dsh.so
中文
English中文

每日安全扫描日报

日期 · 2026-09-17 （UTC，覆盖当日 00:00–24:00 新增入库的插件）

70
当日新增
1
严重
24
需注意
45
低风险
插件风险扫描结论C/W/I清单审计收录时间
dsh-mcp-manager-plus
MCP Server Management Plugin: A new "MCP Management" page has been added to the left sidebar of the DSH settings interface, allowing you to directly view, enable/disable, edit, restart, delete, and add MCP servers.
需注意warn0/1/70/02026-09-17 02:14
dsh-pocket-console
DSH plugin: approve tool calls and answer ask_user_question prompts from your phone over Feishu, with the desktop always first in line.
低风险pass0/0/30/02026-09-17 02:14
dsh-prompt-optimizer
优化提示词
低风险pass0/0/00/02026-09-17 02:14
dsh-windows-c-cleanup
DSH plugin: scan, grade and clean up Windows C: drive - five-tier safety grading, staging area, UAC elevation, and migration.
低风险pass0/0/00/02026-09-17 02:14
dsh-remote-access
Control how the DSH Web GUI is reachable: local only, Tailscale, all local networks, or off.
低风险pass0/0/20/02026-09-17 02:14
dsh-ditto
AI is great at doing one file. Ditto is for doing the same thing to 30 files without babysitting all 30. Review-first batch automation plugin for DSH: 3 reviewed samples → full preview → approve → safe apply.
低风险pass0/0/00/02026-09-17 04:13
win-pilot
Agent-neutral Windows Computer Use plugin with MCP, CLI, skills, and native host adapters
需注意warn0/7/80/02026-09-17 04:13
dsh-opencode-compat
Standalone OpenCode Zen compatibility bundle for DSH: session headers and Muse reasoning replay
低风险pass0/0/00/02026-09-17 04:13
857-dsh-pdf-patched
需注意warn0/3/20/02026-09-17 04:13
dsh-opencode-go-model-list
修复dsh上opencode go模型列表问题
低风险pass0/0/50/02026-09-17 04:13
dsh-browser-use
DSH Agent Preset bridge for Open Browser Use WebMCP
低风险pass0/0/00/02026-09-17 04:13
dsh-lsp-bridge
Bridge DSH to language servers for read-only code intelligence, with multi-language configuration, multi-root workspace support, and session-scoped server reuse.
需注意warn0/1/50/02026-09-17 04:13
dsh-captain-guard
低风险pass0/0/00/02026-09-17 04:13
memosbox-dsh-plugin
低风险pass0/0/60/02026-09-17 04:13
xy-dsh
A set of DSH plugins: an always-on-top agent lamp board (macOS) and a session context lens.
需注意warn0/7/70/02026-09-17 04:13
dsh-net-access
Control how the DSH Web GUI is reachable: local only, Tailscale, all local networks, or off.
低风险pass0/0/10/02026-09-17 04:13
dsh-claude-theme
Claude-style theme for the DSH Web GUI: warm cream canvas, serif reading text, coral accent — plus a clickable pixel Clawd crab.
需注意warn0/4/10/02026-09-17 04:13
dsh-water-reminder
Hydration reminder plugin for DSH — a randomized 40-60 minute nudge delivered as a native OS notification, an in-conversation agent nudge, and a sidebar countdown panel. Zero runtime dependencies.
低风险pass0/0/20/02026-09-17 04:13
dsh-paste-preview
DSH web plugin: paste images with thumbnail previews, reroute them as file attachments for text-only models, zoomable thumbnails in sent messages
低风险pass0/0/10/02026-09-17 04:13
dsh-apis-plugin
dsh-apis-plugin
低风险pass0/0/10/02026-09-17 04:13
memo_harness
Agent memory with error bars: full local posteriors reconciled under finite relation laws. Dedupes source lineage, corrects without rewriting history. One CLI + SQLite.
低风险pass0/0/00/02026-09-17 04:13
dsh-paper-reader
DSHA 论文阅读器插件：三栏阅读（左目录/中黑底论文/右实时 Agent 对话）+ 右栏停靠模式 + pdf.js 渲染与文字抽取
低风险pass0/0/100/02026-09-17 06:13
dsh-context-imports
Claude Code-style @path imports for DSH: expands @imports in AGENTS.md/CLAUDE.md and injects referenced files into context at session start
低风险pass0/0/10/02026-09-17 06:13
dsh-nx
Experimental DSH plugin for safe, local Siemens NX automation through MCP.
低风险pass0/0/80/02026-09-17 06:13
dsh-desktop-upgrade
