每日安全扫描日报
日期 · 2026-09-20 （UTC，覆盖当日 00:00–24:00 新增入库的插件）
104
当日新增
1
严重
34
需注意
69
低风险
| 插件 | 风险 | 扫描结论 | C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| @Fishsb/dsh-plugin-roundtable 圆桌会议 RoundTable — DSH 插件：把一次会话变成可视化、可辩论、可拍板的专家圆桌会议；含三种协作模式、调度面、红队评审与 28 席专家团 | 需 DSH 0.1.5-rc.1+ · MIT License | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 00:13 |
| @juzikexue/dsh-paper-digest | 低风险 | pass | 0/0/8 | 0/0 | 2026-09-20 02:13 |
| @MYCF711/dsh-qoder-cli Qoder models in DSH — three-tier model catalog, credential failover, OpenAI-compatible shim, settings card | 低风险 | pass | 0/0/10 | 0/0 | 2026-09-20 02:13 |
| @EIGHTfs/dsh-session-migrate | 需注意 | warn | 0/2/9 | 0/0 | 2026-09-20 02:13 |
| @Gavin237/dsh-capability-hint DSH plugin: inject a one-line hint naming skills that match the current turn, so installed-but-forgotten methodology skills actually get used. Deterministic matching, no LLM calls, fail-open. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 02:13 |
| @DobroGnom/dsh-tab-title Keep the DSH browser tab title pinned and surface completion or attention alerts. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 02:13 |
| @LonelyHerbivore/dsh-image-question DSH Web plugin: ask the user a question with an image, annotate in the browser, get back structured annotations in source-image pixel coordinates. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-20 02:13 |
| @mrbeandev/dsh-reconnect English DSH retry plugin with exponential backoff and gateway recovery | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 04:13 |
| @lukepoo101/dsh-trusted-proxy-auth DSH plugin that trusts authentication already performed by a reverse proxy (Traefik + Keycloak OIDC) while keeping native DSH browser authentication as a fallback. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-20 04:13 |
| @dingchenhui0618-arch/dsh-taskwatch Read-only task monitor for DSH: sessions, background jobs, subagents, goals, workflows and pending approvals, as a phone-friendly page and a GUI sidebar panel. | 需注意 | warn | 0/2/5 | 0/0 | 2026-09-20 04:13 |
| @liuhao11223/dsh-oneclick-restart dsh重启按钮插件 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 04:13 |
| @x102201/dsh-helper-plugin-command-ask DSH的 /ask 模式插件：对标 Cursor Ask 的「只读问答一轮」。/ask <问题> 只回答、只引用实读内容、不改动任何东西，模式随该轮结束自动释放，之后普通消息照常执行；内置工具守卫强制只读，支持 link: 与 github: 两种安装。 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-20 04:13 |
| @vanddccd/dsh-todo-dock DSH Web 任务面板重制：三段式进度条 + 已完成折叠 + transitions.dev 动效 | Rebuilt todo dock for DSH | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-20 04:13 |
| @mrbeandev/dsh-short-tool-ids DSH plugin that shortens tool-call IDs over 64 characters for OpenAI-compatible Chat Completions providers, with a per-provider toggle | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 06:13 |
| @mpetruc/dsh-model-sync Auto-populate and auto-update the list of llm-pi-ai providers' models. No more hand-typing and manually keeping up-to-date with your inference server. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-20 06:13 |
| @localSummer/dsh-group-chat DSH 模型群聊：多模型角色群组对话面板。角色绑定不同 provider/model，群内共享对话记录；设置页支持启用/停用。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 06:13 |
| @LoveIrishCoffee/dsh-effort-ultra DSH composer 的原生推理档位控件：蓝紫渐变 + 星点 + 流光的档位条，档位由每个模型自己的 reasoning 声明决定 / A native reasoning-effort control for the DSH composer | 需注意 | warn | 0/1/0 | 0/0 | 2026-09-20 06:13 |
