每日安全扫描日报
日期 · 2026-09-26 （UTC，覆盖当日 00:00–24:00 新增入库的插件）
84
当日新增
0
严重
29
需注意
55
低风险
| 插件 | 风险 | 扫描结论 | C/W/I | 清单审计 | 收录时间 |
|---|---|---|---|---|---|
| @weibaohui/dsh-fireworks dsh 插件 · 烟花庆祝引擎：agent 编程时在对话窗口上空放烟花——六类事件 × 30 张属性卡 × 洗牌袋随机变种，token 用量决定大小/高度/绚烂度，WebGL2 GPU 累积拖尾渲染 | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-26 00:13 |
| @having5548/dsh-backup Backup & restore plugin for DSH: workspace, full conversations (byte-exact), attachments, settings and dsh-mnemon memory data in one zip | 需注意 | warn | 0/2/5 | 0/0 | 2026-09-26 00:13 |
| @fan56/dsh-approval-policy dsh plugin: unattended approval gate — bounded answer window for subagent/scheduled/cron approvals, fail-closed default instead of hanging (per origin or per session) | 低风险 | pass | 0/0/7 | 0/0 | 2026-09-26 00:13 |
| @ZhangBo-cmd/dsh-coros-badge DSH 插件：常驻显示高驰手表型号与运动天数，点击展开一句话点评与建议 | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-26 00:13 |
| @weibaohui/dsh-flow dsh 插件 · 执行流程图：把当前会话的执行过程画成实时三泳道流程图（回合/用户/助手/工具/审批/重试），子代理发散-收敛扇形 + 双击下钻子流程，SSE 事件驱动直播 | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-26 00:13 |
| @PanChengN/dsh-plugin-session-delete 给 DSH 侧栏会话菜单加一行「删除会话」：真正从磁盘删除会话记录、派生缓存与子智能体会话（非官方插件） | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-26 02:13 |
| @yknBugs/dsh-manual-approval A DSH Plugin that add a new permission that every tool call opens an approval card first | 需注意 | warn | 0/9/13 | 0/0 | 2026-09-26 02:13 |
| @notf0und/dsh-opencode-sounds DSH plugin: opencode's notification sound pack for the DSH Web UI (fork of @ai-galaxy/dsh-sound) | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 02:13 |
| @dxww123/dsh-alphasolve Session-scoped AlphaSolve workflow for DSH | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-26 02:13 |
| @leolee9086/dsh-viz DSH 可视化卡面插件：把数据画成会话里的一张图（时间线、关系网、日历、ECharts、图册） | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 04:13 |
| @mpetruc/dsh-vcc Deterministic VCC compaction for DSH | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 04:13 |
| @win10ogod/dsh-fount-memory Fount-inspired memory plugin for DSH with in-turn recall and no autonomous conversation turns | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-26 04:13 |
| @ZhaoAndy821/dsh-motion-background DSH WebUI 的动态背景插件：着色器型（GLSL 实时演算）与媒体型（MP4/WebM/GIF/图片）两类效果，每个效果是 mods/ 下的一个文件夹。Dynamic backdrops for the DSH WebUI. | 需注意 | warn | 2/3/13 | 0/0 | 2026-09-26 04:13 |
| @win10ogod/dsh-evidence-first-knowledge-work Evidence-first knowledge work skill packaged as a DSH plugin | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 04:13 |
| @win10ogod/dsh-fount-reality Autonomous screen attention and private background Agent loop for DSH | 需注意 | warn | 0/2/5 | 0/0 | 2026-09-26 04:13 |
| @miqian-nomad/dsh-browser-playwright-codex Codex-merged dsh-browser-playwright (compiled-only fork for DSH) + full diagnosis and patches for the 'minimized browser window gets yanked back' bug. 面向 DSH 的浏览器插件整合版 + 最小化窗口被拽回桌面的诊断与补丁。 | 需注意 | warn | 0/1/15 | 0/0 | 2026-09-26 04:13 |
| @sozercaniekosmosa/dsh-plugin-npm-run-shell | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 04:13 |
| @shiyan688/dsh-paperdesk DSH paper workbench: arXiv search → local library (metadata/PDF/full text) → L1/L2/L3 three-layer reading notes. Host + browser halves in one package, no build step. | 需注意 | warn | 0/4/7 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-wifi-access Host-side mobile access for DSH: 3081 reverse proxy (0.0.0.0:3081 -> 127.0.0.1:3080) + mobile browser shims; the UI lives in dsh-pocket · 移动端访问 host 侧实现与 3081 反代热备（界面由 dsh-pocket 提供） | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-hot-memory Projects Mnemon USER.md / MEMORY.md into every session system prompt · 把 Mnemon 的 USER.md / MEMORY.md 投影进每个会话的 systemPrompt | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 06:13 |