DSH Desktop plugin: adds the missing 「升级 DSH」 entry — tray command + dsh_upgrade model tool, driving the official version service and installer channel via desktopRuntime.updates. 不改内核文件。
低风险pass0/0/00/02026-09-17 06:13
dsh-sidemind
低风险pass0/0/00/02026-09-17 06:13
dsh-ds-balance
DSH 插件：在左侧栏底部显示 DeepSeek 账户余额，设置页提供连接、展示币种、预警阈值与刷新节奏的配置卡片。（原生嵌入“设置-插件-插件配置”）
低风险pass0/0/00/02026-09-17 06:13
dsh-plugin-mesh
DSH 局域网 Mesh 插件：自动发现同网段的其他 DSH 实例，提供对端操作页面，支持跨机双向派发任务。
低风险pass0/0/150/02026-09-17 08:13
dsh-fal-imagegen
fal.ai native image generation for DSH: a FAL_KEY settings card plus Agent tools (fal_generate_image / fal_edit_image) that call queue.fal.run directly.
低风险pass0/0/30/02026-09-17 08:13
dsh-web-searxng-search
Self-hosted SearXNG web search provider for DSH. No API key or vendor account.
低风险pass0/0/10/02026-09-17 08:13
dsh-graft-plugin
A DSH plugin that puts graft — a prebuilt graph of every symbol, its file:line span, and who calls what — in front of both you and the model.
需注意warn0/5/90/02026-09-17 08:13
dsh-memory-lite
给 agent 的按需记忆库：会话日志提炼成分层 markdown 记忆，mem_query 只回命中片段（约 700 字符，而不是上万字符）。零依赖、不每轮注入、条条可溯源。既是 DSH 插件，也是独立 CLI。
低风险pass0/0/40/02026-09-17 08:13
dsh-commandcode-quota
Command Code plan quota in your DSH sidebar: 5-hour, weekly and monthly credit windows with reset countdowns. Works with Go, GOAT, Pro, Max and Provider plans.
低风险pass0/0/70/02026-09-17 08:13
dsh-iconic-launcher
DSH plugin — pick a preset or upload a PNG: backdrop auto-removed, packed into a multi-size ICO, written to your desktop in one click.
低风险pass0/0/40/02026-09-17 08:13
win10GUI-dsh-plugin
低风险pass0/0/20/02026-09-17 08:13
dsh-web-fetch-proxy
DSH plugin: route the built-in web_fetch through a local proxy so TUN fake-ip addresses stop tripping the SSRF guard.
需注意warn0/5/180/02026-09-17 08:13
dsh-graph-runtime
Graph runtime capabilities for the DSH: register LangGraph compiled graphs as DSH tools, plus a graph-driven routing agent.
低风险pass0/0/00/02026-09-17 08:13
dsh_workspace_switch
deepseek-harness多工作区隔离管理，统一管控 Skill / MCP / 插件启停，全局配置兜底，工作区可单独开关
低风险pass0/0/00/02026-09-17 08:13
dsh-drawio
在 DSH Web GUI 侧边栏里直接画 draw.io 图：图纸即工作区里的 .drawio 文件，编辑器自托管、完全离线 · A self-hosted draw.io editor for the DSH sidebar
低风险pass0/0/00/02026-09-17 08:13
dsh-pptx-editor
PPTX editor integration for DSH
低风险pass0/0/00/02026-09-17 08:13
dsh-continue
dsh 输入栏一键「继续」「讲人话」快捷按钮插件 —— 代替程序员重复的体力活
低风险pass0/0/00/02026-09-17 08:13
dsh-vps-manager
Use your VPS inside DSH as seamlessly as over SSH: zero-token commands plus AI that operates the server with risk-tiered confirmation. 在 DSH 中和 SSH 一样无感地使用 VPS。
严重fail1/2/110/02026-09-17 08:13
belief-merge
Provenance-retaining cross-session context merge for DSH — a confluence theorem with a counterexample, and a benchmark for it.
低风险pass0/0/00/02026-09-17 08:13
dsh-simulated-life
Simulated life context and world evolution for DSH: injects past 24h simulated events and provides life_react tool.
低风险pass0/0/00/02026-09-17 10:13
dsh-user-markdown
让用户消息也能在DSH里被markdown渲染
低风险pass0/0/30/02026-09-17 10:13
dsh-console-tap
DSH 控制台显形插件:把助手执行的命令与完整控制台输出实时推给前端(官方 WebUI 悬浮控制台)
需注意warn0/6/130/02026-09-17 10:13
dsh-plugin-atlassian
DSH plugin: connect Atlassian's official remote MCP server (Jira, Confluence, JSM, Bitbucket, Compass) over OAuth 2.1.
需注意warn0/6/150/02026-09-17 10:13
dsh-wechat-clawbot
DSH plugin: WeChat floating-ball bridge (QR login, message relay to agent) — maintained fork of lubaiUwU/DSH-WeChatClawBot with context_token + login-loop fixes
需注意warn0/14/430/02026-09-17 10:13
dsh-plugin
dsh plugins
低风险pass0/0/30/02026-09-17 10:13
dsh-model-switcher
低风险pass0/0/80/02026-09-17 10:13
dsh-api-balance