| @LoveIrishCoffee/dsh-effort-ultra-skin DSH 推理档位皮肤：把推理等级控件重绘成蓝紫渐变、带星点与流光的档位条 / Blue-violet Ultra skin for the DSH reasoning-tier control | 需注意 | warn | 0/1/0 | 0/0 | 2026-09-20 06:13 |
| @MYCF711/dsh-plugin-forge dsh 插件锻造工坊：一支专家 Agent 团队，从零把 dsh 插件锻造到可发布版本 | An expert agent team that forges DSH plugins from zero to release | 需注意 | warn | 0/10/5 | 0/9 | 2026-09-20 06:13 |
| @Nwflower/dsh-claude-style Claude Code Desktop theme for DSH｜ 为 DSH 网页 GUI 打造的 Claude Code 桌面主题 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 06:13 |
| @gaoqiaoliangjie666/dsh-qwen-connect 将 QwenWork 桌面 App 包含的模型自动接入 DSH，零配置使用。Bring the models in the QwenWork desktop app into DSH with zero configuration. | 需注意 | warn | 0/12/0 | 0/9 | 2026-09-20 06:13 |
| @MYCF711/dsh-websearch-direct 免 API Key 的 dsh 联网搜索 / 网页抓取插件：引擎=逻辑源、入口=直连/镜像/加速路由自动回退，不消耗任何模型 token | 需注意 | warn | 0/3/5 | 0/0 | 2026-09-20 06:13 |
| @Devin-AXIS/jev-dsh-decision Jev DSH 决策引擎｜面向 Agent Harness 的结构化决策插件。原生支持 DSH，通过 iPolloWork 支持 OpenCode、Codex Harness。 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-20 06:13 |
| @DWJZ/dsh-mail-reader DSH 只读邮件插件：一个 email_read 工具读取 Gmail 与 Outlook，完全不实现发送、回复、删除、移动、标记或归档。 / Read-only mail for DSH: one email_read tool over Gmail and Outlook, with no send, reply, delete, move, mark, or archive capability. | 需注意 | warn | 0/3/4 | 0/0 | 2026-09-20 08:13 |
| @wjackiedev/dsh-session-manager Archived-session manager for the DSH Web GUI — restore and permanently delete session logs. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-20 08:13 |
| @x102201/dsh-helper-plugin-notify-away dsh-helper plugin: Cursor-style system notifications for DSH — silent while you watch the finishing session, toast when you have switched away. ｜ 中文：dsh-helper 插件——为 DSH 提供离开才通知的系统提醒，正在看这场会话时保持安静。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 08:13 |
| @olimc2016/dsh-token-meter-panel DSHToken 用量与花费面板插件：今日消费、预算进度、成本构成、缓存命中省下的钱。社区插件，非官方。 | 需注意 | warn | 0/1/15 | 0/0 | 2026-09-20 08:13 |
| @Exynos671/dsh-windows-notify Windows toast notifications for DSH: permission requests, branch/option choices and turn completion, plus a Settings -> General switch panel. | 需注意 | warn | 0/1/2 | 0/0 | 2026-09-20 08:13 |
| @Ryuu-64/dsh-find-all DSH web plugin: a Cmd/Ctrl+F find bar for the DSH desktop shell that searches the WHOLE conversation, not just the rendered tail. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 08:13 |
| @KKKKeybird/dsh-turn-rail-persistent DSH plugin: keep the built-in conversation turn rail visible at every transcript width (un-hides the host rail on narrow transcripts). | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 08:13 |
| @LX2000WASD/dsh-plugin-manager-companion Companion to the official DSH plugin manager: pre-install quality gate, environment diagnostics, marketplace, and upgrades. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 08:13 |
| @Fnckerpoi/dsh-plugin-sirchmunk DSH集成sirchmunk插件管理。 | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-20 08:13 |
| @RrcoVer0/dsh-webnovel-writer Chinese web-fiction workflow skills for DSH: planning, file-backed memory, consistency review, rollback, and style profiling. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 08:13 |
| @SunlitCrack/dsh-skills-mcp-manager DSH 插件：设置页统一管理技能 / MCP 服务器 / 指令文件（AGENTS.md 家族） | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 08:13 |
| @KKKKeybird/dsh-tool-bash-stream Streaming bash tools for DSH: read command output and react while it is still running | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-20 08:13 |
