每日安全扫描日报
日期 · 2026-08-30 （UTC，覆盖当日 00:00–24:00 新增入库的插件）
38
当日新增
0
严重
9
需注意
29
低风险
| 插件 | 风险 | 扫描结论 | C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| dsh-wall-mcp-manager | 需注意 | warn | 0/1/3 | 0/0 | 2026-08-30 02:28 |
| dsh-subagent-grok One-shot Grok CLI subagent provider for DSH | 需注意 | warn | 1/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-qr-share DSH web plugin: a sidebar-footer QR-code button that lets a phone scan and re-issue the current browser's authenticated launch URL. | 低风险 | pass | 0/0/4 | 0/0 | 2026-08-30 02:28 |
| dsh-code-runner 在 DSH-better-sidebar 中一键运行侧边栏代码文件，让代码可以在dsh终端中运行 | 低风险 | pass | 0/0/4 | 0/0 | 2026-08-30 02:28 |
| dsh-arxiv DSH plugin: tiny read-only arXiv search + abstract fetch (Atom API, no PDF ingest) | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-voice-input 语音输入插件 for DSH | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-deepcanary Local attention supervision for DSH: evidence-first signals, quiet notifications, and an actionable inbox. | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-Dock | 需注意 | warn | 1/2/4 | 0/0 | 2026-08-30 02:28 |
| seo-toolkit Native local & technical SEO audit toolkit for DSH — self-contained port of claude-seo v2.2.5. Weighted scoring, gated multi-agent fan-out, 24 sub-skills + 18 agents, schema.org, E-E-A-T, GBP, GEO/AI Overviews, Google APIs & extensions. No Claude Code required. | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-plugin-topology | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-codepect dsh-codepect is a DSH plugin generating OpenAPI 3.0 from TS/JS. Features: visual docs, versioning, change detection, mock & auto-rescan. Zero-dep, offline, ensures code-doc sync for backend API delivery. dsh-codepect是DSH插件，扫描TS/JS生成OpenAPI3.0文档。支持可视化、多版本、变更检测、Mock及自动重扫。零依赖离线可用，确保代码文档一致，助后端交付API契约。 | 低风险 | pass | 0/0/6 | 0/0 | 2026-08-30 02:28 |
| dsh-agent-outputs-reader Overlay reader for agent output files: Markdown/GFM rendering, in-panel PDF, DOCX/XLSX/PPTX text preview, reply-end file chips. Pure JS, zero deps. | 低风险 | pass | 0/0/16 | 0/0 | 2026-08-30 02:28 |
| dsh-skill-editor Edit skills directly in DSH web settings | 低风险 | pass | 0/0/2 | 0/0 | 2026-08-30 02:28 |
| dsh-fixed-new-session-model 为 DSH 固定新会话的默认 Agent 预设与模型，支持全局默认设置和工作区独立配置。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-strudel-studio A professional song-level Strudel visual sequencer with structured AI arrangement for DeepDeck. | 低风险 | pass | 0/0/6 | 0/0 | 2026-08-30 02:28 |
| dsh-official-port-nav Perfectly replicate DeepSeek's official right-side chat navigation in Harness | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-crystal-viewer A crystal-structure visualization window for DSH: 3D structure + Q-peak viewer and parameter panel, opened as a dsh-better-sidebar tab. | 低风险 | pass | 0/0/6 | 0/0 | 2026-08-30 02:28 |
| dsh-goal-restart DSH plugin to automatically restart goals on harness restart | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-multi-tenant dsh 支持多租户插件 | 低风险 | pass | 0/0/5 | 0/0 | 2026-08-30 02:28 |
| dsh-plugin-recycle-bin 强制 DSH 删除走回收站、禁用 del/rm/Remove-Item，回收站或硬盘满时停手询问用户。 | 需注意 | warn | 1/0/2 | 0/0 | 2026-08-30 02:28 |
| dsh-tool-emoji | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-photos | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-catalog-refresh DSH plugin to automatically rebuild model catalogues for OpenRouter, OpenCode, Fireworks, etc | 需注意 | warn | 0/1/7 | 0/0 | 2026-08-30 02:28 |
| dsh-infinite-context DSH plugin: multi-tier memory management, semantic retrieval, structured memory, and model-context awareness for infinite context. | 低风险 | pass | 0/0/1 | 0/0 | 2026-08-30 02:28 |
| dsh-voice | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| pkg-dev YiHe 编程认知内核 for DSH：27 领域包 + 55 RFB 经验库 + 工程工具链 + 商业/安全/进化体系（会进化的编程助手） | 需注意 | warn | 2/1/28 | 0/0 | 2026-08-30 02:28 |
| dsh-opencli 让 DSH 会办事:登录态真实浏览器 + 170+ 站点适配器 + write 审批门 | 低风险 | pass | 0/0/8 | 0/0 | 2026-08-30 02:28 |
| dsh-plugin-gemini-theme A Gemini-styled skin for the DSH web client | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-serena-lens | 低风险 | pass | 0/0/1 | 0/0 | 2026-08-30 02:28 |
| dsh-b2us-schedule | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-error-audit DSH 实时 AI 自审插件：任何报错/警告第一时间连同时间、错误码、会话、用户原话、AI 动作与工作区写入专用日志目录，并主动通知 AI、内置 read_error_logs 工具随时读取。Real-time AI self-audit for DSH — captures every error/warning with timestamp, error code, session, user prompt, AI action and workspace into a dedicated log folder; instantly notifies the agent and ships a read_error_logs tool. | 低风险 | pass | 0/0/2 | 0/0 | 2026-08-30 02:28 |
| dsh-plugins Independent catalog of DSH plugins and mobile companion published by NOirBRight | 低风险 | pass | 0/0/3 | 0/0 | 2026-08-30 02:28 |
| dsh-awesome-hud dsh侧边HUD面板，包含多个信息展示模块（可自定义是否展示），集成压缩上下文、查看git graph等功能。DSH side HUD panel, containing multiple information display modules (customizable whether to display), integrating features such as compressed context, viewing git graph, etc. | 低风险 | pass | 0/0/8 | 0/0 | 2026-08-30 02:28 |
| biofigure-self-evolve Self-evolving bioinformatics figure library skill: learn plots from papers/PDFs/WeChat articles/screenshots into reusable recipes (R/Python), imitate them when plotting. 自进化的生信 figure 学习库与复用引擎 | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-ui-models-invert-selection Invert selection in DSH for when we are selecting models | 低风险 | pass | 0/0/0 | 0/0 | 2026-08-30 02:28 |
| dsh-purge no more refusals, do everything. | 需注意 | warn | 3/0/6 | 0/0 | 2026-08-30 02:28 |
| dsh-plugins | 需注意 | warn | 0/2/2 | 0/0 | 2026-08-30 02:28 |
| dsh-portfolio-publisher DSH 插件：GitHub 求职仓库一键发布助手（LLM README + Web 面板 + 一键推送） | 需注意 | warn | 2/5/10 | 0/0 | 2026-08-30 02:28 |
静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。风险等级映射与站点一致：secrets/外泄/破坏性/挖矿类 critical 为"严重"，其余 critical 级与警告归入"需注意"（medium）。
历史日报归档
16 期2026-08-30当前38 新增0 严重9 需注意2026-08-290 新增0 严重0 需注意2026-08-28152 新增0 严重49 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么？
这份日报覆盖 2026-08-30 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在注册表中的插件不会包含在内。
风险等级是如何划分的？
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计？
日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。
来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于