Live DeepSeek API balance and per-session token usage in the conversation header.
需注意warn0/1/20/02026-09-17 10:13
dsh-offpeak-job
DSH 的谷时调度插件——把任务留到谷时再运行。
低风险pass0/0/20/02026-09-17 10:13
dsh-memory-delta
给 AI 编码助手的跨会话长期记忆：自动注入、只推变化。DSH 插件 + 零依赖 CLI。
需注意warn0/3/40/02026-09-17 10:13
dsh-opencode
dsh plugin that fixes opencode.ai 400 MissingSessionID: sends the x-opencode-session header on opencode / opencode-go routes in DSH. One-command install, in-memory, upgrade-safe.
低风险pass0/0/00/02026-09-17 10:13
dsh-project
Engineering suite for DSH: seven plugins covering roles, specifications, test design, quality gates, evidence, audit trail and pipeline orchestration
需注意warn0/2/00/02026-09-17 10:13
dsh-passbook
隐私密码本（Privacy Passbook）：我自己的私密凭据工具面——生成强密码、按字段写入、按需取用、不泄漏地使用（env 注入）、体检与轮换；存储复用 DPAPI vault，秘密走 stdin/env、不回显，审计只记「谁何时取了哪一条」。
需注意warn0/2/40/02026-09-17 10:13
dsh-custom-mode
DSH 自定义模式：可切换基础模式、逐行开关插件、在 Web 设置页里随时改系统提示词，保存后新建会话即生效｜Custom mode for DSH: pick a base mode, toggle plugins row by row, edit the system prompt live from the settings page
需注意warn1/0/60/02026-09-17 10:13
dsh-simple-codegraph
Per-agent CodeGraph code intelligence integration for DSH.
低风险pass0/0/30/02026-09-17 12:13
dsh-code-graph
Branch-aware code knowledge graph plugin for DSH — callers/impact/trace over 158+ languages, freshness-gated, zero MCP sessions
需注意warn0/2/80/02026-09-17 12:13
dsh-server-monitor
Read-only Linux server monitoring in the DSH sidebar.
需注意warn1/3/50/02026-09-17 12:13
dsh-advanced-provider-settings
Advanced provider configuration UI for DSH: headers, User-Agent, retry policy, timeouts, vision, reasoning and compatibility — without editing settings.yaml by hand.
低风险pass0/0/00/02026-09-17 12:13
dsh-plugin-proxy
Runtime-switchable outbound proxy for DSH, with web settings card (maintained fork)
需注意warn0/8/210/02026-09-17 12:13
dsh-plugin-adapter
DSH adapter for OpenCode Zen free models (maintained fork with gateway-compat fixes)
需注意warn0/2/50/02026-09-17 12:13
dsh-computer-use-win
Windows computer use for DSH agents screenshot, click, type, scroll, with an on-screen indicator the human can see
需注意warn2/2/50/02026-09-17 12:13
dsh-run-environment
DSH plugin: run the project you have open, from the harness you are already in. Detects how a workspace is meant to be run (Node.js today, adapters for more) and runs it from the Session header.
低风险pass0/0/20/02026-09-17 12:13
dsh-dpharness
在 dsh 里浏览 dpharness.com 的插件目录并一键安装 —— 严选插件（汉化优先 + 可信度筛选）。Curated dsh plugin catalog for DSH with one-click install.
需注意warn0/2/110/02026-09-17 12:13
dsh-verdict
Measure whether a change to your dsh setup actually helped: register repeatable cases, run them, diff before/after. DSH plugin.
需注意warn1/1/00/02026-09-17 12:13
dsh-run
DSH web plugin: a Session-header split button that runs npm scripts from the workspace's package.json (default: dev, else start, else the first declared).
低风险pass0/0/40/02026-09-17 12:13
dsh-seams
Field notes on DSH seams: extension points, a shell-only context-injection recipe, and four silent-failure traps
低风险pass0/0/00/02026-09-17 12:13
agent-usages
需注意warn0/1/10/02026-09-17 12:13

静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。风险等级映射与站点一致：secrets/外泄/破坏性/挖矿类 critical 为"严重"，其余 critical 级与警告归入"需注意"（medium）。

历史日报归档

32 期
2026-09-17当前70 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
← 返回安全报告

这份日报覆盖什么？

这份日报覆盖 2026-09-17 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在注册表中的插件不会包含在内。

风险等级是如何划分的？

风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。

为什么这不是完整安全审计？

日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。

来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于

这页有帮助吗？