Daily security scan

Date · 2026-11-12 (UTC — plugins first indexed that day)

Effective tier · new today

dynamic first · this report

critical

high

medium

125

low

0 of 193 new entries take their tier from a dynamic audit conclusion; the rest use the static scan tier. Where a conclusion exists it is authoritative (it may raise or lower the tier).

Static scan · new today

rule heuristics · fallback

critical

high

medium

125

low

Tier = scan verdict: critical hit → critical; warning / non-blocking critical → high / medium; none → low. Used only when no dynamic conclusion exists.

Dynamic audit · subset of new today

model reads source · no execution

critical

high

medium

low

Tier = highest finding. Of 193 new entries: 0 with a conclusion, 68 queued, 0 failed (no conclusion), 125 low-risk not queued.

Data file updated 2026-11-13 07:30 (UTC+8)

Plugin	Effective	Static	Dynamic	Findings C/W/I	Manifest	Indexed
@qrak/dsh-mode-switcher Tab toggles Plan/Build in DSH; each mode keeps its own model and reasoning preset across restarts.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 00:16
@aaalog/dsh-chat-bridge DSH Chat 桥接插件：把 DSH 的智能体接进聊天后台，Host 内驱动会话，不 spawn headless	low	low	not queued (low risk)	0/0/11	0/0	2026-11-12 00:16
@b-iurea/dsh-graphify Graphify integration for DSH: graphify_* agent tools + interactive code-graph sidebar tab	low	low	not queued (low risk)	0/0/4	0/0	2026-11-12 00:16
@yjnmedia/dsh-skill-order DSH 技能管家：排序、改名、自动规范，改完立刻生效。	low	low	not queued (low risk)	0/0/9	0/0	2026-11-12 00:16
@cccccccccccccy/dsh-session-reminder Left-sidebar reminder for DSH: blue count of running sessions, green count of finished-but-unread sessions.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 00:16
@Wolfloiz/plugin-janus Bidirectional control between DSH and Herdr	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 00:16
@ChAr11eG/dsh-realtime-voice Realtime voice phone call plugin for DSH: local VAD + ASR + TTS, voice cloning, call from chat	medium	medium	queued	0/3/10	0/0	2026-11-12 00:16
@wld007/dsh-medical-ontology 临床本体构建 · Clinical Ontology Builder for DSH (WIP): patient-level disease-course ontology with treatment decisions as nodes	medium	medium	queued	0/1/3	0/0	2026-11-12 02:31
@skysstst/dsh-independent-task One-click timestamped workspace folders + new sessions for DSH. 一键新建时间戳工作区并在其中开启新会话。	low	low	not queued (low risk)	0/0/8	0/0	2026-11-12 02:31
@nacivageer/dsh-parchment-theme 羊皮纸主题：给 DSH Web GUI 的旧纸墨褐配色（浅色羊皮纸 / 深色墨夜）	low	low	not queued (low risk)	0/0/3	0/0	2026-11-12 02:31
@TomJerryGit/dsh-workspace-audit Local-first workspace health audit for DSH: Git, tests, CI, size, security hotspots, Markdown handover report.	medium	medium	queued	0/4/12	0/0	2026-11-12 02:31
@329604421/dsh-agent-todo 四个入口，不用离开会话 —— Agent-ToDo 多项目工作台装进 DSH	low	low	not queued (low risk)	0/0/3	0/0	2026-11-12 02:31
@879745uhjun/dsh-session-stars DSH 插件：给工作区会话加 1-5 星收藏，并区分重要程度 \| Star-rating favorites with five importance levels for sessions in the DSH Web UI	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 02:31
@toss6969/dsh-family-life-check-suite 11 个家庭生活核对技能（DSH 随包技能提供方）：订阅体检、家庭账单、差旅行程、课表排期、作业清单、用药打卡等；本地确定性引擎，转人工显式化。	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 02:31
@Oreo0614/dsh-realtime-subtitles DSH plugin: live Chinese subtitles from system audio for local Japanese/English video playback.	medium	medium	queued	0/3/6	0/0	2026-11-12 02:31
@lengfengng-tech/dsh-skills-console	high	high	queued	2/3/7	0/0	2026-11-12 02:31
@Ornn8/dsh-fishbowl-town 鱼缸小镇 · DSH 插件：让你在 DSH 里养的鱼住进肥鱼小镇——打牌、串门、上日报，每一步都由 DSH 里的她来答	medium	medium	queued	0/1/7	0/0	2026-11-12 02:31
@nonenameless/dsh-a2a 为DSH的A2A插件，实现dsh和openclaw及hermes的多方a2a互通和工具调用等功能	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 02:31
@castiel0101/dsh-session-outline 为DSH聊天窗口加上「会话大纲」：标题栏按钮打开右侧抽屉，列出本会话每一轮的提问与回答摘要，支持检索与点击跳转定位。 \| Per-session outline for the DSH chat window: a header button opens a drawer listing every turn with prompt/response previews, a filter box, and click-to-jump navigation.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 02:31
@nohappiness/dsh-rightbar-max-keep-rail	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 02:31
@jusspound-netizen/dsh-plugin-scanner Scan a DSH plugin for security red flags before installing it: install scripts, risky imports, missing metadata, suspicious dependencies. Local-first, stdlib-only.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 02:31
@triagmas/dsh-project-evolution Project-isolated, evidence-backed engineering experience and reviewable project skills for DSH.	medium	medium	queued	0/2/14	0/0	2026-11-12 02:31
@baymaxbill/research-report-workbench 研报撰写工作台（DSH 插件）：研报拆解、PDF 圈选问答、五板块卡片、图表库与报告撰写	medium	medium	queued	0/10/13	0/0	2026-11-12 02:31
@boonelueng/dsh-sidebar-rail DSH 左侧边栏并列布局：左窄条功能区 + 右侧会话区，支持自定义条目与展开收起	medium	medium	queued	0/20/43	0/0	2026-11-12 02:31
@federicobuilds/dsh-workbench 21 plugins for DSH	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 02:31
@ruaibeite/dsh-token-slime A composer slime that grows on the tokens your agent writes, splits into a colony, wears a breed hat from the tool mix, molts on every context compaction, and totals the colony across sessions.	low	low	not queued (low risk)	0/0/1	0/0	2026-11-12 02:31
@wld007/dsh-medical-hl7 HL7 FHIR R4 conversion for de-identified medical records — DSH plugin	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 02:31
