每日安全扫描日报
日期 · 2026-09-22 （UTC，覆盖当日 00:00–24:00 新增入库的插件）
59
当日新增
1
严重
18
需注意
40
低风险
| 插件 | 风险 | 扫描结论 | C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| @fatefgo2050/dsh-mcp-scanner 在 DSH 设置页扫描并管理本地 MCP 服务器与工具 | 需注意 | warn | 0/1/4 | 0/0 | 2026-09-22 00:13 |
| @MiRHaDi/dsh-persian-rtl Community Persian language pack and RTL support for DSH Web, with lifecycle and browser tests | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 00:13 |
| @onepayzk-glitch/dsh-typesafe-ask Ask TypeSafe (Jev) for structured decisions from inside DSH: typed questions in, calibrated probabilities out. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-22 02:14 |
| @zhy5/dsh-wx-bridge DSH plugin: connect WeChat (official iLink/ClawBot) to DSH — live status settings panel + bundled bridge/keeper kernel | 需注意 | warn | 0/12/27 | 0/0 | 2026-09-22 02:14 |
| @ThinkofRain1213/deepseek-harness-wallet-patched Patched fork of the DSH wallet/control center: peak-clock and billing for the renamed deepseek-flash model, model-pool-driven pricing sync, and a persisted synced table. | 需注意 | warn | 0/4/4 | 0/0 | 2026-09-22 02:14 |
| @syyr1987/dsh-linghun 灵魂（Linghun）— 给 DSH 装一个会思考的自我：灵魂卡四字段（姓名/性格/沟通风格/其他）+ 认知循环 + 海马体记忆沉淀。收口者身份锚点 + 边界判断纪律。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 02:14 |
| @FunctionHookTJU/dsh-work-done-bell DSH plugin: ring a Windows system sound when a DSH session is truly done | 需注意 | warn | 0/1/3 | 0/0 | 2026-09-22 02:14 |
| @Tomcat099/dsh-sidebar DSH 左侧三段式导航（功能菜单 / 项目对话树 / 最近对话）+ 工具箱：可视化配置 MCP、跨会话记忆，让项目与会话一目了然。 | 需注意 | warn | 1/0/6 | 0/0 | 2026-09-22 02:14 |
| @kira905/dsh-firstaid Zero-dependency incident toolkit for long-running agent hosts: one entry point for stuck services, frozen UIs, rollbacks and data loss; emits a hand-off-ready on-site report. Read-only by default. | 零依赖急救台：起不来 / 假死 / 要撤销改动 / 数据被删四类现场压成一个入口，产出可整段交出去的体检报告 | 需注意 | warn | 1/13/9 | 0/0 | 2026-09-22 02:14 |
| @lurejewel/dsh-desktop-notifier | 需注意 | warn | 0/1/4 | 0/0 | 2026-09-22 04:13 |
| @173787247/dsh-wsl-obsidian DSH WSL bridge to a Windows Obsidian vault (status/open/read/write/search). | 需注意 | warn | 0/1/8 | 0/0 | 2026-09-22 04:13 |
| @xueccci/dsh-prompt-lab Agent-structured prompt optimizer for DSH. Modes: normal/slim/expand. Engines: local, hybrid, DSH, cloud API. Modal confirm with score and continue-optimize. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-22 04:13 |
| @1283011852/dsh-plugin-deep-paper-reading DSH plugin: ships the Deep Paper Reading agent preset for figure-by-figure, experiment-by-experiment close reading of a single biomedical paper. | 需注意 | warn | 0/3/0 | 0/3 | 2026-09-22 04:13 |
| @leolee9086/dsh-tool-gateway 把 DSH 的工具目录收成 find_tools + call_tool 两个元工具；其余工具仍可调用，只是入口变成这两个 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 04:13 |
| @skyzhao1223/dsh-agent-token-stats Cross-agent token usage dashboard for DSH: aggregates local logs of Claude Code, OpenCode, Cursor, DSH and more into a persistent ledger, with cache-hit, cost and drill-down analytics in a sidebar panel. / 跨 Agent 的本地 token 用量看板。 | 需注意 | warn | 0/1/3 | 0/0 | 2026-09-22 04:13 |
| @jackchen13755/dsh-jev-lens Jev quality bench for DSH: shadow-accounted dangerous-command judging, injection screening, canary A/B drills, optional gate mode. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 04:13 |
| @dymzz/lgtm-dsh lgtm-dsh is a DSH plugin that automatically installs lgtm, reuses the Jev already configured in DSH, and lets the agent automatically call lgtm during the testing phase. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-22 04:13 |
| @konglong87/dsh-skills-input Choose user-invocable DSH skills from the composer and insert their slash command into the draft. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 06:13 |
| @linbin-mk/dsh-notify deepseek-harness macos 通知插件 | 需注意 | warn | 0/2/2 | 0/0 | 2026-09-22 06:13 |
| @cup113/dsh-effort-memory Host-only DSH bundle: remembers the reasoning effort last in effect per (provider, model) and restores it when a session switches back. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 06:13 |