| @ardesp0630/dsh-work-progress Persistent work-progress row for DSH: task completion, a progress bar, and what the agent is doing right now. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 06:13 |
| @FlyingBamboo/dsh-pkg-atlas DSH 本机代码包依赖图谱（开发工具）：把已安装的 @deepseek-ai/* 包与第三方插件的依赖、挂载关系画成区-组-包三层交互图，支持聚焦、拖拽布局与中英切换。零运行时依赖，内置 cytoscape，断网可用。 | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-lan-services LAN service manager: probes ports 3090-3099, lists titles and LAN URLs, one-click start/stop · 局域网服务管理器：探测 3090~3099 端口段的本地 HTTP 服务，一键启停 | 需注意 | warn | 0/4/6 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-restart-button Session-header two-click Restart DSH button that restarts exactly this instance · 会话头两击确认「重启 DSH」，按本进程身份重启同一实例 | 需注意 | warn | 0/1/4 | 0/0 | 2026-09-26 06:13 |
| @win10ogod/dsh-agent-browser | 需注意 | warn | 0/2/11 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-literature-search Model-callable literature_search tool (OpenAlex by citation count + arXiv by relevance) · 模型可调用的 literature_search 工具（OpenAlex 被引排序 + arXiv 相关度） | 需注意 | warn | 0/1/2 | 0/0 | 2026-09-26 06:13 |
| @noahchalifour/dsh-anthropic-image-clamp DSH plugin: downscale images on Claude requests so many-image requests never hit the 2000px limit | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-skill-sets Group skills into task-type sets: switching a set swaps the injected skill list (catalog + body shadowed) · 技能档：按任务类型分档，切档即换注入的技能清单 | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-extensions-panel Registers a virtual-display toggle card in the sidebar Extensions tab · 在左栏「功能」Tab 注册虚拟显示器开关卡片 | 需注意 | warn | 0/1/3 | 0/0 | 2026-09-26 06:13 |
| @miseryrua/dsh-wb-memory 给 DSH 里的 Agent 一份跨会话长期记忆：真值源是工作区里的纯 Markdown，无向量库、无外部服务、零运行时依赖；每回合按预算分层注入 systemPrompt，后台自动流水 → 提炼 → 整理 → 治理。 | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-26 06:13 |
| @Headmaster218/dsh-llm-moe4all Local MoE4All engine provider for DSH. / DSH MoE4All | 需注意 | warn | 0/6/17 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-archive-button Sidebar archive button: two-click confirm, zips sessions idle for more than 3 days and deletes the originals · 侧栏归档按钮：两击确认，把空闲超过 3 天的会话打包并删除原目录 | 需注意 | warn | 0/1/3 | 0/0 | 2026-09-26 06:13 |
| @Ln1m/dsh-local-file-search Adds a machine-wide file search to the composer @ menu (hits never enter the file tree or workspace index) · 在 @ 列表加「搜索本机文件」，全机一次性搜索，不进文件栏与工作区索引 | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-26 06:13 |
| @Iambatman1928/dsh-lawagent-ui ????????? lawagent-ui:??????????(DSH ??) | 需注意 | warn | 0/3/2 | 0/0 | 2026-09-26 08:13 |
| @huguangyu666/dsh-plugin-android-emulator DSH plugin: port of the ZCode official android-emulator plugin — 23 Android build / emulator / ADB / UI-Automator MCP tools + the android-dev skill | 需注意 | warn | 0/1/1 | 0/0 | 2026-09-26 08:13 |
| @linanbuan/dsh-usage 用量 · Usage — DSH 设置面板：当日/累计 token 用量、缓存命中、历史日历，以及 kimi-coding / commandcode 的额度与刷新时间。 A DSH settings panel: token usage, cache hits, a history calendar, and provider quotas. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-26 08:13 |
| @xlxs123/dsh-session-multiselect DSH Desktop plugin: multi-select panel for conversations ??grouped by workspace, batch delete / fork / export / summarize / pin / archive. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 08:13 |
