget: docks the desktop pet to the right sidebar edge. | low | low | not queued (low risk) | 0/0/3 | 0/0 | 2026-11-02 12:16 |
| @Biggy1606/dsh-balance-whale-intl English-first Balance Whale widget for DSH Web - live wallet, real token usage, turn costs, sounds, and EN/简体中文 UI. | medium | medium | queued | 0/1/10 | 0/0 | 2026-11-02 12:16 |
| @xiaobaga281/dsh-session-manager 会话管理 · DSH 设置页插件：搜索已归档会话、查看占用体积，多选恢复或永久删除（含残留清理与延迟删除重试） | medium | medium | queued | 0/1/3 | 0/0 | 2026-11-02 12:16 |
| @xiaobaga281/dsh-native-uia 御屏 · DSH 桌面操控插件：以 Windows UI Automation 控件树为主通道，纯文本模型即可操控桌面，后台投递动作、批量执行、逐步校验与配方回放 | medium | medium | queued | 0/4/8 | 0/0 | 2026-11-02 12:16 |
| @zach-bworld/dsh-session-notify DSH client plugin: sidebar badge + system notification when a background session finishes (multi-project workflow) | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 12:16 |
| @s17765152890-gif/dsh-usage-quota DSH plugin: Codex-style reasoning-effort control and provider-aware usage/quota in the composer dock. | low | low | not queued (low risk) | 0/0/7 | 0/0 | 2026-11-02 12:16 |
| @xyzOvO/dsh-wiki-notes Read-only retrieval over a folder of Markdown notes for DSH — one wiki_recall tool, four modes, returns the matching section's full text with page-level citations. 本地 Markdown 知识库检索插件。 | low | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-11-02 12:16 |
| @lubanaishuxue/dsh-private-background Custom wallpaper for the DSH UI — local images, GIFs, videos, gradients or solid colors, with blur, dim, focus position, per-panel opacity and a liquid-glass material. Everything stays on your machine. | low | low | not queued (low risk) | 0/0/8 | 0/0 | 2026-11-02 12:16 |
| @43aquarius/luna-threshold-cool 高频筛选后刻意冷却阈值，复苏判断心态 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 12:16 |
| @LittleLemonJam/dsh-quick-notes A floating sticky-note pad for the DSH Web GUI with a note directory, text editing, pasted images and local persistence. | low | low | not queued (low risk) | 0/0/7 | 0/0 | 2026-11-02 12:16 |
| @zzz123123lll/workflow-canvas-sidebar Visual AI project workflows for DSH: sources, discussions, revisions and deliverables. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 12:16 |
| @xiaobaga281/dsh-token-spend 花费 · DSH 设置页插件：按全部 token（输入 + 缓存读 + 缓存写 + 输出）统计用量，按消息 ID 去重，日账本保留已删除会话的花费 | medium | medium | queued | 0/1/3 | 0/0 | 2026-11-02 12:16 |
| @jwangkun/dsh-superagent A proactive agent for one GitHub repository, as a DSH bundle (fork of deepseek-ai/dsh-superagent-prototype: single-account requests, host-safe setup). | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 12:16 |
| @Wizoiz/dsh-skin-keymark DSH 皮肤：壁纸皮肤 + 全窗铺开（侧栏与所有面板一起透出皮肤）+ 纯字体颜色标注 / Wallpaper skin for DSH with full-window spread | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 12:16 |
| @hangdingding/breezetts-dsh Official BreezeTTS plugin for DSH — read replies aloud, powered by Breeze CLI with the Breeze API as fallback. | high | high | queued | 2/2/12 | 0/0 | 2026-11-02 12:16 |
| @lixiangzhong/dsh-active-chat Pin workspaces whose sessions are running or waiting for your reply to the top of the DSH sidebar. | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 12:16 |
| @NEVSTOP-LAB/dsh-gfm-alerts DSH GitHub 提示块插件：把回复里的 > [!NOTE] / [!TIP] / [!IMPORTANT] / [!WARNING] / [!CAUTION] 渲染成 GitHub 风格。 | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 12:16 |
| @mojiezhenlinana/dsh-custom-profile 给 DSH 换掉左下角那块「头像 + 昵称」，顺手把设置 → 账号与余额卡片里的头像也一起换掉。 只改本机浏览器的显示，不动账号资料，不联网，不上报任何数据 | low | low | not queued (low risk) | 0/0/2 | 0/0 | 2026-11-02 12:16 |
| @GXinnnnnn/dsh-SAO 仿刀剑神域开屏动画 | low | low | not queued (low risk) | 0/0/0 | 0/0 | 2026-11-02 12:16 |
| @ZZZ234234234/dsh-workbuddy-cny Show WorkBuddy credits and the DeepSeek CNY balance in one DSH sidebar line. The credit-to-CNY rate is measured from real token usage, not guessed. | medium | medium | queued | 0/1/7 | 0/0 | 2026-11-02 12:16 |
| @han8421/dsh-desktop-ball 加一颗可自定义 图标和背景 的桌面悬浮球：点一下，在独立窗口里对话 | medium | medium | queued | 0/3/3 | 0/0 | 2026-11-02 12:16 |
| @stilla-maris/dsh-quote-ask Quote it, ask it — in your main chat or a clean side chat. For DSH Desktop. | low | low | not queued (low risk) | 0/0/6 | 0/0 | 2026-11-02 12:16 |
| @iemgnod/dsh-shark-bg 在 Harness Web 界面背景中游动的 ASCII 鲨鱼 | low | low | not queued (low risk) | 0/0/5 | 0/0 | 2026-11-02 12:16 |
Dynamic audit results · new today (0 with a conclusion)
The model reads redacted source context and never executes plugin code. When a dynamic conclusion exists it is authoritative (it may raise or lower the level); otherwise the static tier applies. The audit never writes the exemption list.