| @Yuuyuko-uu/dsh-tts-bridge DSH 朗读桥：会话里的话自动交给 DeepSeek 网页端朗读，声音从你自己的电脑里出来 | 需注意 | warn | 0/1/18 | 0/0 | 2026-09-20 08:13 |
| @Awoodwhale/dsh-agent-persona Workspace personas for DSH: many system-prompt personas, each scoped by workspace path or session id, managed from the Web settings page (Apache-2.0) | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-20 10:13 |
| @yueyexiayu/dsh-zhanshi DSH desktop plugin: show this-turn images and videos inline in the conversation | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 10:13 |
| @hzhgino/dsh-caonima 核动力草泥马 - DSH Web GUI desktop pet plugin for DSH | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 10:13 |
| @HandsYe/dsh-input-history 为 DSH 提供持久化输入历史，支持使用键盘上下方向键切换历史记录并恢复未发送草稿。Persistent input history for DSH with Arrow Up and Arrow Down navigation, draft recovery, deduplication, and local storage. | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-20 10:13 |
| @HyperForce/dsh-workspace-lock Per-workspace password locks for the DSH web UI: right-click to lock, lock screen, admin master password. UI-level lock. | 需注意 | warn | 1/0/6 | 0/0 | 2026-09-20 10:13 |
| @YUYUY9527/dsh-plugin-management 外部插件管理器 for DSH: inventory + one-click update for a profile's third-party plugin packages. Settings -> Plugins UI + agent-facing tool. | 需注意 | warn | 0/1/3 | 0/0 | 2026-09-20 10:13 |
| @yunxiyang/dsh-stepwise-distill Solidify DSH session history step by step: rewrite tool results in place to the facts the model actually kept, so long conversations stop re-sending noise every turn. Costs tokens and time: a ~770-character contract in every request, plus one extra full-context request and round-trip per step when stepSummary is on. | 需注意 | warn | 0/2/0 | 0/0 | 2026-09-20 10:13 |
| @SoyBeanMilkx/CompFlow Organize DSH sessions into nested, collapsible compositions. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-20 10:13 |
| @lanyunshijian/dsh-file-download 插件 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-20 10:13 |
| @7starsseeker/dsh-jev-guard DSH 执行前安全阀门:bash/pwsh 真正执行前先经静态规则 + TypeSafe Jev 语义判定,破坏性操作按 允许/修正/拦截/上报人工 四态处置,含额度降级与审计日志。 | 严重 | fail | 10/0/16 | 0/0 | 2026-09-20 10:13 |
| @PangXitong/dsh-restart-button 在DSH的设置中新增一个关闭/重启按钮 | 需注意 | warn | 0/8/6 | 0/0 | 2026-09-20 10:13 |
| @Bay-Zeddie/dsh-agent-instructions 在 dsh Web 设置页里编辑原生 AGENTS.md 的面板：链上每层可点选编辑，三种生效范围，并可视化官方指令预算。 | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-20 10:13 |
| @goodddGrades/dsh-behuman Long-term memory and self-evolving skills for the DSH · DSH 的长期记忆与自我演进能力 —— Plain Markdown on disk, no vector store | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 10:13 |
| @CLOUDinDREAM/dsh-cj2099-plugin 2099年的她 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 10:13 |
| @chen8923/dsh-task-progress Live progress for long-running DSH tasks: scripts report structured progress, the Web UI shows it in a floating overlay, a sidebar tab, and a settings page. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-20 12:14 |
| @jolaaa999/dsh-section-nav DSH plugin: section navigation rail and local chapter bookmarks for DSH chat answers | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 12:14 |
| @konglong87/dsh-input-list dsh 常用内容插件：保存、编辑提示词，点击回填输入框，不自动发送。 | 需注意 | warn | 1/0/0 | 0/0 | 2026-09-20 12:14 |
| @Chance722/dsh-inbox dsh 插件：把复制粘贴的链接、图片、文本、账密收进本地仓库，自动分类，能在对话里检索取回 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 12:14 |
