安全扫描报告
注册表里的每个插件都会自动做一次静态扫描，检查可疑模式——硬编码密钥、数据外传、破坏性命令、代码混淆等。以下是最新扫描发现的总结，用通俗语言说明。
1,309
已扫描插件
712
低风险
582
需注意
15
高风险
低风险 (54%) 需注意 (44%) 高风险 (2%)
生态整体健康。大多数插件（98%）没有严重的静态发现。15 个插件存在高风险特征——安装前请仔细查看。
51 个插件尚未扫描。
扫描在查什么
所有插件中最常见的发现类型，用通俗语言解释。
🖥️Shell / subprocess
879 处The plugin runs shell commands or spawns subprocesses. Common in CLI/terminal plugins, but worth knowing.
Usually legitimate for terminal tools — mapped to "needs review" rather than high risk.
⚡Dynamic code execution
600 处The plugin evaluates code at runtime (eval, new Function). Powerful, but harder to audit.
Usually legitimate; mapped to "needs review" unless combined with other risk.
💥Destructive commands
18 处The plugin contains commands that can delete files or modify critical system areas (e.g. rm -rf, chmod 777).
High risk — understand exactly what it touches before running.
🕵️Obfuscated code
6 处Parts of the code are deliberately hard to read (encoded blobs, fromCharCode tricks), making review difficult.
Obfuscation is a red flag — what is it hiding?
🔑Hardcoded secrets
3 处The plugin contains what looks like an API key, token, or private key written directly in its source code.
Anyone with access to the repo could use this credential. Treat with caution.
注：Shell/子进程与动态代码执行在 CLI 与终端插件中很常见，因此归为"需注意"而非高风险。
高风险插件
15 个插件存在密钥、外传、破坏性或混淆模式
| 插件 | 是什么 | 风险 | 发现 |
|---|---|---|---|
| dsh-cyber-sec★ 1 | Authorized security-assessment profile for DeepSeek Harness: scoped network tools, container-backed shell, authorization guard, durable evidence, 21 security skills, 7 specialist subagents | 高风险 | 11 严重 · 6 警告(Destructive commands) |
| dsh-auto-approve★ 3 | Conservative auto-approval preset for DeepSeek Harness sandbox escalations | 高风险 | 7 严重 · 1 警告(Destructive commands) |
| dsh-clawrouter★ 2 | A second brain for your DeepSeek Harness agent — strong-model review before risky tool calls, plus 70 models from one wallet. | 高风险 | 6 严重(Destructive commands) |
| dsh-remote★ 6 | Remote-access assistant for DeepSeek Harness: /remote command and settings page printing the exact SSH tunnel / reverse-tunnel / reverse-proxy commands (harness intentionally binds loopback only) | 高风险 | 4 严重(Destructive commands) |
| dsh-terminal-panel★ 2 | A manual Terminal tab for the DeepSeek Harness (dsh) web UI — run commands on the host machine, persistent cwd, sudo password prompt, command history.现在可以在web界面内直接执行命令行了 | 高风险 | 4 严重(Destructive commands) |
| DeepSeek-Harness-linux-★ 1 | 一个基于官方WebUI二改的Linux桌面端，内置了一个外挂视觉插件(需手动接入API Key)，已经迭代了四个版本，可能还是有些小毛病，不过目前用下来暂时没有什么大问题。 | 高风险 | 4 严重 · 13 警告(Destructive commands) |
| dsh-security-scan★ 1 | No description provided. | 高风险 | 3 严重(Hardcoded secrets) |
| dsh-desktop★ 4 | Desktop shell for DeepSeek Harness Web GUI — auto-installs dsh, native macOS tray, packaged for macOS & Windows. | 高风险 | 2 严重 · 2 警告(Obfuscated code) |