| @pure-craft/dsh-actions Deterministic project actions for people and agents — a DSH Web plugin. One actions.json, two surfaces: a right-sidebar panel and agent tools. | 低风险 | pass | 0/0/5 | 0/0 | 2026-09-26 08:13 |
| @Lequait/dsh-proxy-router Direct-first fetching with automatic proxy fallback for DSH. 订阅链接 → 本地内核 → 直连优先、失败自动切代理 | 需注意 | warn | 0/8/8 | 0/0 | 2026-09-26 08:13 |
| @Lequait/dsh-glm-web 非官方的智谱清言（chatglm.cn）网页版 provider for DSH —— 用网页版登录态与积分驱动 agent。Unofficial Zhipu Qingyan web provider for dsh. | 低风险 | pass | 0/0/5 | 0/0 | 2026-09-26 08:13 |
| @DSH-PackForge/dsh-pack-plugin | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-26 08:13 |
| @s-huizhuy-u/dsh-github-sync Publish a DSH workspace to GitHub: create the repo, initialize git, commit, and push — with the token held in the DSH credential store. | 需注意 | warn | 0/1/8 | 0/0 | 2026-09-26 08:13 |
| @longgege-cd/dsh-skin-pixel-anime Pixel-anime skin plugin for DSH web UI: palettes, pixel fonts (incl. simplified Chinese), corner presets, pixel clock. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 08:13 |
| @HapyRain/dsh-router-laya Auto tier routing for DSH: a locally fine-tuned model picks low/high/max thinking effort per message. Private, <1s, no cloud. 自动档位路由 | 需注意 | warn | 0/11/17 | 0/0 | 2026-09-26 08:13 |
| @re-ITRT/dsh-skill-mcp-panel A Skill list and MCP server manager for DSH, mounted as a sidebar panel and themed entirely from the host's own design tokens. | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-26 08:13 |
| @eighteentang/dsh-plugin-dev-tools DSH 开发工具箱：界面元素定位（Alt+悬浮）、随插件分发的开发经验库、开发模式自检清单注入 | 需注意 | warn | 1/10/12 | 0/0 | 2026-09-26 10:13 |
| @bruceyork00-a11y/PinMe Just Pin a model to Favorites, so you dont need to choose it from menu. (Dsh plugin) | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-26 10:13 |
| @Billwu18/dsh-cache-hit-monitor Live prompt-cache telemetry for the current session in the DSH right sidebar: a register bank, a dot-matrix hit rate and a reactor-core history board. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 10:13 |
| @superSizzzz/dsh-think-budget DSH 插件：给单步思考一个字数预算，连续几步没有可见结论时强制先给结论再继续 | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-26 10:13 |
| @plumeume/dsh-copilot-key 把笔记本的 Copilot 硬件键变成启动/唤起 DSH：自研按键钩子 + DSH 管理器插件（dsh-copilot-key，已发布 npm） | 需注意 | warn | 0/2/2 | 0/0 | 2026-09-26 10:13 |
| @jonah791/dsh-temporal-self 时间自我模型 T1 时距注入（距主人上条 / 距自圈 / 今日已醒）——注入坐标，不假装感觉 | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-26 10:13 |
| @Daniel92Q/dsh-sidebar-footer-stack DSH plugin: stacks the sidebar footer slot entries vertically, unifies their card chrome, and lets you drag them to reorder. | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-26 10:13 |
| @pgnqukezrdxmhjso/dsh-llm-codebuddy-power 功能齐全的 CodeBuddy（WorkBuddy）提供者插件。 A full-featured CodeBuddy (WorkBuddy) provider plugin. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 12:13 |
| @jevgpt/dsh-plugin-locale-tr Turkish (tr) language pack for the DSH web GUI - 45 namespaces, 1,870 UI strings, no core changes | 低风险 | pass | 0/0/3 | 0/0 | 2026-09-26 12:13 |
| @superSizzzz/dsh-feishu-bridge Two-way bridge between DSH and a Feishu / Lark bot: stage conclusions out, messages in, work summary at the end. | 需注意 | warn | 0/1/8 | 0/0 | 2026-09-26 12:13 |
| @Lgv-H/dsh-maibot-plugin-writer DSH 插件：让 DSH自己编写、校验、安装麦麦（MaiBot）插件。5 个 maibot_* 工具 + 随包 skill，能力白名单与 SDK 方法表实时取自本机 MaiBot | 需注意 | warn | 0/1/4 | 0/0 | 2026-09-26 12:13 |
