2026-W33
发布于 2026-08-15
15
严重
498
高风险
84
需注意
712
低风险
1309
已扫描
本周变化
▲ 新增严重风险
严重风险插件
| 插件 | 是什么 | 风险 |
|---|---|---|
| dsh-cyber-sec ★ 1 | Authorized security-assessment profile for DeepSeek Harness: scoped network tools, container-backed shell, authorization guard, durable evidence, 21 security skills, 7 specialist subagents | 严重 |
| dsh-auto-approve ★ 3 | Conservative auto-approval preset for DeepSeek Harness sandbox escalations | 严重 |
| dsh-clawrouter ★ 2 | A second brain for your DeepSeek Harness agent — strong-model review before risky tool calls, plus 70 models from one wallet. | 严重 |
| dsh-remote ★ 6 | Remote-access assistant for DeepSeek Harness: /remote command and settings page printing the exact SSH tunnel / reverse-tunnel / reverse-proxy commands (harness intentionally binds loopback only) | 严重 |
| dsh-terminal-panel ★ 2 | A manual Terminal tab for the DeepSeek Harness (dsh) web UI — run commands on the host machine, persistent cwd, sudo password prompt, command history.现在可以在web界面内直接执行命令行了 | 严重 |
| DeepSeek-Harness-linux- ★ 1 | 一个基于官方WebUI二改的Linux桌面端，内置了一个外挂视觉插件(需手动接入API Key)，已经迭代了四个版本，可能还是有些小毛病，不过目前用下来暂时没有什么大问题。 | 严重 |
| dsh-security-scan ★ 1 | No description provided. | 严重 |
| dsh-desktop ★ 4 | Desktop shell for DeepSeek Harness Web GUI — auto-installs dsh, native macOS tray, packaged for macOS & Windows. | 严重 |
| DeepSeek-harness-wecom ★ 4 | WeCom AI Bot text and image bridge for DeepSeek Harness | 严重 |
| dsh-openclaw-acp ★ 1 | DeepSeek Harness bundle for OpenClaw and WeChat over ACP | 严重 |
| dsh-image-to-path ★ 1 | DSH 插件:让纯文本模型对话也能拖图/贴图——图片自动保存到会话工作区,以文件路径交给模型(多模态模型不受影响) | 严重 |
| DeepSeek-harness-lark ★ 0 | Feishu and Lark text and image channel plugin for DeepSeek Harness | 严重 |
| zeromd ★ 32 | Obsidian 零成本同步：iPhone ↔ Mac，GitHub 自动备份。本地优先 + 长期积累。｜Local First. Zero-cost Obsidian sync across iPhone, Mac & GitHub. Let knowledge grow over time. | 严重 |
| DeepSeek-harness-qqbot ★ 5 | QQ Bot text and image channel plugin for DeepSeek Harness | 严重 |
| dsh-plugin-hub ★ 2 | Plugin Store for DeepSeek Harness (DSH): a graphical app-store inside the Harness Web UI — browse, search and one-click install GitHub dsh-plugins (topic:dsh-plugin / #dsh-plugin repos), with local ratings, dependency impact graphs, audit logging and a plugin scaffold guide. | 严重 |
高风险插件
| 插件 | 是什么 | 风险 |
|---|---|---|
| dsh-desktop ★ 21 | DeepSeek Harness Desktop 是一款社区维护的非官方第三方桌面客户端，通过直接加载官方 Web UI，为普通用户提供开箱即用的独立桌面体验：它可以自动复用本机已运行的官方实例，也可以使用安装包内置的 dsh 运行时启动服务，无需用户额外安装 Node.js 或 CLI，并提供智能连接、远程实例连接、托盘常驻、运行时监护和异常恢复等桌面增强。 | 高风险 |
| dsh-hdc-bridge ★ 4 | DSH 原生鸿蒙设备桥：hdc 工具让 Agent 完成截图-看图-装包-验证的闭环调试 / DSH-native HarmonyOS device bridge | 高风险 |