| @ThinkofRain1213/dsh-smooth-cursor-patched Patched fork of dsh-smooth-cursor: smooth comet-mode animated caret for the DSH Web composer, extended to question-card inputs and fixing the empty-input caret, forward selection tracking, soft-break line positioning, and scroll-overflow cases. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-22 06:13 |
| @exynos967/dsh-request-error-dump DSH 插件：模型请求报错时，把完整请求体 raw JSON 与上游错误响应 raw JSON 一起落盘 | DSH plugin: dump the exact raw request body and the raw upstream error response when a model request fails | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-22 06:13 |
| @miseryrua/dsh-wb-cron DSH 无人值守定时任务调度器：cron/固定间隔/一次性三种调度，到点在 web profile 进程内拉起全新 root agent 执行任务指令，每任务可钉模型与 Agent 预设（预设被删/损坏时三级降级跑完并留痕）。零 npm 运行时依赖、零遥测。 | 低风险 | pass | 0/0/5 | 0/0 | 2026-09-22 06:13 |
| @idoall/dsh-session-colors | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-22 06:13 |
| @imiss1314520/dsh-greet-plugin A minimal DSH plugin that registers a greet tool. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 06:13 |
| @webkubor/dsh-env-inspector DSH 环境自检：让读者看到自己电脑装了什么 —— 系统/CLI/DSH 插件/秘钥是否存在 | 需注意 | warn | 0/2/11 | 0/0 | 2026-09-22 08:13 |
| @dgagf111/dsh-hydrasearch TinyFish + AnySearch web search and fetch provider for DSH: one failover-chain provider with an operator-controlled backend priority and a settings card. | 严重 | fail | 3/3/33 | 0/0 | 2026-09-22 08:13 |
| @bvcvb/dsh-baize-session Pick messages out of dsh sessions and relocate them into another conversation — a new one in any workspace, or an existing open one. Baize. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 08:13 |
| @nabin-qq273274877/dsh-database-manager DSH Web GUI 数据库管理面板：统一管理 SQLite / MySQL / Redis，并提供受审批保护的 agent 工具。 | Database management panel for the DSH Web GUI: SQLite / MySQL / Redis with approval-guarded agent tools. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-22 08:13 |
| @RaulLazaro/dsh-jev Ask Jev (TypeSafe System One) typed questions from DSH: batch judgements with probabilities, configured per user in Settings. | 低风险 | pass | 0/0/5 | 0/0 | 2026-09-22 08:13 |
| @ShawnOY/dsh-tavily-keyless Tavily-backed web search for the DSH web seam (ctx.web): keyless first, with a visible fallback to your API key. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-22 08:13 |
| @chiikin/dsh-glm-quota GLM Coding Plan quota display plugin for the DSH web UI | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-22 08:13 |
| @lsl1931/dsh-resource-bar DSH Web 插件：在左侧边栏底部（设置按钮上方）常驻一枚 CPU / 内存占用药丸，点击展开逐核占用、时间片构成、内存细分、交换分区、系统负载与进程 Top5 详情。 | 需注意 | warn | 0/3/11 | 0/0 | 2026-09-22 08:13 |
| @979569650/dsh-typesafe TypeSafe Jev (System One decision model) as a decision layer for DSH: typed decisions, confidence-gated routing, a cost meter, and an automatic prompt-injection guard over untrusted tool results. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-22 08:13 |
| @zanechen6/dsh-assistant-skin | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-22 08:13 |
| @bruc3van/bruce-md2word 面向 AI Agent 的 Markdown 转 Word 工具：中文排版、Mermaid 图表、可编辑数学公式，提供 Skill、独立 CLI 和 DSH 插件。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 10:13 |
| @Mo3ter/dsh-top-drag DSH Desktop (Windows): keeps the top of the window draggable and clickable at the same time. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 10:13 |
| @sunwindy91/spa-api-extract Agent Skill: extract data from JS single-page apps via curl+grep+python when WebFetch fails (timeout / obfuscated JS). Read-only, desensitized, MIT. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 10:13 |
| @maxesisnclaw/dsh-force-motion Keep DSH UI animations running despite prefers-reduced-motion / 强制开启 dsh 界面动效 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 10:13 |
| @1jiegejiayouxuewangan1/dsh-desktop-uia Windows desktop control for DSH through UI Automation: read a window's control tree instead of screenshots, drive elements by stable id, approve every write, audit every action. | 让 AI 安全地操作 Windows 桌面软件 | 需注意 | warn | 0/2/6 | 0/0 | 2026-09-22 10:13 |
| @Mo3ter/dsh-model-latency-test DSH plugin: adds a 模型测试 (Model Test) settings page that measures first-token latency (TTFT) for every configured model. Works in the DSH Web GUI and DSH Desktop. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-22 10:13 |