@fengshaoA/dsh-skills-fengshaoA Agent skills for DSH, installable via skills.sh. Includes decision-council: structured deliberation with a three-tier safety gate.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 02:31
@ZileiC/dsh-file-recall Local page-level document recall for DSH: find the file and page from a vague description, with verifiable evidence.	medium	medium	queued	0/1/0	0/0	2026-11-12 04:16
@thegabopacheco-sudo/dsh-plugin-mcp-health Salud historica de servidores MCP de DSH: handshake periodico, latencia, uptime por servidor y persistencia de muestras en cache local.	medium	medium	queued	0/1/6	0/0	2026-11-12 04:16
@leslie941012/dsh-ptt Push-to-talk for DSH: hold Alt to record, release to transcribe	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@smounives/dsh-rea-switch DSH plugin: toggle the REA MCP server on/off from Settings → REA (and a composer-dock pill), without editing patches by hand.	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 04:16
@ningbonb/dsh-csv-analyst Read-only CSV analysis with exact decimal totals and honest full-file counts for DSH	low	low	not queued (low risk)	0/0/7	0/0	2026-11-12 04:16
@LBM-OASIG/dsh-skill-pin Keep the skills a DSH session loaded alive across context compaction.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@lichufeng123/dsh-zentao-ledger ZenTao bug ledger for DSH: triage, drafts, step evidence, and explicit submission with readback.	low	low	not queued (low risk)	0/0/7	0/0	2026-11-12 04:16
@thegabopacheco-sudo/dsh-plugin-prompt-vault Biblioteca local de prompts para DSH: guarda plantillas con variables, busca, renderiza y organiza por etiquetas, con confirmacion para escribir y auditoria.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 04:16
@thegabopacheco-sudo/dsh-plugin-context-meter Medidor de contexto por sesion de DSH: lee la cache de proyeccion, muestra presion de contexto, desglose de tokens (sistema/tools/mensajes), uso ultimo y sesiones recientes con recomendaciones.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 04:16
@Sladewww/dsh-plugin-loomy Loomy 网关 DSH 插件：把 loomy2api 的模型添加为 DSH 可选模型，左侧栏面板管理账号池，支持逐个模型启用开关	medium	medium	queued	0/1/2	0/0	2026-11-12 04:16
@thegabopacheco-sudo/dsh-plugin-provider-usage Uso y rendimiento por proveedor/modelo en DSH: agrega tokens de entrada/salida/cache, cache hit rate, velocidad de decodificacion y TTFT por sesion y modelo.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 04:16
@SAS-159/dsh-repo-brief Registers a repo_brief tool: one call returns a compact map of a repository — languages, entry points, scripts, test command, recent and largest files — instead of a dozen exploratory calls.	low	low	not queued (low risk)	0/0/4	0/0	2026-11-12 04:16
@Gaoler006115/dsh-desktop-view Read-only desktop and pointer observation tools for the DSH agent (Windows): DPI-aware screen capture, pointer coordinates, monitor layout and window titles.	medium	medium	queued	0/1/2	0/0	2026-11-12 04:16
@a895047059/dsh-stack-diagram DSH plugin: bundles the stack-diagram architecture-diagram skill as a global runtime skill with automatic routing.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@thegabopacheco-sudo/dsh-plugin-config-doctor Diagnostico de configuraciones de plugins de DSH: valida JSON, campos obligatorios, tokens vacios, rutas inexistentes y webhooks invalidos, y sugiere correcciones.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 04:16
@zb5594921/dsh-dev-toolbox Timestamp converter, Gson-style JSON formatter/validator, AES encrypt/decrypt and random string generator for DSH.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@thegabopacheco-sudo/dsh-plugin-error-digest Resumen de errores del harness: escanea transcripciones de sesiones y auditorias locales, agrupa errores repetidos por firma, categoria y sesion, y muestra ejemplos con contexto.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 04:16
@MrMark019/DSH_MarkdownPreviewPulgin DSH 右侧栏 Markdown 工作台：浏览工作区、预览/源码/分栏、导出单文件 HTML \| Markdown workspace panel for the DSH right sidebar with standalone HTML export	low	low	not queued (low risk)	0/0/3	0/0	2026-11-12 04:16
@SAS-159/dsh-evidence-audit Audit what the agent claims against what its own tools actually returned: per-sentence evidence coverage with the unsupported claims listed.	low	low	not queued (low risk)	0/0/4	0/0	2026-11-12 04:16
@thegabopacheco-sudo/dsh-plugin-turn-analytics Analitica de turnos y pasos de sesiones de DSH: tiempos LLM vs tools, tamano de turnos, timeline de prompts/respuestas y metricas por sesion.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 04:16
@JoyhouseLabs/joyhouse-dsh-knowledge Local-first Markdown notes, daily journals and images for DSH. Independent community plugin.	low	low	not queued (low risk)	0/0/4	0/0	2026-11-12 04:16
@qianchuan-ai/dsh-vidstyle 中式美学 AI 视频提示词风格库 · Chinese-aesthetic AI video style library for DSH — 12 styles (6 国风 + 6 国际) producing paste-ready Chinese prompts for 即梦 / Seedance / 可灵 / 通义万相	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@Qinqing1999/dsh-pixelfly PixelFly — image generation plugin for DSH: settings page for the upstream, rotating multi-key ring with exponential backoff, and a studio page with gallery.	medium	medium	queued	0/4/9	0/0	2026-11-12 04:16