| @zhangyy0423/veripipe An anti-false-positive verification pipeline for AI agents that test web/HTTP products. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 12:14 |
| @cup113/personal-track DSH插件：右侧栏每日习惯看板 + 主区域统计页。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 12:14 |
| @pioneer666-user/dsh-archify-manage DSH流程图管理插件：浏览 Archify 业务流程图目录、按 Git 附注标签阅读历史版本、保存版本。A workflow-diagram manager plugin for DSH. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 12:14 |
| @hawkongz/dsh-chat-locator Turn-rail settings for DSH Web: tick thickness, rail side, a curved length gradient anchored on the hovered tick, and a plain-text hover preview with adjustable lines, font size, and width. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 12:14 |
| @doremifaso12345/dsh-token-ledger a dsh plugin for token surveillance | 需注意 | warn | 0/2/4 | 0/0 | 2026-09-20 12:14 |
| @donghangxunlang-cmd/dsh-attention-health DSH上下文健康监测 + 内容退化守卫 + 零模型交接文档 | 需注意 | warn | 0/2/5 | 0/0 | 2026-09-20 14:13 |
| @xbzbing/dsh-openviking-manager OpenViking 的配置工具 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 14:13 |
| @Rice00/dsh-job-progress Live progress for long-running background jobs in DSH — a draggable floating ball with a per-session task panel showing done/total, speed and ETA. | 需注意 | warn | 0/1/5 | 0/0 | 2026-09-20 14:13 |
| @Towzai/dsh-memory-jev Memory plugin for DSH: every memory read/write is a typed judgement by TypeSafe Jev (choice/noul). | 需注意 | warn | 0/5/8 | 0/0 | 2026-09-20 14:13 |
| @yuyuyyyyyyyyyyyy/dsh-project-memory Cross-session engineering memory for coding agents on DSH: durable per-project records of root causes, failed attempts and constraints, recalled into the prompt before the agent plans. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-20 14:13 |
| @Fishquito7/dsh-gitbash Give DSH a real bash tool on Windows: call bash directly, with no pwsh escaping and no quoting hell. | 需注意 | warn | 0/1/1 | 0/1 | 2026-09-20 14:13 |
| @SPX43JL/dsh-safekeep Unofficial Windows file-recovery guard for unattended DSH workflows | 需注意 | warn | 1/5/5 | 0/0 | 2026-09-20 14:13 |
| @Love-JourneY/dsh-search-plus 中文友好的 DSH 会话全文搜索 + 精确跳转定位（CJK-friendly session full-text search with precise jump-to-hit for DSH） | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-20 14:13 |
| @Yochor-Debug/dsh-float | 需注意 | warn | 0/13/48 | 0/0 | 2026-09-20 14:13 |
| @bbaz123/dsh-confirmation-resolution Post-task confirmation decision guard for DSH — balance output quality with real user impact. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-20 14:13 |
| @harmless0819-dev/dsh-agent-chat Turn-injection message channel between DSH agents on two machines: messages land in a log and are injected as context at the next agent step. | 需注意 | warn | 0/2/2 | 0/0 | 2026-09-20 16:13 |
| @harmless0819-dev/dsh-power-controls Close / restart DSH buttons in Settings > General, plus an opt-out auto-close that waits until every browser page has stopped beaconing. | 需注意 | warn | 0/3/3 | 0/0 | 2026-09-20 16:13 |
| @harmless0819-dev/dsh-whale-live2d Replace the whale widget static image with a Live2D model, stacked at identical geometry. Degrades to the static widget without Cubism Core. | 需注意 | warn | 0/1/5 | 0/0 | 2026-09-20 16:13 |
| @Voellin/dsh-deephub-share DeepHub 的开放部分：零知识云端协议客户端，以及基于它的 DSH 插件 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 16:13 |
| @harmless0819-dev/dsh-whale-emote Make the whale widget perform emotions: stickers pop out beside it, with sound and a speech bubble. Agent-triggered over local HTTP. | 需注意 | warn | 0/2/6 | 0/0 | 2026-09-20 16:13 |