| @Tonited/dsh-stealth-reader 在 DSH 会话界面里伪装成日志流读小说：导入 txt/epub，只覆盖右侧消息区，鼠标一动即回到工作界面。 | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-22 10:13 |
| @DDDMUC/dsh-edit-turn Edit any user turn in DSH and re-run it: an inline editor rolls the conversation back through the official surface-replace contract, then re-prompts the agent with the revised text. The append-only session log is never rewritten. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-22 10:13 |
| @DDDMUC/dsh-chat-export DSH 会话可读导出：把 DSH 会话导出成可读的 Markdown / HTML / 纯文本 / ZIP 文字稿（思考块、工具调用与结果、代码块、图片、时间戳、标题与用量） | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-22 10:13 |
| @gordan-code/dsh-jev-advisor Jev (TypeSafe System One) gives the human a second opinion, not the agent. When DSH's model asks you a multiple-choice question, dsh-jev builds a structured Jev request and floats the recommendation, probability spread and confidence beside the options - one click to adopt. API key lives in Settings. No prompt changes. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-22 10:13 |
| @ShawnOY/dsh-tavily Tavily-backed web search for the DSH web seam (ctx.web): keyless first, with a visible fallback to your API key. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-22 12:13 |
| @Excalibur9527/dsh-jev DSH Plugin（DSH 插件）：每轮对话调用 typesafe.ai systemone(jev) 判定用户情绪/意图，结果注入模型上下文；API Key 与全部参数在 GUI 设置页配置 | 低风险 | pass | 0/0/7 | 0/0 | 2026-09-22 12:13 |
| @jackchen13755/dsh-jev-kit Jev decision toolkit for DSH: 22 named typed judgments (privacy scan, change-scope, memory triage, batch triage) on one hardened, budgeted, ledger-backed transport. Advisory only. | 需注意 | warn | 0/1/0 | 0/0 | 2026-09-22 12:13 |
| @AskTheWay/dsh-auto-memory Claude Code-style auto-memory plugin for DSH: typed memory files + MEMORY.md index auto-injected into the system prompt. File-only, no external services. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 12:13 |
| @qcsjjjjj/dsh-hero-rightbar Restores the right sidebar's expand trigger on pages with no conversation (DSH plugin). | 需注意 | warn | 0/5/9 | 0/0 | 2026-09-22 12:13 |
| @linbin-mk/dsh-workspace-prompt deepseek-harness 工作区自定义提示词 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 12:13 |
| @FranzLi347/dsh-workspace-colors Workspace color labels for DSH: six colors, browser-local persistence, Chinese/English UI. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 12:13 |
| @liujianqiao701/dsh-ask-notify DSH web GUI plugin: a bottom-right reminder card when the agent is blocked waiting for your answer, plus a desktop notification and a flashing tab title when you are on another tab. | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-22 12:13 |
| @Zh0uHX/dsh-skills 在 DSH 设置中搜索、安装和管理 Skills.sh 技能 | 低风险 | pass | 0/0/5 | 0/0 | 2026-09-22 12:13 |
| @Edge-Echo/dsh-driftwatch Behavior-drift reports for DSH: compare two session logs and see exactly how behavior changed. Zero dependencies, CI-ready. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-22 12:13 |
| @qianyuan-ltd/dsh-qianyuan Connect DSH to the QianYuan MCP server — shared pitfall/result records and capability lookup for agents. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-22 12:13 |
| @MarchLiu/dsh-cf-sas | 需注意 | warn | 0/2/1 | 0/0 | 2026-09-22 12:13 |
| @173787247/dsh-wsl-jev DSH WSL plugin: TypeSafe Jev / OpenRouter System One (jev_ask / check / rank) | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-22 12:13 |
| @JoblessJoe/dsh-vitals Live btop-style hardware monitor (CPU/mem/temp/GPU) tab for the DSH web GUI | 需注意 | warn | 0/1/1 | 0/0 | 2026-09-22 12:13 |
静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。风险等级映射与站点一致：secrets/外泄/破坏性/挖矿类 critical 为"严重"，其余 critical 级与警告归入"需注意"（medium）。
历史日报归档
37 期2026-09-22当前59 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么？
这份日报覆盖 2026-09-22 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。
风险等级是如何划分的？
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计？
日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。
来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于