每日安全扫描日报

日期 · 2026-08-16 (UTC,覆盖当日 00:00–24:00 新增入库的插件)

40
当日新增
0
严重
9
高风险
6
需注意
25
低风险
插件风险扫描结论C/W/I清单审计收录时间
reactive-resume
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!
低风险pass0/0/00/02026-08-16 01:57
EchoBird
One-click install + model switch:Claude Code,Codex CLI (OpenAI), Grok Build (xAI), DeepSeek Harness, Kimi Code (Moonshot) ,Qwen Code,Aider,OpenCode,MiMo Code (Xiaomi),ZCode (Z.AI),OpenClaw,Pi,OpenScience,Vibe-Trading,Claude Desktop (3P profile),ChatGPT desktop,OpenCode Desktop,
低风险pass0/0/00/02026-08-16 01:57
BitFun
BitFun combines a high-performance agent runtime written in Rust with a polished desktop application. It pairs the depth of a Code Agent with open, general-purpose capabilities for work beyond software development.
低风险pass0/0/00/02026-08-16 01:57
opc-nexus
开源的企业版的数字员工工作台 (原内部项目AiBoxDash)
高风险warn2/0/10/02026-08-16 01:57
caliper
Know if your agent skill actually works. A lightweight evaluation harness that tracks a success rate across Claude Code, Codex, Pi, and Hermes.
高风险warn1/0/00/02026-08-16 01:57
dsh-plugin-dev-skills
An Agent Skills skill for developing DeepSeek Harness (DSH) plugins(开发 DSH 插件的 Agent Skill)——插件/服务/事件/工具/LLM 适配器/打包安装的标准。Works with Claude Code, Codex, DSH, VS Code Copilot & any compatible agent.
低风险pass0/0/00/02026-08-16 01:57
deepseek-harness-workbench-plugin
Deepseek-harness-workbench-plugin
低风险pass0/0/00/02026-08-16 01:57
dockyard-dsh
A macOS-only native account-pool and provider plugin for DeepSeek Harness.
低风险pass0/0/10/02026-08-16 01:57
dsh-permgate
为 DeepSeek Harness(DSH)提供的细粒度权限控制插件
高风险warn1/0/10/02026-08-16 01:57
write-chinese-long-screenplay
中文电影与剧集长剧本写作 skill
低风险pass0/0/00/02026-08-16 01:57
dsh-gui
Deepseek Harness GUI图形化界面,兼容mac和windows 开箱即用
高风险warn1/4/120/02026-08-16 01:57
dsh-plugin-msg-nav
DeepSeek Harness 对话节点导航条插件:在对话区右缘渲染一列短横线节点串(每条真实用户消息一个节点),跟随阅读位置;鼠标靠近节点串时,节点条「变形弹出」为单行消息预览面板(覆盖原位置,移开复原),点击任意预览平滑跳转 + 高亮横线,节点过多时可在悬停区域内用滚轮滑动浏览
低风险pass0/0/00/02026-08-16 01:57
plugin-switch
DSH web plugin: toggle plugins on/off from the GUI without restarting the server
高风险warn3/0/50/02026-08-16 01:57
dsh-image-inline
DSH plugin: show_image tool that renders an image inline into the web chat flow (QQ/WeChat style) — path text in the message, image bytes never enter model context.
低风险pass0/0/10/02026-08-16 01:57
dsh-mcp
DeepSeek Harness 的 MCP 服务器管理插件:可视化界面管理 + 按需 tool search 热注入,省 token。
高风险warn1/1/20/02026-08-16 01:57
dsh-unread-dot
DSH plugin: macOS Dock badge (dot = running, number = results) + bubble chime, built on the Badging API
低风险pass0/0/40/02026-08-16 01:57
infographic
A Claude Code skill that turns a document or a topic into a designed visual explainer. 52 block forms, an enforced word budget, and guards that fail the build.
低风险pass0/0/00/02026-08-16 01:57
deepseek-harness-box
Portable one-click Windows launcher for DeepSeek Harness (DSH). No Node.js, npm, pnpm or setup required. DeepSeek Harness 免安装 Windows 一键启动器。
低风险pass0/0/30/02026-08-16 01:57
dsh-notifier
Unified notification push plugin for DeepSeek Harness (DSH): one minimal notify() API, 8 channel adapters (telegram/dingtalk/feishu/wxpusher/pushplus/serverchan/bark/webhook), dual trigger (auto session events + agent tool).
需注意warn0/1/60/02026-08-16 03:12
dsh-im
通过扫码把IM机器人接入DeepSeek Harness(支持飞书、微信、钉钉、QQ、企业微信等)
低风险pass0/0/00/02026-08-16 03:12
dsh-plugin-writing-guard
DSH 论文写作守卫(去 AI 味 / AI 痕迹检测与修改残留检查)— DeepSeek Harness academic writing guard: detects AI-writing style, revision residue & defensive writing in manuscripts; humanize guidance included. writing_audit + writing_rules with auto-audit on paper file writes.