| @kolawong/fast-compaction-dsh Verdict-based context compaction for DSH — replaces lossy LLM summaries with fast keep/truncate/drop decisions from jev-latest; everything kept stays verbatim. Port of tamaratran/fast-jev-compaction. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-20 16:13 |
| @elk-9527/dsh-vscode | 低风险 | pass | 0/0/10 | 0/0 | 2026-09-20 16:13 |
| @Ryuu-64/dsh-session-tools Let the agent start a new session, or send a message to another one. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 16:13 |
| @dashitongzhi/dsh-config-webdav-sync DSH plugin: bidirectional WebDAV sync for DSH configuration (providers, plugins, prompts, skills). Excludes sessions and credentials. Design inspired by farion1231/cc-switch sync protocol. | 低风险 | pass | 0/0/5 | 0/0 | 2026-09-20 16:13 |
| @harmless0819-dev/dsh-codex-micro Turn a Vaydeer 9-key keypad into a DSH Codex Micro: the keypad sends unique combinations, the plugin maps them to DSH actions. | 需注意 | warn | 0/3/3 | 0/0 | 2026-09-20 16:13 |
| @harmless0819-dev/dsh-self-built-plugins Index of self-built DSH plugins, grouped by purpose: appearance, control, collaboration. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 16:13 |
| @YEJASONJIEXIN/dsh-whale-girl-pet 🐋 DSH 桌宠（胡桃语音 fork）：大小可调 + 16 角色语音播报 + 天气/余额宿主直连。基于 yanzwzz/dsh-whale-girl-pet 0.3.2。 | 低风险 | pass | 0/0/8 | 0/0 | 2026-09-20 16:13 |
| @EdwardXiao-bit/dsh-run-button Adds a Run button to shell code blocks in DSH replies, executing the command on the host and streaming its output to a dock or a bottom-panel tab. 给 DSH 回复里的命令行代码框加一个「运行」按钮：在宿主机上执行该命令，输出显示在右下角浮动面板或底部面板标签页。 | 需注意 | warn | 0/3/7 | 0/0 | 2026-09-20 16:13 |
| @DDDMUC/dsh-delete-turn Per-message delete for DSH: remove a user message, one reply step, or a whole assistant reply from the derived model context via the official surface-replace contract, and hide it from the visible transcript without rewriting the append-only log. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-20 16:13 |
| @birew83538-oss/dsh-chat-thinking-editor DSH 插件：直接在 DSH 对话里编辑任意 AI 消息的正文与思维链（thinking）。保留 AI 的聪明，让 AI 完全符合你的心意。🐛 修复选中删除联动清空问题。| DSH plugin to edit any assistant reply + reasoning/thinking chain. Make the AI output truly yours. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 16:13 |
| @harmless0819-dev/dsh-persona-anchor Pin the persona into a system-prompt section so it never competes for the AGENTS.md 65536-byte instruction budget. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 16:13 |
| @xuzhougeng/ScientificFigureLibrary Local-first MCP App for scientific figures. Import, review, and publish a global library on disk; reuse exact templates in Pi, DSH, Claude, Codex, Cursor, and Wisp. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 16:13 |
| @gluztm/DSHGuard DSH守护壳：DSH的一键救援式启动器：改动快找存档、问题整组回滚、本地管理插件、诊断日志导出 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 16:13 |
| @PerryLink/jevcore TypeSafe Jev for DSH, the Model Context Protocol, and plain Node: typed judgments instead of prose, offline by default. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-20 16:13 |
| @gorban/dsh-job-stop DSH plugin: stop a running background job from the session-header job list, behind a confirmation dialog. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-20 18:13 |