| DeepSeek-Harness-Desktop ★ 2 | dsh-desktop: DeepSeek Harness 桌面插件 - click-to-launch Codex-like native window over the live dsh web UI. Everything is a plugin - this one is the window. | 高风险 |
| DSH-Desktop ★ 18 | DSH-Desktop | 高风险 |
| DSH-Plugin-Market ★ 3 | DeepSeek Harness 插件市场：精选目录 + GitHub 实时浏览、中英翻译搜索、安装前静态安全审计闸门。Plugin market for DeepSeek Harness with a pre-install security audit gate. | 高风险 |
| dsh-wsl-workspace ★ 2 | WSL workspace support for DeepSeek Harness——无缝的 WSL 工作区使用体验，无需在 WSL 之中再安装一个dsh，安装该插件后在 GUI 里直接添加 WSL 工作区即可。WSL workspace support for DeepSeek Harness — Enjoy a seamless WSL workspace experience without needing to install dsh inside WSL. Once this plugin is installed, you can directly add a WSL workspace right from the GUI. | 高风险 |
| DSH-Plugins-Marketplace ★ 28 | DSH插件市场 / DSH Plugin Marketplace: 在 DeepSeek Harness Web GUI 中一键浏览、安装与更新 GitHub topic:dsh-plugin 的全部插件 | browse, install & update all GitHub dsh-plugin plugins in the DSH Web GUI | 高风险 |
| dsh-toy ★ 26 | Toy Control Protocol for DSH | 高风险 |
| dsh-side-panel ★ 17 | DSH 侧边栏，集成文件浏览器、终端和 Git 审查，方便预览文件。 | 高风险 |
| dsh-sentinel ★ 6 | Condition-driven wakeup for DeepSeek Harness: durable file/command/http/process/webhook watches that wake the agent, with dock, sidebar branch, and a global dashboard. | 高风险 |
| dsh-plugin-workshop ★ 14 | Steam Workshop-style plugin browser for the DeepSeek Harness (DSH) Web UI - zero-server: GitHub-powered search, trending windows, Chinese search & bilingual translation, plugin-signature filtering, and smart one-click install/update/uninstall with an installed-plugins manager. | 高风险 |
| dsh-desktop-tools ★ 2 | DeepSeek Harness 桌面端 + 插件社区 + Agent 社区(270 个开源中文角色预设) | 高风险 |
| plugin-registry ★ 35 | DSH 插件生态基建：薄控制台（浏览器面板管理官方 repository 插件，0 patch）+ make-dsh-plugin skill 官方插件开发引导 | 高风险 |
| dsh-vscode ★ 2 | DeepSeek Harness for VS Code: right-side chat agent that reads, edits, and runs your project — like Claude Code / Codex / Copilot. | 高风险 |
| dsh-server-deployment ★ 2 | 服务器端部署：DeepSeek Harness Web 多用户网关（登录门户 / 每用户实例隔离 / 交付文件抽屉）。部署于远程服务器，用户通过浏览器访问，非本机工具。 | 高风险 |
| Dcode ★ 1 | Deepseek-harness 桌面端 | 高风险 |
| superpowers-dsh ★ 16 | Superpowers skills for DeepSeek Harness: TDD, debugging, planning, and collaboration skills adapted from obra/superpowers | 高风险 |
| dsh-ssh ★ 4 | SSH remote-execution plugin for DeepSeek Harness: ProxyJump chain, SFTP filesystem, subprocess and PTY over ssh2 | 高风险 |
| dsh-doctor ★ 3 | DSH 插件：flutter-doctor 风格诊断与修复（安装级 + harness 内检查，安全自动修复）。官方 repository-plugin（.dsh-plugin 格式） | 高风险 |
| dsh-plugin-market ★ 2 | DeepSeek Harness plugin market - browse, search & install dsh-plugin topic plugins (dsh 插件市场：浏览/搜索/安装插件) | 高风险 |
按规则命中排序，展示最需要关注的 20 个。
自动启发式扫描——可能存在误报。非人工审核，绝非背书。