@thegabopacheco-sudo/dsh-plugin-tool-doctor Diagnostico de servidores MCP instalados en DSH: arranca cada runtime en un DSH_HOME aislado, hace handshake MCP, lista sus tools y reporta los que fallan con stderr y duracion.	medium	medium	queued	0/1/6	0/0	2026-11-12 04:16
@ccjiao/dsh-media-desk-workbuddy 自媒体工作台（WorkBuddy 生图版）：用 WorkBuddy 积分画封面/配图/分镜 \| Media Desk with WorkBuddy image generation	low	low	not queued (low risk)	0/0/3	0/0	2026-11-12 04:16
@dororo42/dsh-ungrouped-sweeper Sweep the dsh web conversation list: batch-archive ungrouped sessions via the official workspace registry, restore anytime. 会话清扫器	medium	medium	queued	0/2/4	0/0	2026-11-12 04:16
@aaa8leitingpifa/dsh-daily-push 每日推送：DSH 插件雷达。星数榜 / 新建榜 / 活跃榜三榜并列，官方仓库单独追踪，内置咨询、关注列表与已装插件更新提醒。	medium	medium	queued	0/4/13	0/0	2026-11-12 04:16
@RDYRD/dsh-drag-out Drag a Presented deliverable card straight into another desktop app — the real file, through the desktop shell native drag channel.	low	low	not queued (low risk)	0/0/1	0/0	2026-11-12 04:16
@anydoor7/dsh-tslink TSLink for DSH: open your running local app on your phone through a private Tailscale URL, via the tslink MCP server and the tslink-preview skill.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@creatjy/dsh-plugin-update-entry 在 DSH 插件页的可更新卡片上提供就地更新入口：可选版本、悬停查看每个版本的更新说明。	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 04:16
@ZzimaR/dsh-yanfield 在 DSH 里写长篇小说。砚田写作台：正文、大纲、资料与可审阅的 AI 改稿。	low	low	not queued (low risk)	0/0/7	0/0	2026-11-12 04:16
@luo173176/dsh-simple-live DSH aggregated live streaming plugin: bilibili / douyu / huya / douyin in one sidebar panel, with model tools.	medium	medium	queued	0/2/10	0/0	2026-11-12 04:16
@kinry3212/dsh-meeting-recorder DSH 插件：为长会话维护一份随时可查的会议记录（host 侧，不向对话注入内容）	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@pokereva/dsh-no-enter-sand Enter 只换行，只有点发送按钮才发送	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@thegabopacheco-sudo/dsh-plugin-session-search Buscador del historial de sesiones de DSH: indexa sesiones locales (transcripciones zstd y cache de proyeccion), busca por texto, lista recientes y extrae fragmentos.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 04:16
@kute/dsh-keelwatch Operations layer for DSH plugins: dependency drift radar, failure brake, and token/latency attribution. ｜ DSH 插件运维层：依赖漂移雷达、失败刹车、Token 与耗时归因。	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@Morethaninformation/dsh-eval DSH plugin: run a fixed benchmark suite against a local OpenAI-compatible model endpoint (JSON, arithmetic, code, long-context) with automatic scoring.	medium	medium	queued	0/4/10	0/0	2026-11-12 04:16
@sakura6777/dsh-real-time-balance Real-time DeepSeek balance, today's spend, and peak/off-peak countdowns in the DSH sidebar.	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 04:16
@ruaibeite/dsh-context-garden A zen garden for the DSH context window: every message or tool result plants a plant, compaction is the harvest, harvested plants become seed currency across four seasons.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@TINTSKY/shottaggo ShotTagGo DSH - full-frame screenshot annotation for DSH	medium	medium	queued	0/2/6	0/0	2026-11-12 04:16
@Lh1314-China/dsh-cortex-memory Layered temporal memory engine for DSH	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 04:16
@ailawu0409/dsh-open-gui-fix DSH plugin: make Open in VS Code and other Electron apps open a window by stripping the leaked ELECTRON_RUN_AS_NODE from detached GUI launches	medium	medium	queued	0/2/5	0/0	2026-11-12 04:16
@Lh1314-China/dsh-cortex-extractors OCR/ASR extraction bridge for DSH Cortex: Windows OCR, Tesseract, optional local PaddleOCR and whisper.cpp.	medium	medium	queued	0/1/4	0/0	2026-11-12 04:16
@27Synthesis/dsh-go-fish-panel 给 dsh-fish（大肥鱼）在 DSH Go 手机 App 上加观测台与设置面板的原生插件	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 04:16
@fengzhaoy/dsh-web-vscode dsh 插件：在 DSH Web 的会话视图与右侧栏嵌入真实 VS Code（code-server）工作区，切 tab 不重载，未安装时给出安装引导。	medium	medium	queued	0/1/9	0/0	2026-11-12 04:16
@wang-bool/travel-story-dsh 🧳 把 Travel Story 搬进 DSH：AI 直接帮你规划行程、查天气、驱动地图的旅行插件（18 个 agent 工具）	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 04:16
@Makk9609/dsh-send-lock Changes Enter to insert a newline in DSH Web. Use Cmd/Ctrl+Enter to send messages.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 04:16
@WatXtract-Luca/dsh-auto-open-sidebar Automatically opens the DSH right sidebar for blank top-level chats.	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 04:16
@GuYou9799/dsh-turn-sieve 手动筛选并移除 DSH 会话中的低价值问答或单条消息：在回复旁原位选中、✓ 确认、内容随即从对话中消失，可撤销；液态玻璃面板。	low	low	not queued (low risk)	0/0/7	0/0	2026-11-12 04:16
@fengzhaoy/dsh-best-workspace DSH Best Workspace — Codex 风格的 DSH 左侧边栏：项目/会话树、分组、置顶、拖拽排序与输入框 ↑↓ 翻历史	low	low	not queued (low risk)	0/0/9	0/0	2026-11-12 04:16
@sweet560/dsh-plugin-wechat-session 微信会话互通聚合包：桌面弹窗 / 系统通知 + 提示音，30/60 秒超时后经 dsh-im 微信机器人把带问题原文与编号选项的清单发到微信，可直接在微信里回复选择。	low	low	not queued (low risk)	0/0/4	0/0	2026-11-12 06:16
@jkm6221/dsh-workspace-folders Attach extra folders to the current workspace: writable for the file tools and the shell, listed to the agent, manageable from the composer.	medium	medium	queued	0/1/3	0/0	2026-11-12 06:16
@nanxfu/dsh-our-imagen DSH 文生图工作台插件：整页创作、对话调用、图片本地落盘，首发支持 Kaggle 免费双卡 GPU，Colab 等后端接入中	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-conversation-digest Resumen extractivo de una sesion de DSH: prompts clave, respuestas, tools usadas, errores y siguientes pasos, sin inventar contenido.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 06:16