| @GooDAnDReaDY/dsh-web-gateway Resilient web search and page extract tools for DSH with provider fallback and SSRF-safe extract | 需注意 | warn | 0/2/7 | 0/0 | 2026-09-20 18:13 |
| @GooDAnDReaDY/dsh-github-ops GitHub operations for DSH: releases, tags, a guarded API pass-through, sanitized mirror publication, workflow runs and repository settings. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-20 18:13 |
| @HorusJiang/dsh-jev-tools Jev judgment, not generation: prune long tool output, screen fetched pages for injected instructions, and gate completion claims inside DSH. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 18:13 |
| @MosesCharm/dsh-sidebar-stack Stack DSH sidebar footer actions vertically — no more cramped single row for cost-meter / context plugins | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 18:13 |
| @mengge237/dsh-model-priority DSH 插件：自定义模型/提供方顺序——侧边栏拖拽排序，宿主的模型列表按这份顺序返回；顺序写进 settings.yaml 前自动备份 | 需注意 | warn | 0/7/10 | 0/0 | 2026-09-20 18:13 |
| @AMC-tp/dsh-work-buddy Pixel desk buddy for the DSH Web GUI: slacks off when idle, thinks and types while a turn runs, throws confetti when it finishes, and tallies completed turns. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-20 18:13 |
| @shenA2024/whale-persona-presets whale-persona 的人设内容包：现成的预设 JSON（一句立场 + 逐条可勾选的工作契约）。引擎在本体仓，出厂空白。 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-20 18:13 |
| @A8Chann/dsh-pet-live2d DSH Web GUI 的 Live2D 桌宠插件：可拖动、跟随鼠标、跟着会话状态换动作与表情，右键面板可换装 | 低风险 | pass | 0/0/9 | 0/0 | 2026-09-20 18:13 |
| @dsh-so/dsh-plugin-finder Natural-language plugin search for DSH - ask what you need, get matching dsh.so plugins with install commands. | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-20 19:20 |
| @mrbeandev/dsh-flowglass English-only Flowglass plugin for DSH, based on Iwctwbh/dsh-flowglass | 需注意 | warn | 0/3/2 | 0/0 | 2026-09-20 20:13 |
| @Saretheya/dsh-tick Session-local scheduled tasks for DSH: inject a prompt into the current session after a delay, at a fixed time, or on a repeating interval — with a Web management panel, a /schedule command, and model-facing management tools. | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-20 20:13 |
| @Underwater008/deepshell A native macOS shell for the official DSH. No Electron, no telemetry, no vendor gateway — ~150 lines of Swift + one bash script. | 需注意 | warn | 0/15/20 | 0/0 | 2026-09-20 20:13 |
| @lijiawei255/dsh-status-chime Spoken status alerts for DSH where clip LENGTH encodes urgency: a 2s approval chime vs an 8s failure announcement. Eight scenes, zero third-party dependencies on Windows 10/11. · DSH 语音状态提示：用时长编码紧急度，零第三方依赖。 | 需注意 | warn | 0/2/14 | 0/0 | 2026-09-20 22:13 |
| @Aliww2468/dsh-client-ui-aqua-patched Unofficial patched fork of the Aqua glassmorphism theme for the DSH web UI, repaired for DSH 0.1.2-rc.1 (upstream 1.3.1 crashes there) | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-20 22:13 |
| @rbviz/dsh-plugin-jules | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-20 22:13 |
静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。风险等级映射与站点一致：secrets/外泄/破坏性/挖矿类 critical 为"严重"，其余 critical 级与警告归入"需注意"（medium）。
历史日报归档
37 期2026-09-2259 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20当前104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么？
这份日报覆盖 2026-09-20 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。
风险等级是如何划分的？
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计？
日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。
来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于