| @Snowy117/dsh-direnv Load each workspace's direnv environment into every DSH command. 让 DSH 每个工作区的子进程自动带上该工作区的 direnv 环境。 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 12:13 |
| @YYK0402/dsh-siyuan-archive | 需注意 | warn | 0/4/12 | 0/0 | 2026-09-26 12:13 |
| @ZhaoZeW/dsh-rollback TRAE-style conversation rollback for DSH: per-turn checkpoints, in-place context truncation, and an affected-file diff preview. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-26 12:13 |
| @Planckbaka/dsh-plugin-github-workflows GitHub workflows for DSH: repos, PRs, issues, commits, releases, Actions, Codespaces, search & raw gh api - one plugin on the GitHub CLI | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 12:13 |
| @18569663yz-web/dsh-plugin-crypto-ticker DSH 侧边栏左下角的实时加密货币行情卡片：BTC / ETH / SOL / JUP 的价格、24h 涨跌幅与 24 点迷你走势图，价格跳动带脉冲反馈，零依赖、免密钥。A live crypto ticker card in the DSH sidebar footer, above the balance and Settings - zero dependencies, no API key. | 需注意 | warn | 0/1/5 | 0/0 | 2026-09-26 12:13 |
| @Zioove/gpt-6-astra-dsh-preset DSH agent preset + bundle plugin: the GPT-6 / Codex Astra persona on dsh standard toolset, with a preset-local reference skill and a slim spawned-subagent persona | 需注意 | warn | 0/3/2 | 0/3 | 2026-09-26 12:13 |
| @rinDBeans/codex-ui DSH Web 的 Codex 化界面插件 · A Codex-style interface plugin for DSH Web | 需注意 | warn | 0/3/22 | 0/0 | 2026-09-26 12:13 |
| @EXarchive/DshLauncher DSH 桌面控制台 —— 单文件便携，双击即用 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 12:13 |
| @dienlanhvietnam-lang/deepseek-harness-vietnamese Vietnamese language pack for DSH with complete localization, CI verification and upstream tracking. | 低风险 | pass | 0/0/1 | 0/0 | 2026-09-26 14:13 |
| @kangtsang/dsh-worktree-space dsh-worktree-space is a DSH plugin that creates isolated multi-repo workspaces for AI agents using Git worktrees. Each task gets its own workspace containing separate worktrees for every repository, enabling parallel agents to work without file conflicts, context pollution, or tangled commits. | 低风险 | pass | 0/0/2 | 0/0 | 2026-09-26 14:13 |
| @overact/dsh-context-management Windowed compaction, session-private notes and paged history recall for DSH | 低风险 | pass | 0/0/4 | 0/0 | 2026-09-26 14:13 |
| @ArthurZhou/dsh-plugin-model-hub A DSH web plugin that adds a Model Hub settings page for configuring | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @weibaohui/dsh-matrix dsh 插件 · 黑客帝国数字雨：对话窗口铺上经典字符雨背景，token 原文掺进雨里，雨势随 agent 活跃度起伏 | 低风险 | pass | 0/0/6 | 0/0 | 2026-09-26 14:13 |
| @HuaimaoCy/dsh-codex-chatgpt Use the Codex desktop app's ChatGPT models inside DSH: a first-class LLM provider plus conversation-access tools, reusing the desktop app's own ChatGPT sign-in. | 低风险 | pass | 0/0/7 | 0/0 | 2026-09-26 14:13 |
| @HuaimaoCy/dsh-agent-hub DSH plugin: run several agents on different models at once, with a shared real-time progress board. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @liuyun847/dsh-host-restart DSH 宿主插件:给模型一个 restart_dsh 工具,重启 dsh 后自动恢复原会话续跑 | 需注意 | warn | 0/1/3 | 0/0 | 2026-09-26 14:13 |
| @Neo65536-engineer/dsh-agent-log Read-only work reports for DSH: reconstruct what an agent task actually did from session logs — tools used, files read/written, commands run, test results, failures, token usage, and whether it finished. Fully offline, no API key, no data leaves your machine. | 需注意 | warn | 3/0/11 | 0/0 | 2026-09-26 14:13 |