@visangela/dsh-novel-assistant 给DSH加一个最懂你的“小说助手”：前面写过什么不会忘，改一章不会崩十章，写完能自己核对一遍，还能实时可视化情节进展，人物关系和场景地图。	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 06:16
@LXinH3RT/dsh-auto-relay DSH Host plugin: open a continuation session when a conversation keeps compressing near its context limit, and increment the session title's trailing number.	low	low	not queued (low risk)	0/0/3	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-todo-bridge Puente de tareas para DSH: lista de tareas local con prioridad y proyecto, importa todos de sesiones y exporta a TODO.md.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@darlingsakurua/dsh-novels DSH小说插件	medium	medium	queued	0/1/5	0/0	2026-11-12 06:16
@Muprprpr/dsh-my-drama-studio 让家里大肥鱼不吃白饭，短剧用这一套就够了！（暂未实现，仅供参考/笑）	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 06:16
@JadeL-Kemo/dsh-conversation-flow 中文优先的 DSH 插件：对话倒带 / 重新生成 / 删除本轮 / 删除会话（含工作区文件恢复）	medium	medium	queued	0/3/2	0/0	2026-11-12 06:16
@xffwlkjgzs88/dsh-session-delete 给 DSH 会话列表加一个能真删除的按钮：让宿主 registry 遗忘、清掉正文与投影缓存。零依赖小插件，附说明与免责声明。	medium	medium	queued	0/1/9	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-agent-router Recomienda modelo/agente para una tarea segun fortalezas, presupuesto y contexto requerido, con reglas locales y explicaciones.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 06:16
@DSH43/dsh-session-delete dsh Web 会话行菜单的删除会话插件：删日志、工作区记账和投影缓存，不改 dsh 源码	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 06:16
@Lizo-dsh/dsh-watchdog	medium	medium	queued	0/2/13	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-daily-brief Resumen diario para DSH: sesiones recientes con metricas, decisiones del dia, uso de tokens y pendientes, con brief Markdown guardable.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-env-doctor Valida variables de entorno de un proyecto: compara .env/.env.example con las variables usadas en el codigo, detecta faltantes y no usadas sin mostrar valores.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-plan-checker Valida planes de trabajo en Markdown para DSH: pasos, criterios de aceptacion, riesgos, rollback y verificacion, con score y hallazgos accionables.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 06:16
@a348579184/dsh-report-auditor 数字校对台 · 在 DSH 里用 CSV 复核中文周报的增长率、百分点和金额，逐条查看算式并修订。	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-memory-timeline Linea de tiempo local de memoria y notas de DSH: registra eventos, lee notas de Hermano y busca por texto con filtros por fuente y fecha.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-preferences-sync Hub de preferencias para DSH: guarda claves por categoria, importa/exporta PREFERENCIAS en Markdown y mantiene una fuente unica para los plugins.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-task-board Tablero kanban local para DSH: tarjetas con columnas, prioridad, proyecto y notas, con movimiento, historial y estado por columna.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-secrets-scanner Escanea un proyecto local en busca de secretos y credenciales (claves, tokens, passwords, claves privadas) con patrones, enmascarado y excluding de dependencias.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@Hazen223/dsh-pocket-h5 DSH 插件面板：把 Pocket · H5 预览工作台复用到 DSH（iPhone 17 尺寸/外观预览、真机物理尺寸、手机扫码）。	medium	medium	queued	0/7/24	0/0	2026-11-12 06:16
@liweitan2046-cyber/dsh-wanfeng-studio 爆款视频复刻工作台 · DSH 插件：原片 → 角色图（审核门）→ 换人 → 质检 → 成片，支持接入任意 RunningHub 工作流	medium	medium	queued	0/5/16	0/0	2026-11-12 06:16
@JadeL-Kemo/dsh-session-delete-menu DSH 桌面版会话右键菜单「删除会话」插件（软删除，24 小时内可恢复）	low	low	not queued (low risk)	0/0/1	0/0	2026-11-12 06:16
@BiteyCulter/dsh-provider-transport Per-provider HTTP/HTTPS/SOCKS proxy and custom request headers for DSH native providers	medium	medium	queued	0/3/6	0/0	2026-11-12 06:16
@liasece/oh-my-dsh OhMyDSH：峰谷动态、提示词候选、输入历史三合一 —— 一个 DSH 插件，三个设置页，每项独立开关	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 06:16
@ruaibeite/dsh-usage-stats Local token usage for DSH: Chat and Code scene cards, tokens per day and a per-model breakdown on the Settings Usage page.	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 06:16
@Watchcats211/dsh-podwave DSH plugin: a local-first podcast player for audio files on your disk	medium	medium	queued	0/2/1	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-decision-log Registro local de decisiones tecnicas de DSH: guarda decision, contexto, alternativas, proyecto y estado, con busqueda, actualizacion y export Markdown.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-test-runner Ejecuta y resume tests de un proyecto local para DSH: detecta scripts (npm/pnpm/yarn/pytest), corre con timeout y reporta pass/fail con salida real.	high	high	queued	1/1/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-repo-map Mapa de un repositorio para DSH: estructura, entrypoints, lenguajes, conteo de archivos/lineas y rama git en Markdown.	medium	medium	queued	0/1/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-session-export Exporta sesiones de DSH a Markdown o JSON: cabecera con metricas, turnos prompt/respuesta y transcripcion, con preview sin escribir, confirmacion y rutas permitidas.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-recovery-snapshot Snapshots de configuracion de plugins de DSH con manifiesto SHA-256, verificacion de integridad y restauracion segura con confirmacion.