| DeepSeek-harness-wecom★ 4 | WeCom AI Bot text and image bridge for DeepSeek Harness | 高风险 | 2 严重(Obfuscated code) |
| dsh-openclaw-acp★ 1 | DeepSeek Harness bundle for OpenClaw and WeChat over ACP | 高风险 | 2 严重(Hardcoded secrets) |
| dsh-image-to-path★ 1 | DSH 插件:让纯文本模型对话也能拖图/贴图——图片自动保存到会话工作区,以文件路径交给模型(多模态模型不受影响) | 高风险 | 2 严重(Obfuscated code) |
| DeepSeek-harness-lark★ 0 | Feishu and Lark text and image channel plugin for DeepSeek Harness | 高风险 | 2 严重(Obfuscated code) |
| zeromd★ 32 | Obsidian 零成本同步：iPhone ↔ Mac，GitHub 自动备份。本地优先 + 长期积累。｜Local First. Zero-cost Obsidian sync across iPhone, Mac & GitHub. Let knowledge grow over time. | 高风险 | 1 严重(Destructive commands) |
| DeepSeek-harness-qqbot★ 5 | QQ Bot text and image channel plugin for DeepSeek Harness | 高风险 | 1 严重(Obfuscated code) |
| dsh-plugin-hub★ 2 | Plugin Store for DeepSeek Harness (DSH): a graphical app-store inside the Harness Web UI — browse, search and one-click install GitHub dsh-plugins (topic:dsh-plugin / #dsh-plugin repos), with local ratings, dependency impact graphs, audit logging and a plugin scaffold guide. | 高风险 | 1 严重 · 1 警告(Hardcoded secrets) |
自动启发式扫描——可能存在误报。非人工审核，绝非背书。
中风险插件
498 个插件存在严重发现（代码执行 / Shell）· 84 个仅警告
| 插件 | 是什么 | 风险 | 发现 |
|---|---|---|---|
| dsh-desktop★ 21 | DeepSeek Harness Desktop 是一款社区维护的非官方第三方桌面客户端，通过直接加载官方 Web UI，为普通用户提供开箱即用的独立桌面体验：它可以自动复用本机已运行的官方实例，也可以使用安装包内置的 dsh 运行时启动服务，无需用户额外安装 Node.js 或 CLI，并提供智能连接、远程实例连接、托盘常驻、运行时监护和异常恢复等桌面增强。 | 中风险 | 17 严重 · 3 警告(Dynamic code execution, Shell / subprocess) |
| dsh-hdc-bridge★ 4 | DSH 原生鸿蒙设备桥：hdc 工具让 Agent 完成截图-看图-装包-验证的闭环调试 / DSH-native HarmonyOS device bridge | 中风险 | 17 严重(Shell / subprocess, Dynamic code execution) |
| DeepSeek-Harness-Desktop★ 2 | dsh-desktop: DeepSeek Harness 桌面插件 - click-to-launch Codex-like native window over the live dsh web UI. Everything is a plugin - this one is the window. | 中风险 | 16 严重 · 6 警告(Dynamic code execution, Shell / subprocess) |
| DSH-Desktop★ 18 | DSH-Desktop | 中风险 | 15 严重 · 1 警告(Dynamic code execution, Shell / subprocess) |
| DSH-Plugin-Market★ 3 | DeepSeek Harness 插件市场：精选目录 + GitHub 实时浏览、中英翻译搜索、安装前静态安全审计闸门。Plugin market for DeepSeek Harness with a pre-install security audit gate. | 中风险 | 15 严重(Shell / subprocess, Dynamic code execution) |
| dsh-wsl-workspace★ 2 | WSL workspace support for DeepSeek Harness——无缝的 WSL 工作区使用体验，无需在 WSL 之中再安装一个dsh，安装该插件后在 GUI 里直接添加 WSL 工作区即可。WSL workspace support for DeepSeek Harness — Enjoy a seamless WSL workspace experience without needing to install dsh inside WSL. Once this plugin is installed, you can directly add a WSL workspace right from the GUI. | 中风险 | 15 严重(Shell / subprocess, Dynamic code execution) |