| @functy23/dsh-mcp-studio DSH 的 MCP 服务与 Skills 管理器：面板里增删改 MCP 行、扫描导入其他 Agent 配置、管理 Skills（DSH Web 插件） | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @liuyun847/dsh-client-ui-session-rail DSH Web 客户端插件:侧边栏收起时在左侧空白区竖排显示活跃会话横条 | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @sunzphy/dsh-sidebar-status DeepSeek account wallet balance and the live peak/off-peak billing period, in a fixed status region at the sidebar foot — plus a one-click official top-up link. | 低风险 | pass | 0/0/0 | 0/0 | 2026-09-26 14:13 |
| @1497105876/dsh-text-inject dsh 插件：在官方设置页把文字注入系统提示词 / 会话上下文，独立文件存储，热加载 + 历史备份 · Inject text into the DSH system prompt or session context from a Settings page | 需注意 | warn | 0/4/1 | 0/0 | 2026-09-26 16:13 |
| @seanchen88/dsh-pluginHive DSH的自定义插件（包括MCP工具、技能管理面板等） | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @lovezi0/dsh-workspace-acl-allow 处理沟槽的dsh Windows 的 DACL（Discretionary Access Control List，自主访问控制列表）必须显式授予的问题 | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @VoodooB0Ys/dsh-desktop-notify DSH 的 Windows 桌面提醒：需要授权 / 提问 / 完成 / 出错 / 被中止时在屏幕角落弹出提醒，点一下回到对应对话 | Windows desktop reminders for DSH, with click-to-open. | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @GIN0076/dsh-token-usage 📊 Token usage dashboard for DSH Settings — daily/weekly/monthly per-model token stats with line & bar charts. Local-first, zero deps, pure SVG. DSH 设置面板词元用量统计插件 | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @Aicksion/dsh-clean-desktop-shell-pro Enhanced fork of dsh-clean-desktop-shell: auto-start backend, no browser tab, ask-before-quit on exit, parallel cold start. | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @shuiiiiimu/dsh-selfharness DSH 上的 Harness 层自我改进插件 | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-26 16:13 |
| @HuaimaoCy/dsh-memory-vault Knowledge and memory vault for DSH: memory groups with automatic summarization, free assignment between conversation memory and the knowledge base, priorities, a base-prompt layer, and AI curation. | 低风险 | pending | 0/0/0 | 0/0 | 2026-09-26 16:13 |
静态启发式扫描 + 语义清单审计，非完整安全审计；不执行代码、不解析依赖。风险等级映射与站点一致：secrets/外泄/破坏性/挖矿类 critical 为"严重"，其余 critical 级与警告归入"需注意"（medium）。
历史日报归档
42 期2026-09-2763 新增0 严重23 需注意2026-09-26当前84 新增0 严重29 需注意2026-09-2545 新增1 严重24 需注意2026-09-240 新增0 严重0 需注意2026-09-2379 新增0 严重29 需注意2026-09-2259 新增1 严重18 需注意2026-09-2165 新增0 严重23 需注意2026-09-20104 新增1 严重34 需注意2026-09-1981 新增0 严重36 需注意2026-09-1872 新增0 严重14 需注意2026-09-1770 新增1 严重24 需注意2026-09-1567 新增2 严重32 需注意2026-09-1482 新增1 严重30 需注意2026-09-1343 新增0 严重15 需注意2026-09-1284 新增0 严重29 需注意2026-09-1131 新增0 严重12 需注意2026-09-1096 新增1 严重17 需注意2026-09-0948 新增0 严重15 需注意2026-09-08922 新增2 严重301 需注意2026-09-0743 新增0 严重15 需注意2026-09-0614 新增0 严重3 需注意2026-09-0565 新增0 严重20 需注意2026-09-044 新增0 严重0 需注意2026-09-0377 新增0 严重30 需注意2026-09-0285 新增0 严重19 需注意2026-09-010 新增0 严重0 需注意2026-08-300 新增0 严重0 需注意2026-08-290 新增0 严重0 需注意2026-08-28444 新增1 严重87 需注意2026-08-2733 新增0 严重15 需注意2026-08-26253 新增0 严重74 需注意2026-08-25336 新增1 严重106 需注意2026-08-24327 新增4 严重79 需注意2026-08-23370 新增2 严重119 需注意2026-08-2212 新增0 严重6 需注意2026-08-212656 新增8 严重509 需注意2026-08-20597 新增5 严重160 需注意2026-08-191301 新增12 严重402 需注意2026-08-184003 新增22 严重1352 需注意2026-08-17142 新增1 严重49 需注意2026-08-16189 新增0 严重80 需注意2026-08-15348 新增5 严重166 需注意
这份日报覆盖什么？
这份日报覆盖 2026-09-26 首次被 dsh.so 收录的插件。对每个新增插件记录名称、风险等级、扫描结论、严重/警告/提示发现数、manifest 审计信号和收录时间。此前已在插件市场中的插件不会包含在内。
风险等级是如何划分的？
风险等级沿用站点的公开模型。密钥、外传、破坏性或挖矿类 critical 判为“严重”，其余 critical 判为“高风险”；medium 与 low 分别表示需要关注和当前无发现。
为什么这不是完整安全审计？
日报是静态启发式扫描加 manifest 审计，不执行代码，也不解析依赖，因此不能证明插件绝对安全。请用它来优先安排检查，而不是替代检查。
来源：dsh.so 安全标准 · 由 dsh.so 维护 · 发布于