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@Albusriddle/dsh-mobile DSH mobile client: WebView shell + native protocol-v1 Android app	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-project-context Contexto de proyecto para DSH: escanea manifiestos, README, stack, git y archivos recientes, y genera un pack de contexto Markdown guardable.	medium	medium	queued	0/1/6	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-sandbox-sim Simula y clasifica el riesgo de acciones antes de ejecutarlas en DSH: comandos destructivos, red, escrituras, secretos y rutas fuera de allowedPaths, con alternativas seguras.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@spankingsnail/dsh-quickjot 随手记（仓库名 dsh-quickjot）：DSH 的本机日历插件（便签 / 待办 / 日程 + 应用内与微信提醒）	medium	medium	queued	0/10/9	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-tool-builder Genera el esqueleto de un plugin MCP para DSH (package.json, cordis, server.mjs, tests, docs) a partir de nombre y descripcion, sin inventar logica.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 06:16
@MrLukezy/dsh-codequest CodeQuest for DSH: 把真实 Token 流量与会话内容变成成就游戏，带自建排行榜	medium	medium	queued	0/2/15	0/0	2026-11-12 06:16
@DSH43/dsh-version-check 在 dsh Web 侧栏品牌位显示 DSH 官方最新版本检查的插件	medium	medium	queued	0/5/8	0/0	2026-11-12 06:16
@kkazakov/dsh-alibaba-token-plan-plugin Alibaba Cloud Token Plan monthly usage for DSH: composer strip, settings page, and agent tool.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-skill-index Indice local de skills para DSH: escanea carpetas con SKILL.md, extrae nombre/descripcion/cuando usarla y permite buscar y leer skills.	low	low	not queued (low risk)	0/0/5	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-diff-reviewer Revisa cambios locales de git como un PR: archivos, lineas, secretos, console.log, TODOs, lockfiles y checklist de riesgo con score.	high	high	queued	1/1/6	0/0	2026-11-12 06:16
@reshdh/dsh-remote-hub Multi-host remote workspace hub for DSH: mobile PWA gateway, host-scoped workspace switcher, remote directory browser, model sync, and cross-host @ session references	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 06:16
@ZengZichao/dsh-micromamba-env DSH plugin: view micromamba environments and select one per workspace	medium	medium	queued	0/2/11	0/0	2026-11-12 06:16
@shiker1996/dsh-balance-burn A DSH plugin that turns your DeepSeek balance into days left, burn rate, and top-up advice — computed from local session logs.	medium	medium	queued	0/1/6	0/0	2026-11-12 06:16
@Menpengpeng/dsh-plugin-x-article-library DSH plugin: save public X (Twitter) posts as offline Markdown with a three-pane library reader. 把公开 X 链接保存为可离线阅读的 Markdown。	medium	medium	queued	0/4/4	0/0	2026-11-12 06:16
@tsybindev/dsh-figma-browser Figma design data and true renders for DSH through your own signed-in Chrome — no Figma API token, paid seat, or Dev Mode.	medium	medium	queued	0/4/9	0/0	2026-11-12 06:16
@thegabopacheco-sudo/dsh-plugin-video-watermark Superpone una marca de agua (imagen) sobre un video con ffmpeg: posicion, opacidad y margen configurables, reencode seguro y guardado confirmado.	medium	medium	queued	0/3/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-disk-map Mide el uso de disco por carpeta y archivo en una ruta local, mostrando los mayores consumidores con profundidad y top configurables.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@ZHI00/dsh-model-requests Requests tab for DSH: per-request model, throughput, TTFT and token usage, with details one click away.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-event-log-reader Lee y resume eventos recientes de Windows (System/Application) con nivel, proveedor y mensaje, solo lectura.	medium	medium	queued	0/1/5	0/0	2026-11-12 08:17
@yuexushuang/dsh-geojson-map-viewer GeoJSON Map Viewer plugin for DSH	low	low	not queued (low risk)	0/0/3	0/0	2026-11-12 08:17
@wmingzhou7-cell/DSH-English-learning You can learn English in combination with your conversation at any time when using DSH	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 08:17
@douglarek/dsh-subagent-agy Antigravity (agy) subagent bundle for DSH, over ACP	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-startup-auditor Audita apps de inicio de Windows: carpeta Startup y claves Run del registro, marcando entradas sospechosas.	medium	medium	queued	0/1/6	0/0	2026-11-12 08:17
@MagicSandBag/xiaofeiyu-academy 小肥鱼主导的AI学习台，针对小学生特化，可以学习挣小鱼干喂养我们的小肥鱼	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 08:17
@borncode-app/dsh-session-sync Imports Claude Code and MiniMax Code sessions into the DSH workspace that owns their project folder, and flags each session with its origin logo.	low	low	not queued (low risk)	0/0/1	0/0	2026-11-12 08:17
@liuguangyu272/dsh-team-budget DSH team budget plugin: managed API keys, usage analytics, monthly quotas and model access. 自托管团队额度管理。	medium	medium	queued	0/1/9	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-thumbnail-designer Disena miniaturas SVG para videos/posts: titulo, subtitulo, badge, gradiente y color de acento, con vista previa y guardado confirmado.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@Fushena/dsh-ark-agent-plan Volcengine Ark Agent Plan provider plugin for DSH: dynamic model catalog, thinking-effort control, server-side harness tools, quota badge & panel	low	low	not queued (low risk)	0/0/10	0/0	2026-11-12 08:17