| DSH-Plugins-Marketplace★ 28 | DSH插件市场 / DSH Plugin Marketplace: 在 DeepSeek Harness Web GUI 中一键浏览、安装与更新 GitHub topic:dsh-plugin 的全部插件 | browse, install & update all GitHub dsh-plugin plugins in the DSH Web GUI | 中风险 | 13 严重(Shell / subprocess, Dynamic code execution) |
| dsh-toy★ 26 | Toy Control Protocol for DSH | 中风险 | 12 严重(Dynamic code execution, Shell / subprocess) |
| dsh-side-panel★ 17 | DSH 侧边栏，集成文件浏览器、终端和 Git 审查，方便预览文件。 | 中风险 | 12 严重(Dynamic code execution, Shell / subprocess) |
| dsh-sentinel★ 6 | Condition-driven wakeup for DeepSeek Harness: durable file/command/http/process/webhook watches that wake the agent, with dock, sidebar branch, and a global dashboard. | 中风险 | 11 严重(Dynamic code execution, Shell / subprocess) |
| dsh-plugin-workshop★ 14 | Steam Workshop-style plugin browser for the DeepSeek Harness (DSH) Web UI - zero-server: GitHub-powered search, trending windows, Chinese search & bilingual translation, plugin-signature filtering, and smart one-click install/update/uninstall with an installed-plugins manager. | 中风险 | 10 严重 · 1 警告(Shell / subprocess, Dynamic code execution) |
| dsh-desktop-tools★ 2 | DeepSeek Harness 桌面端 + 插件社区 + Agent 社区(270 个开源中文角色预设) | 中风险 | 10 严重 · 1 警告(Shell / subprocess, Dynamic code execution) |
| plugin-registry★ 35 | DSH 插件生态基建：薄控制台（浏览器面板管理官方 repository 插件，0 patch）+ make-dsh-plugin skill 官方插件开发引导 | 中风险 | 10 严重(Dynamic code execution, Shell / subprocess) |
| dsh-vscode★ 2 | DeepSeek Harness for VS Code: right-side chat agent that reads, edits, and runs your project — like Claude Code / Codex / Copilot. | 中风险 | 10 严重(Shell / subprocess, Dynamic code execution) |
| dsh-server-deployment★ 2 | 服务器端部署：DeepSeek Harness Web 多用户网关（登录门户 / 每用户实例隔离 / 交付文件抽屉）。部署于远程服务器，用户通过浏览器访问，非本机工具。 | 中风险 | 9 严重 · 10 警告(Dynamic code execution, Shell / subprocess) |
| Dcode★ 1 | Deepseek-harness 桌面端 | 中风险 | 9 严重 · 9 警告(Dynamic code execution, Shell / subprocess) |
| superpowers-dsh★ 16 | Superpowers skills for DeepSeek Harness: TDD, debugging, planning, and collaboration skills adapted from obra/superpowers | 中风险 | 9 严重 · 6 警告(Shell / subprocess, Dynamic code execution) |
| dsh-ssh★ 4 | SSH remote-execution plugin for DeepSeek Harness: ProxyJump chain, SFTP filesystem, subprocess and PTY over ssh2 | 中风险 | 9 严重(Shell / subprocess) |
| dsh-doctor★ 3 | DSH 插件：flutter-doctor 风格诊断与修复（安装级 + harness 内检查，安全自动修复）。官方 repository-plugin（.dsh-plugin 格式） | 中风险 | 9 严重(Shell / subprocess, Dynamic code execution) |
| dsh-plugin-market★ 2 | DeepSeek Harness plugin market - browse, search & install dsh-plugin topic plugins (dsh 插件市场：浏览/搜索/安装插件) | 中风险 | 9 严重(Dynamic code execution, Shell / subprocess) |
按严重发现排序，展示最需要关注的 20 个中风险插件。浏览全部 498 个中风险插件 — 或 查看本周完整报告。
📖
扫描如何工作
扫描什么、风险等级、四个维度。
🔍
浏览全部插件
每个插件详情页都有各自的扫描报告。
⚙️
深度审计（规划中）
依赖 CVE、沙箱运行测试、容器安装——后续推出。
扫描是自动启发式——不是人工审核，也绝非背书。安装第三方插件风险自负。