No completed dynamic audit conclusion for this day yet (queued or failed — see the table above).
Site-wide effective tiers (dynamic first)
Dynamic conclusions set the tier where they exist; the static scan applies only where there is none. 25,363 in-scope entries (24,996 scanned + 367 pending).
18
critical
304
high
1,093
medium
23,581
low
Static scan for reference: low 24,816 · medium 0 · high 179 · critical 0 (dynamic conclusions moved these into the effective tiers above).
Critical-tier plugins (18)
Static heuristics + semantic manifest audit + a model-driven dynamic audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.
Daily report archive
78 reports2026-11-02current163 added2 crit5 high58 medium2026-11-010 added0 crit0 medium2026-10-310 added0 crit0 medium2026-10-30316 added2 crit4 high140 medium2026-10-29216 added2 crit8 high92 medium2026-10-28277 added2 crit6 high106 medium2026-10-270 added0 crit0 medium2026-10-2628 added0 crit10 medium2026-10-25200 added0 crit4 high80 medium2026-10-24166 added2 crit8 high73 medium2026-10-23218 added4 crit3 high87 medium2026-10-22193 added1 crit6 high49 medium2026-10-21220 added0 crit4 high65 medium2026-10-200 added0 crit0 medium2026-10-190 added0 crit0 medium2026-10-18609 added1 crit17 high204 medium2026-10-17306 added0 crit0 medium2026-10-160 added0 crit0 medium2026-10-15110 added1 crit5 high42 medium2026-10-1499 added1 crit33 medium2026-10-13102 added1 crit4 high32 medium2026-10-120 added0 crit0 medium2026-10-110 added0 crit0 medium2026-10-10104 added0 crit2 high38 medium2026-10-098 added0 crit1 high0 medium2026-10-08100 added0 crit39 medium2026-10-070 added0 crit0 medium2026-10-060 added0 crit0 medium2026-10-050 added0 crit0 medium2026-10-0472 added0 crit2 high28 medium2026-10-0388 added0 crit2 high34 medium2026-10-0299 added1 crit4 high43 medium2026-10-010 added0 crit0 medium2026-09-30182 added3 crit6 high45 medium2026-09-2969 added0 crit5 high17 medium2026-09-2864 added0 crit2 high21 medium2026-09-2763 added0 crit3 high20 medium2026-09-2684 added0 crit3 high26 medium2026-09-2545 added1 crit4 high20 medium2026-09-240 added0 crit0 medium2026-09-2379 added0 crit1 high28 medium2026-09-2259 added1 crit2 high16 medium2026-09-2165 added0 crit2 high21 medium2026-09-20104 added1 crit3 high31 medium2026-09-1981 added0 crit4 high32 medium2026-09-1872 added0 crit1 high13 medium2026-09-1770 added1 crit4 high20 medium2026-09-1567 added2 crit2 high30 medium2026-09-1482 added1 crit1 high29 medium2026-09-1343 added0 crit1 high14 medium2026-09-1284 added0 crit2 high27 medium2026-09-1131 added0 crit12 medium2026-09-1096 added1 crit1 high16 medium2026-09-0948 added0 crit1 high14 medium2026-09-08922 added2 crit62 high239 medium2026-09-0743 added0 crit5 high10 medium2026-09-0614 added0 crit1 high2 medium2026-09-0565 added0 crit14 high6 medium2026-09-044 added0 crit0 medium2026-09-0377 added0 crit15 high15 medium2026-09-0285 added0 crit11 high8 medium2026-09-010 added0 crit0 medium2026-08-300 added0 crit0 medium2026-08-290 added0 crit0 medium2026-08-28444 added1 crit48 high39 medium2026-08-2733 added0 crit6 high9 medium2026-08-26253 added0 crit38 high36 medium2026-08-25336 added1 crit51 high55 medium2026-08-24327 added4 crit41 high38 medium2026-08-23370 added2 crit73 high46 medium2026-08-2212 added0 crit2 high4 medium2026-08-212656 added8 crit290 high219 medium2026-08-20597 added5 crit84 high76 medium2026-08-191301 added12 crit273 high129 medium2026-08-184003 added22 crit999 high353 medium2026-08-17142 added1 crit36 high13 medium2026-08-16189 added0 crit53 high27 medium2026-08-15348 added5 crit144 high22 medium
What does this daily report cover?
This report covers plugins first indexed by dsh.so on 2026-11-02. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.
How are the risk tiers assigned?
Risk tiers follow the same public model used across the site: four levels — critical / high / medium / low — read from finding counts, most severe first. Critical is reserved for secrets, exfiltration, destructive commands, or mining; a high-severity finding without a critical one reads high; medium (warning-level) findings read medium (needs review); no meaningful findings reads low. Where the model-driven dynamic security audit has a conclusion, that conclusion sets the tier (it can raise or lower it); the static scan tier (vet primary, dsh backstop) applies only when there is no conclusion.
Why is this not a full security audit?
The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.
What does the "Manifest" column mean?
Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.
Is the static scan the only layer?
No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusion is authoritative when there is one — it can raise a verdict or lower it; the static scan tier (vet primary, dsh backstop) applies only when there is no dynamic conclusion. Exemptions stay manual and the script never writes the suppression list. This daily report shows both layers: every new entry is marked with its dynamic state (conclusion / queued / failed / out of the queue because it is low risk), and all conclusions of the day are listed below with their tier, model summary and findings. As of the latest run: 2898 dynamic audit records, 2294 with a model conclusion, 323 stricter than the static verdict, 790 softer.
Source: dsh.so security standards · Maintained by dsh.so · Published