@alexbu512/milancat-bot Grok-bot-style AI organization in the DSH sidebar: a chief-of-staff agent hires departments and roles, dispatches work to child agents running on this machine, and reports back as one message. ｜ Grok bot 式的 AI 组织搬进 DSH 左侧栏：总裁助理建部门、立岗位、开部门群，任务分派给本机真实运行的子 agent。	medium	medium	queued	0/2/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-csv-cleaner Limpia y perfila CSV locales: quita filas vacias, duplicados, espacios, normaliza encabezados y reporta cambios, con vista previa y guardado confirmado.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-window-layout Guarda y restaura layouts de ventanas de Windows (posicion y tamano) mediante UI Automation, con confirmacion y reporte real.	medium	medium	queued	0/1/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-network-diag Diagnostico de red local: resuelve DNS y comprueba puertos TCP con latencia, solo hosts permitidos.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-sql-runner Ejecuta consultas SQL sobre SQLite local (node:sqlite): lista tablas, SELECT con limite y escrituras solo con confirmacion y rutas permitidas.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-rss-digest Lee feeds RSS/Atom de hosts permitidos y genera un resumen Markdown con titulos, fechas y enlaces, con timeout y sin inventar contenido.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@haroon0x/dsh-orchestrator A native DSH orchestrator: see, inspect, message, and interrupt live agents in the same process.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-commit-craft Sugiere mensajes de commit convencionales a partir del diff y los archivos cambiados, clasificando tipo y scope, sin hacer commit.	medium	medium	queued	0/1/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-metric-dashboard Genera un dashboard SVG con tarjetas KPI y barras desde metricas JSON o CSV, con vista previa y guardado confirmado, sin dependencias.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-process-manager Lista y termina procesos de Windows con filtros y orden por memoria, con confirmacion para matar y reporte real de PIDs.	medium	medium	queued	0/2/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-asset-optimizer Optimiza imagenes y videos para web con ffmpeg: reduce resolucion/calidad, convierte formato y reporta tamano antes/despues.	medium	medium	queued	0/2/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-docker-doctor Audita Dockerfile y docker-compose de un proyecto: imagen sin pin, root, ADD, secretos en ENV/ARG, descargas ejecutadas y falta de healthcheck, sin construir nada.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-clipboard-history Historial local de portapapeles en Windows: captura el texto actual, busca en el historial y lo vuelve a copiar con confirmacion.	medium	medium	queued	0/2/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-chart-builder Genera graficos SVG (barra/linea) desde etiquetas y valores, con vista previa, guardado confirmado y sin dependencias externas.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-scheduled-health Chequeos locales de salud (disco libre, memoria, archivos) con historial en cache para ejecutar periodicamente desde automatizaciones.	medium	medium	queued	0/1/5	0/0	2026-11-12 08:17
@kyle2241345145351324321/dsh-agent-memory Durable agent memory for DSH — global + per-project memories, written by the agent and fully editable in Settings → Memory.	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-json-transform Transforma JSON local sin eval: pick/omit/rename, flatten, ordenar, limitar, filtrar por campo y get por ruta, con salida y guardado confirmado.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-data-contract Valida e infiere contratos JSON: schema-lite con required, tipos, enums y rangos para archivos o texto JSON, con errores por ruta.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-driver-report Reporte de drivers y dispositivos de Windows: nombre, estado, fabricante y version desde PowerShell, solo lectura.	medium	medium	queued	0/1/5	0/0	2026-11-12 08:17
@lmmcsb/dsh-turn-continue Auto-continue a stalled DSH turn: re-prompts after an empty turn, a max-tokens cutoff or a listed model error, and fails over to a healthy backup route before retrying.	medium	medium	queued	0/1/3	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-focus-session Modo concentracion: minimiza ventanas que coincidan con patrones configurables, con dry-run por defecto y confirmacion, sin cerrar apps.	medium	medium	queued	0/1/6	0/0	2026-11-12 08:17
@595708049/dsh-warm-charcoal-theme Warm Beige light palette and Dark Charcoal dark palette for DSH.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 08:17
@leixlabs/dsh-honcho-memory-viz Honcho memory explorer for the DSH Web UI: peers, conclusions, sessions and a relationship graph, with semantic search.	low	low	not queued (low risk)	0/0/4	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-podcast-clipper Detecta silencios en audio con ffmpeg y opcionalmente los recorta, reportando duracion original/final e intervalos reales.	medium	medium	queued	0/3/6	0/0	2026-11-12 08:17
@OldLiooooo/dsh-project-bench DSH 项目工作台：你只对 PM 提需求，AI 专家团交付，进度可视化 \| A project runtime for DSH — talk to a PM, an AI expert team delivers, progress stays visible.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 08:17