高风险warn4/2/00/02026-08-16 03:12
anime-find
DeepSeek Harness 搜番插件:对话内多源搜索番剧,卡片展示 Bangumi 评分与详情,支持复制磁力。
需注意warn0/2/60/02026-08-16 03:12
DSH-Think-zh
DeepSeek Harness 默认的思考语言为英文,这不利于中文使用者阅读推理过程与复核结论。本插件通过在每次请求的 system prompt 中注入一条精简的强制语言指令,使: 思考过程强制简体中文,无论用户用什么语言提问。
低风险pass0/0/00/02026-08-16 03:12
dsh-im-hub
Multi-platform IM gateway for DeepSeek Harness: Feishu (Lark), WeCom (WeChat Work), and Telegram. One agent per chat, whitelist access, no public endpoint needed (Feishu long connection / Telegram long polling).
高风险warn3/3/90/02026-08-16 03:12
dsh-anchored-standard
Two-phase DeepSeek Harness preset: Minimal-aligned bootstrap (bash+read), then full Standard tools after the first tool call or reply
低风险pass0/0/10/02026-08-16 03:12
dsh-code-security
OpenAI Codex Security for DSH, zero-setup — 13 audit skills + 5 scan tools in a session preset, plus an auto-audit gate for new plugins, running on your local model with no API keys.
需注意warn0/3/00/32026-08-16 03:19
dsh-agent-memory
Self-evolving memory for DeepSeek Harness: capture → dream consolidation → retrieval injection → evolve. User profile, project memory, correction learning, resume narrative — with provenance back to the replayable session log. 自进化记忆插件。
高风险warn1/1/50/02026-08-16 03:27
dsh-sandbox-audit
Static sandbox-policy consistency audit for DeepSeek Harness presets
低风险pass0/0/00/02026-08-16 04:08
find-dsh-plugins
对话式查找 DSH 插件的增强版 skill:语义检索 × 四源聚合 × 安全审计
低风险pass0/0/00/02026-08-16 04:09
A-share-Ai
幻银量化A股阿法狗AlphaHYQi,100%由ai自主驱动的实盘交易机器。接入自产龙虾iClaw,手机端一句话控制四大模型同时干活。获取方法:前往https://hyqibot.com/card-shop.html 购服务卡即可获得软件,详情README.md。 A股Ai炒股大赛历史排行(模拟基金):https://hyqibot.github.io/A-share-Ai/reports/report.html A股Ai炒股大赛历史排行(全市场):https://hyqibot.github.io/A-share-Ai/reportsall/report.html 实时播报:https://hyqibot.github.io/A-sh
低风险pass0/0/100/02026-08-16 04:49
deepseek-harness-phone-remote
DeepSeek Harness phone remote control via Tailscale - persistent file/workspace plugin - tested on OPPO Find X8 Ultra
低风险pass0/0/40/02026-08-16 04:49
TMCRA-Agent-Memory
Scope-isolated, graph-based long-term memory engine for AI agents.
需注意warn0/1/30/02026-08-16 04:49
dsh-pentest
面向 DeepSeek Harness(dsh)的渗透测试模式 @CloverSecLabs
低风险pass0/0/00/02026-08-16 04:49
dsh-plugin-marketplace
Out-of-tree installable plugin marketplace bundle for DeepSeek Harness
低风险pass0/0/50/02026-08-16 04:49
dsh-sitemap
站点地图(Yakit 风格):DeepSeek Harness 侧边栏树形接口地图,搜索 / 接口详情 / 一键复制 curl,数据实时同步
低风险pass0/0/40/02026-08-16 04:49
dsh-plugin
OpenTelemetry tracing for DeepSeek Harness (dsh): turns each agent turn into a GenAI span tree — steps, LLM calls with TTFT, tool executions, token usage — exported over standard OTLP to Jaeger, Grafana Tempo, SigNoz, Langfuse, or any compatible backend.
低风险pass0/0/40/02026-08-16 04:49
dsh-better-deepseek
DeepSeek Harness bridge plugin for Better DeepSeek Chrome extension.
需注意warn0/4/50/02026-08-16 04:49
dsh-mobile-gate
LAN mobile gateway for DeepSeek Harness (DSH): first-visit approval, per-device tokens, rate limiting, mobile layout injection. 局域网手机安全访问 DSH 的即插即用网关:本机审批、设备令牌、限流、手机端适配。
需注意warn0/2/60/02026-08-16 04:49
dsh-md-notes
The note-taking plugin for DeepSeek Harness allows you to save and edit content from your conversations that you want to record.
低风险pass0/0/20/02026-08-16 04:49
dsh-writing-remote
Typert remote for dsh-tool-writing: exposes project, library and search data to the client writing panel.
低风险pass0/0/10/02026-08-16 04:49

静态启发式扫描 + 语义清单审计,非完整安全审计;不执行代码、不解析依赖。风险等级映射与站点一致:secrets/外泄/破坏性/混淆类 critical 为"严重",其余 critical 为"高风险"。

历史日报归档

2 期
← 返回安全报告
这页有帮助吗?