@ruaibeite/dsh-agent-ci Agent CI for DSH: turn real sessions into regression cases, replay them in isolated git worktrees, and verify tests, changed files, steps and tokens.	low	low	not queued (low risk)	0/0/3	0/0	2026-11-12 08:17
@ruaibeite/dsh-provenance Line-level provenance and a decision ledger for agent edits: which session, model and tool wrote each change, with Markdown/JSON export.	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-changelog-gen Genera CHANGELOG Markdown desde commits git, agrupando por tipo convencional (feat/fix/docs/etc.) y opcionalmente guardando el archivo.	medium	medium	queued	0/1/6	0/0	2026-11-12 08:17
@AdamsShen/dsh-autopilot-harness dsh-autopilot	medium	medium	queued	0/3/3	0/0	2026-11-12 08:17
@43aquarius/dsh-auto-continue Auto-continue interrupted DSH sessions: probe a healthy fallback model, switch durably, and resume automatically	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 08:17
@gavin-ali/dsh-leetcode DSH 侧边栏刷题台：题库实时从 leetcode.cn 拉取，Java 编辑器（补全/缩进），一键提交看判题结果。	medium	medium	queued	0/1/17	0/0	2026-11-12 08:17
@Jd44chs/dsh-question-voice Voice input for the DSH question card: record, transcribe locally with SenseVoice, insert the text into the answer field.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-dependency-doctor Audita dependencias locales de un proyecto Node: faltantes en node_modules, extraneas y versiones que no coinciden con package.json, sin red.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@peter0429-ux/dsh-task-dock A draggable dock in the DSH window corner: pending confirmations, then running sessions, then unread results.	low	low	not queued (low risk)	0/0/3	0/0	2026-11-12 08:17
@romantic123fly/dsh-session-folders	low	low	not queued (low risk)	0/0/1	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-log-analyzer Analiza logs locales: cuenta severidades, agrupa mensajes por firma, detecta patrones de fallo, rango temporal y top errores, sin enviar datos a ningun lado.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@helloHupc/dsh-turn-notify DSH 插件：每当一个任务结束就用系统通知告诉你结果、耗时和最后一段回复；失败也会通知，可以放心离开窗口。	medium	medium	queued	0/1/2	0/0	2026-11-12 08:17
@songzhou666/dsh-spiral SemanticNebula · 语义星云 — decorative DSH / DSH plugin: every prompt becomes a rotating four-arm spiral nebula with a local semantic footprint map. No model, no network, under 130 KB. Prompt visualization, canvas2d, generative art.	medium	medium	queued	0/1/8	0/0	2026-11-12 08:17
@Paradox1278/dsh-empty-turn-guard A DSH plugin that stops silent turn death: when the upstream ends with stop_reason=tool_use but emits no tool call or text, DSH closes the turn as completed and the agent stops without reporting. This plugin steers the turn back open.	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-code-search Busca simbolos (funciones, clases, exports, constantes) en un proyecto local con archivo y linea, soportando JS/TS/Python/Go/Rust, sin indices externos.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@Fushena/dsh-qwen-token-plan-full Qwen Token Plan full-routing plugin for DSH: dynamic catalog, Responses/Chat dual protocol, server-side built-in tools, image/video generation	low	low	not queued (low risk)	0/0/10	0/0	2026-11-12 08:17
@shudi729/dsh-vpn-assistant VPN 智能助手：可解释选型、官方下载、安装指导与授权只读诊断（DSH 插件）	high	high	queued	1/1/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-image-batch Procesa imagenes por lote con ffmpeg: redimensiona, convierte y ajusta calidad en una carpeta, con vista previa, confirmacion y rutas permitidas.	medium	medium	queued	0/2/6	0/0	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-media-index Indexa y busca archivos de media locales con ffprobe: duracion, resolucion, codecs y tamano, filtros por nombre o metadatos.	medium	medium	queued	0/2/6	0/0	2026-11-12 08:17
@Cai-kunkun/dsh-llm-gateway OpenAI-compatible gateway that exposes every model configured in DSH on a local port	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 08:17
@HimLeoing/dsh-purge DSH 破甲：提示词注入 + 引擎层补丁，适配 dsh 0.2.2-rc.2。上游 MIT 原作 by @YuJunZhiXue	medium	medium	queued	0/4/5	0/3	2026-11-12 08:17
@thegabopacheco-sudo/dsh-plugin-forecast-lite Pronostica series numericas con media movil o regresion lineal simple, mostrando tendencia, estadisticas y predicciones, con guardado opcional.	low	low	not queued (low risk)	0/0/6	0/0	2026-11-12 08:17
@lmmcsb/dsh-quad-layout Four-column layout for DSH: split the left sidebar into a 56px icon rail plus a full-height workspace column.	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 08:17
@ruaibeite/dsh-preflight Preflight and budget for DSH: predict a task's steps, tokens, duration and cost from local session history, with a live budget strip under the composer.	low	low	not queued (low risk)	0/0/2	0/0	2026-11-12 08:17
@Leon-S-7211/insight-charts 研报级图表 Agent Skill：两套主题、七个 matplotlib 画法、放图时机与标题写法。Claude Code 插件 + DSH 插件。	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 08:17
@Yanren1225/dsh-content-desk DSH 文案工作台：审核/润色/改写文案、多模型对比、AI 配图，以及通用模型调用（ai_task / ai_models / ai_image）。零运行期依赖，只使用 DSH 已注册模型。	low	low	not queued (low risk)	0/0/0	0/0	2026-11-12 08:17
@thelittleshyboy/xd-to-html-mcp adobe/.xd files trans to html/.html files mcp	low	low	not queued (low risk)	0/0/1	0/0	2026-11-12 08:17
@huanglihome1996-rgb/dsh-desktop-tool-ocr DSH 桌面端自动识图插件：视觉模型原图直传，非视觉模型自动调用可插拔本地 OCR 或线上视觉模型；支持 nbocr、自定义命令与 OpenAI-compatible API。	medium	medium	queued	0/1/6	0/0	2026-11-12 08:17

Dynamic audit results · new today (0 with a conclusion)

The model reads redacted source context and never executes plugin code. When a dynamic conclusion exists it is authoritative (it may raise or lower the level); otherwise the static tier applies. The audit never writes the exemption list.

No completed dynamic audit conclusion for this day yet (queued or failed — see the table above).

Site-wide effective tiers (dynamic first)

Dynamic conclusions set the tier where they exist; the static scan applies only where there is none. 29,347 in-scope entries (28,950 scanned + 397 pending).

dynamic in force 2,127

critical

261

high

1,100

medium

27,573

low

Static scan for reference: low 28,775 · medium 0 · high 196 · critical 0 (dynamic conclusions moved these into the effective tiers above).

Critical-tier plugins (16)

dsh-cloud-connector dsh-upgrade-2 dsh-agnes-studio dsh-tmwebdriver dsh-lark-all cad-ppt-skills phone-tunnel-pool dsh-desktop-huacai dsh-plugin-manager dsh-lan-access-3 voice-input deepseekharnessremotegateway dsh-tts-player dsh-wsl-projects dsh-remote-13 dsh-relay-isolation

Static heuristics + semantic manifest audit + a model-driven dynamic audit — not a full security audit; no code execution, no dependency resolution. Dynamic tiers come from the model reading source context (highest finding) and never exempt a static finding.

Daily report archive

88 reports

← Back to security reports

What does this daily report cover?

This report covers plugins first indexed by dsh.so on 2026-11-12. For each new plugin it records the name, risk tier, scan verdict, critical/warning/info findings, manifest audit signals, and index time. Plugins that were already in the registry before that date are not included.

How are the risk tiers assigned?

Risk tiers follow the same public model used across the site: four levels — critical / high / medium / low — read from finding counts, most severe first. Critical is reserved for secrets, exfiltration, destructive commands, or mining; a high-severity finding without a critical one reads high; medium (warning-level) findings read medium (needs review); no meaningful findings reads low. Where the model-driven dynamic security audit has a conclusion, that conclusion sets the tier (it can raise or lower it); the static scan tier (vet primary, dsh backstop) applies only when there is no conclusion.

Why is this not a full security audit?

The daily scan is a static heuristic scan plus manifest audit. It does not execute code or resolve dependencies, so it cannot prove that a plugin is safe. Use the report to prioritize inspection, not to replace it.

What does the "Manifest" column mean?

Manifest here is the vet engine's semantic analysis of the plugin's JSON manifest — not the dynamic security audit. It flags declaration-level signals such as install scripts, lifecycle hooks and broad file or network permissions.

Is the static scan the only layer?

No. A second, model-driven dynamic security audit runs on top of it for entries the static scan already flags as needing review: it reads source context without executing plugin code, covers that subset only, and its conclusion is authoritative when there is one — it can raise a verdict or lower it; the static scan tier (vet primary, dsh backstop) applies only when there is no dynamic conclusion. Exemptions stay manual and the script never writes the suppression list. This daily report shows both layers: every new entry is marked with its dynamic state (conclusion / queued / failed / out of the queue because it is low risk), and all conclusions of the day are listed below with their tier, model summary and findings. As of the latest run: 2922 dynamic audit records, 2341 with a model conclusion, 321 stricter than the static verdict, 794 softer.

Source: dsh.so security standards · Maintained by dsh.so · Published 2026-11-12